François Voron 7cf413cd76 Add a double-submit cookie in the OAuth flow ...

Prevents CSRF attacks by ensuring that the state parameter is tied to a cookie.

Fix https://github.com/fastapi-users/fastapi-users/security/advisories/GHSA-5j53-63w8-8625

2025-12-19 08:26:26 +01:00

..

__init__.py

…

auth.py

…

common.py

Add a double-submit cookie in the OAuth flow

2025-12-19 08:26:26 +01:00

oauth.py

Add a double-submit cookie in the OAuth flow

2025-12-19 08:26:26 +01:00

register.py

…

reset.py

…

users.py

…

verify.py

…