Nick Craig-Wood 349112df6b oauthutil: fix security problem when running with two users on the same machine ... Before this change two users could run `rclone config` for the same backend on the same machine at the same time. User A would get as far as starting the web server. User B would then fail to start the webserver, but it would open the browser on the /auth URL which would redirect the user to the login. This would then cause user B to authenticate to user A's rclone. This changes fixes the problem in two ways. Firstly it passes the state to the /auth call before redirecting and checks it there, erroring with a 403 error if it doesn't match. This would have fixed the problem on its own. Secondly it delays the opening of the web browser until after the auth webserver has started which prevents the user entering the credentials if another auth server is running. Fixes #3573		2019-09-29 10:42:02 +01:00
..
oauthutil.go	oauthutil: fix security problem when running with two users on the same machine	2019-09-29 10:42:02 +01:00
renew.go	build: fix up package paths after repo move	2019-07-28 18:47:38 +01:00