Potential clash of oauthIds
I am not sure if this a real problem, but I noticed that there is no prefix being added to the `oAuthid` for each provider.
In the case of 2 providers using the same id for different users, this would cause potential security issues.
A potential solution would be, to prefix the oauthId with the name of the oauth provider.
(My provider just using incrementing IDs starting with 1, so that has the potential to clash with others...)
关闭于 2024-11-07 1 条评论