providers/oauth2: lowercase all uris before checking redirect URI

see #249
2020-10-01 10:00:12 +02:00 · 2020-10-01 10:00:12 +02:00 · 2e1849a732
parent 4039e96803
commit 2e1849a732
1 changed files with 3 additions and 1 deletions
--- a/passbook/providers/oauth2/views/authorize.py
+++ b/passbook/providers/oauth2/views/authorize.py
@ -142,7 +142,9 @@ class OAuthAuthorizationParams:
        if is_open_id and not self.redirect_uri:
            LOGGER.warning("Missing redirect uri.")
            raise RedirectUriError()
-        if self.redirect_uri not in self.provider.redirect_uris.split():
+        if self.redirect_uri.lower() not in [
+            x.lower() for x in self.provider.redirect_uris.split()
+        ]:
            LOGGER.warning(
                "Invalid redirect uri",
                redirect_uri=self.redirect_uri,