omniauth · Issues· 105 open

Proposal to update wiki documentation on Rails CSRF protection

2.1.4 Does Not Work with Rails 7 Due to OmniAuth::AuthenticityTokenProtection

Unable to validate Authenticity Token when POST `/auth/:provider` to avoid CSRF error

Chrome ignores set-cookie on redirect

`env['omniauth.auth']` is nil when customizing `callback_path`

Failure to complete auth flow when session has SameSite=Strict policy, please store tokens in SameSite=Lax cookies instead

Too hard to preserve POST params prior to request phase

Define multiple auth routes

What's the best way to find a OmniAuth strategy by :name?

Ericqiu1-omniauth

Ericqiu1

Can't override the passthrough route

Omniauth impact on non omniauth routes

request.env['omniauth.auth'] is nil in Omniauth Callback

`Rack::Builder#to_app` is not designed to be called for every request.