-require "oauth/controllers/provider_controller"
-
class OauthController < ApplicationController
include OAuth::Controllers::ProviderController
any_auth = false
@token.client_application.permissions.each do |pref|
- if params[pref]
+ if params[pref].to_i.nonzero?
@token.write_attribute(pref, true)
any_auth ||= true
else
end
def oauth1_authorize
- override_content_security_policy_directives(:form_action => []) if CSP_ENFORCE || defined?(CSP_REPORT_URL)
+ override_content_security_policy_directives(:form_action => []) if Settings.csp_enforce || Settings.key?(:csp_report_url)
if @token.invalidated?
@message = t "oauth.authorize_failure.invalid"