>From 59225412e1d06ae9e165cfde6a4a985cee4fc569 Mon Sep 17 00:00:00 2001 From: Xiyue Deng Date: Sun, 21 Jul 2024 14:54:08 -0700 Subject: [PATCH 3/6] Encode parameters when requesting access * packages/oauth2/oauth2.el (oauth2-request-access): encode all parameters which may contain characters that breaks URL. --- oauth2.el | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/oauth2.el b/oauth2.el index 9780ac3a1d..b035742fc1 100644 --- a/oauth2.el +++ b/oauth2.el @@ -107,10 +107,10 @@ Return an `oauth2-token' structure." (oauth2-make-access-request token-url (concat - "client_id=" client-id + "client_id=" (url-hexify-string client-id) (when client-secret - (concat "&client_secret=" client-secret)) - "&code=" code + (concat "&client_secret=" (url-hexify-string client-secret))) + "&code=" (url-hexify-string code) "&redirect_uri=" (url-hexify-string (or redirect-uri "urn:ietf:wg:oauth:2.0:oob")) "&grant_type=authorization_code")))) (make-oauth2-token :client-id client-id -- 2.39.2