From 8afc748e18b4b9798e986be40c1fdf82b0e09a3f Mon Sep 17 00:00:00 2001
From: Magnus Hagander <magnus@hagander.net>
Date: Tue, 23 Feb 2021 11:20:48 +0100
Subject: [PATCH] Add allowed query parameters for oauth logins

I forgot to "git add" this file :/
---
 pgweb/account/oauthclient.py | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/pgweb/account/oauthclient.py b/pgweb/account/oauthclient.py
index 9f8fff35..ca13ceaf 100644
--- a/pgweb/account/oauthclient.py
+++ b/pgweb/account/oauthclient.py
@@ -7,6 +7,7 @@ import os
 import sys
 
 from pgweb.util.misc import get_client_ip
+from pgweb.util.decorators import queryparams
 from pgweb.core.models import UserProfile
 
 import logging
@@ -283,6 +284,7 @@ def oauth_login_twitter(request):
         _twitter_auth_data)
 
 
+@queryparams('code', 'state', 'next')
 def login_oauth(request, provider):
     fn = 'oauth_login_{0}'.format(provider)
     m = sys.modules[__name__]
-- 
2.39.5