The connect flow page goes on only to the authorize URL stored on the flow, so a crafted link cannot choose the client or the callback #69

tdobbertin-espo opened this 18d ago view on origin

Check · Review · Land · Live — No review yet. Next: reviewer, no review yet.

Merges on the origin

fix/connect-flow-stored-target → main 0 commits

Merge on the origin. This repository mirrors trevato-apps/forge, which is truth for it. Merge there and the next sync brings back the merge commit it actually made. Open on the origin

A guest

This pull comes from a guest: its preview runs without the app's variables or a forge token until a person who can write here approves it.

This pull cannot land as it is, whatever its review says, because it changes guarded paths: (the diff) (it could not be read).

No changes.