RangelReale/osin — pull request #9 by snovgorodsky (2014-02-03 22:25:33+00:00)
Title: unescape uri in HandleAuthorizeRequest

I suggest to unescape redirect uri in handleCodeRequest() and handleTokenRequest().
I think it's safe to assume that people will be storing unescaped client redirect uri (baseUri) in a database, so we need to be consistent and always compare unescaped both baseUri & redirectUri - otherwise, if we get an escaped redirect uri from a login page, ValidateUri() will fail.
Please let me know what you think.