diff --git a/README.md b/README.md index d9da3ad..d638bc5 100644 --- a/README.md +++ b/README.md @@ -1,6 +1,8 @@ # OpenID Connect Authentication Helper -This is a small, simple, experimental helper tool that automates the authorization code flow for logging in with an identity provider like GitHub or GitLab. To use this tool, you will have to register an OAuth2 application with you identity provider. Make sure you register the application first before proceeding, then set the callback URL to `{your host}/oauth/callback`. +This is a small, simple, experimental helper tool that automates the authorization code flow for logging in with an identity provider like GitHub or GitLab. This tool acts as an OAuth app, contains client secrets, and should not be exposed to users! + +To use this tool, you will have to register an OAuth2 application with you identity provider. Make sure you register the application first before proceeding, then set the callback URL to `{your host}/oauth/callback`. To get started with the authentication flow, run the following commands: diff --git a/internal/server/server.go b/internal/server/server.go index 663b48a..c4f0a62 100644 --- a/internal/server/server.go +++ b/internal/server/server.go @@ -1,7 +1,6 @@ package server import ( - "davidallendj/oidc-auth/internal/util" "fmt" "net/http" "net/url" @@ -34,7 +33,7 @@ func FetchToken(code string, remoteUrl string, clientId string, clientSecret str "client_id": {clientId}, "client_secret": {clientSecret}, "state": {state}, - "redirect_uri": {util.EncodeURL(strings.Join(redirectUri, ","))}, + "redirect_uri": {strings.Join(redirectUri, ",")}, } res, err := http.PostForm(remoteUrl, data) if err != nil {