alexbilbie/CodeIgniter-OAuth-2.0-Server — Issue #16: CSRF problem
Author: mephistfaustus
Created: 2012-02-05 03:11:57+00:00
State: open

hi Alex. thx for the code.
I would like to ask a question.

about the default csrf value.
in the sign_in ( libraries/Oauth_client.php , line 35, client side ) , it is recommended to set the $csrf = TRUE.
However, in the validate_client ( libraries/Oauth_auth_server.php , line 93, server side ), when do the db select ,
$client_check_query = $this->CI->db->select(array('name', 'client_id', 'auto_approve'))->get_where('applications', $params);
it will return false due to the redirect_uri which has the oauth_csrf string within and cause the select function fail.

is this incorrect?
thx for helping.