Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Docs] HTTP response in Implicit Flow with Form Post should be 200 not 302 #10256

Open
MohamadTarekk opened this issue Apr 20, 2023 · 0 comments

Comments

@MohamadTarekk
Copy link

Description

In the documentation, the "OAuth 2.0 Authorization Framework" page, it explains the response_mode parameter in the requests and what response it expects depending on the value of this parameter. When it comes to the form_post value for response_mode parameter, it says:

form_post: 200 OK with response parameters embedded in an HTML form as hidden parameters.

Which makes sense. Because, most of modern browsers (if not all) ignore the payload of the HTTP response if the HTTP response code is 3xx. Meaning that the if the code was a 3xx, the form will not get submitted because it was never loaded.

Meanwhile, in the "Add Login Using the Implicit Flow with Form Post" page, in the "Response" section, it says

If all goes well, you'll receive an HTTP 302 response.

I believe this is a mistake and has to be changed to 200 OK.

Could you please confirm this or explain if I'm incorrect?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant