From 3a805d071a4a84371b9bc674839d2511dd9aa4d3 Mon Sep 17 00:00:00 2001 From: AJ ONeal Date: Wed, 5 Apr 2017 19:02:06 -0600 Subject: [PATCH] set provider_uri and client_uri from session when manually setting --- oauth3.core.js | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/oauth3.core.js b/oauth3.core.js index d918caf..43acd4a 100644 --- a/oauth3.core.js +++ b/oauth3.core.js @@ -628,7 +628,7 @@ function fetch() { if (preq.session) { // TODO check session.token.aud against preq.url to make sure they match - console.warn("[security] session audience checking has not been implemented yet (it's up to you to check)"); + //console.warn("[security] session audience checking has not been implemented yet (it's up to you to check)"); preq.headers = preq.headers || {}; preq.headers.Authorization = 'Bearer ' + (preq.session.access_token || preq.session.accessToken); } @@ -1086,6 +1086,8 @@ if (!me._providerUri) { throw new Error("'providerUri' was not supplied"); } + opts.session.provider_uri = me._providerUri + opts.session.client_uri = me._clientUri me.session(opts.session, opts.sessionId); } }