Merge pull request #63 from mystery-man/master

Fixed CSRF issue
ArkeologeN · Apr 5, 2016 · 5ea438f · 5ea438f
2 parents d2f91c9 + e2d5683
commit 5ea438f
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/lib/auth.js b/lib/auth.js
@@ -36,11 +36,12 @@
                 res = null;
             }
 
-            state = encodeURIComponent(state || newState());
+            state = state || newState();
             redirectURI = redirectURI || args.callback;
             states[state] = {
                 redirectURI: redirectURI,
             };
+            state = encodeURIComponent(state);
 
             var url = util.format("https://www.linkedin.com/uas/oauth2/authorization?response_type=code" +
                 "&client_id=%s" +