Details
-
Suggestion
-
Resolution: Done
-
P2: Important
-
5.8, 5.9.0, 5.10.0, 5.10.1
-
None
-
c85304484261af2fc046c909087549799a5979f9 (qt/qtnetworkauth/5.12)
Description
When I'm using QOAuth2AuthorizationCodeFlow, together with the QOAuthHttpServerReplyHandler, it uses http://localhost:{PORT}/ as the redirect uri. However, in section 8.3 of RFC 8252 (https://tools.ietf.org/html/rfc8252#section-8.3), it is specifically NOT RECOMMENDED to use localhost, but instead to use 127.0.0.1.
I would say that it is better to follow this by default, but at least make it configurable.
Attachments
Issue Links
- is replaced by
-
QTBUG-130159 [Reg 6.6.3 -> 6.7] QOAuth2AuthorizationCodeFlow uses "localhost" as the redirect URI when it should be "127.0.0.1"
- Closed