The domain restriction has been done by adding parameter `hd` in the function CustomServerOAuth2AuthorizationRequestResolver#authorizationRequest. We still verify if the OAuth2 response has the parameter `hd` to ensure that no client side manipulation has been performed. |
||
|---|---|---|
| .. | ||
| src | ||
| auth-notes | ||
| pom.xml | ||