Partial fix for #539

This commit is contained in:
Marcus Bointon 2015-10-23 13:32:43 +02:00
parent 45bb9a3636
commit a4b8b91027
1 changed files with 2 additions and 2 deletions

View File

@ -39,7 +39,7 @@ $provider = new League\OAuth2\Client\Provider\Google(
if (!isset($_GET['code'])) {
// If we don't have an authorization code then get one
$authUrl = $provider->getAuthorizationUrl();
$_SESSION['oauth2state'] = $provider->state;
$_SESSION['oauth2state'] = $provider->getState();
header('Location: ' . $authUrl);
exit;
// Check given state against previously stored one to mitigate CSRF attack
@ -59,7 +59,7 @@ if (!isset($_GET['code'])) {
// echo $token->accessToken.'<br>';
// Use this to get a new access token if the old one expires
echo 'Refresh Token: ' . $token->refreshToken;
echo 'Refresh Token: ' . $token->getRefreshToken();
// Unix timestamp of when the token will expire, and need refreshing
// echo $token->expires;