tordans left a comment (openstreetmap/openstreetmap-website#6130)

> Do you have any idea when it changed?

Unfortunately not. I know that it worked when we had the old design because 
that is when we documented the flow in a PDF. 
I looked at the history a bit but nothing stood out to me.

> I think the double `?` is a red herring - there is one parameter who's value 
> is a URL that includes parameters.

I just checked again: Its actually only one `?` and all the rest is encoded in 
the `referrer` param.
The initial URL is

```url
https://master.apis.dev.openstreetmap.org/login
?referer=%2Foauth2%2Fauthorize%3Fclient_id%3DuglV_cJniuc96GQT0-rO6sXsgJPZfat8PLCfv91qRC4%26scope%3Dopenid%2520read_prefs%2520write_prefs%2520write_notes%26response_type%3Dcode%26redirect_uri%3Dhttps%253A%252F%252Fstaging.tilda-geo.de%252Fapi%252Fauth%252Fosm%252Fcallback%26nextauth%3Dosm%252Clogin%26state%3DjIO5g3txGqwx9umk9-zTr7nlhTJ-WxvfWjFqhKcGRF0%26code_challenge%3DQAKZO5APd7JZDsaYnWi1tizaLkUxZjQkivX9IYRbx8E%26code_challenge_method%3DS256
```

Which decodes to …

```url
https://master.apis.dev.openstreetmap.org/login
?referer=/oauth2/authorize
  ?client_id=uglV_cJniuc96GQT0-rO6sXsgJPZfat8PLCfv91qRC4
  &scope=openid%20read_prefs%20write_prefs%20write_notes
  
&response_type=code&redirect_uri=https%3A%2F%2Fstaging.tilda-geo.de%2Fapi%2Fauth%2Fosm%2Fcallback&nextauth=osm%2Clogin
  &state=jIO5g3txGqwx9umk9-zTr7nlhTJ-WxvfWjFqhKcGRF0
  &code_challenge=QAKZO5APd7JZDsaYnWi1tizaLkUxZjQkivX9IYRbx8E
  &code_challenge_method=S256
```

The URL from the email is then…

```
https://master.apis.dev.openstreetmap.org/user/test10tobias/confirm
?confirm_string=eyJfcmFpbHMiOnsiZGF0YSI6WzIyMzUwLCJiZGE1Y2RiZWUxYjYxMjQ4ZDE1Nzg5YjAwNWU0NGFkNGI0ZjRkYjBiNGI1MjI0NGYzMTMyNmQ3ZGExMDZiNzE0Il0sImV4cCI6IjIwMjUtMDctMDJUMDk6Mjc6NTguOTk4WiIsInB1ciI6IlVzZXJcbm5ld191c2VyXG42MDQ4MDAifX0%3D--261db9030dd0adf43c8b204c33f945ca0ce27dd3
&referer=%2Fwelcome%3Foauth_return_url%3D%252Foauth2%252Fauthorize%253Fclient_id%253DuglV_cJniuc96GQT0-rO6sXsgJPZfat8PLCfv91qRC4%2526scope%253Dopenid%252520read_prefs%252520write_prefs%252520write_notes%2526response_type%253Dcode%2526redirect_uri%253Dhttps%25253A%25252F%25252Fstaging.tilda-geo.de%25252Fapi%25252Fauth%25252Fosm%25252Fcallback%2526nextauth%253Dosm%25252Clogin%2526state%253DjIO5g3txGqwx9umk9-zTr7nlhTJ-WxvfWjFqhKcGRF0%2526code_challenge%253DQAKZO5APd7JZDsaYnWi1tizaLkUxZjQkivX9IYRbx8E%2526code_challenge_method%253DS256
```

Which (twice) decodes to…

```url
https://master.apis.dev.openstreetmap.org/user/test10tobias/confirm
?confirm_string=eyJfcmFpbHMiOnsiZGF0YSI6WzIyMzUwLCJiZGE1Y2RiZWUxYjYxMjQ4ZDE1Nzg5YjAwNWU0NGFkNGI0ZjRkYjBiNGI1MjI0NGYzMTMyNmQ3ZGExMDZiNzE0Il0sImV4cCI6IjIwMjUtMDctMDJUMDk6Mjc6NTguOTk4WiIsInB1ciI6IlVzZXJcbm5ld191c2VyXG42MDQ4MDAifX0=--261db9030dd0adf43c8b204c33f945ca0ce27dd3
&referer=/welcome
  ?oauth_return_url=/oauth2/authorize
    ?client_id=uglV_cJniuc96GQT0-rO6sXsgJPZfat8PLCfv91qRC4
      &scope=openid%20read_prefs%20write_prefs%20write_notes
      &response_type=code
      
&redirect_uri=https%3A%2F%2Fstaging.tilda-geo.de%2Fapi%2Fauth%2Fosm%2Fcallback
      &nextauth=osm%2Clogin
      &state=jIO5g3txGqwx9umk9-zTr7nlhTJ-WxvfWjFqhKcGRF0
      &code_challenge=QAKZO5APd7JZDsaYnWi1tizaLkUxZjQkivX9IYRbx8E
      &code_challenge_method=S256
```


-- 
Reply to this email directly or view it on GitHub:
https://github.com/openstreetmap/openstreetmap-website/issues/6130#issuecomment-3004092262
You are receiving this because you are subscribed to this thread.

Message ID: 
<openstreetmap/openstreetmap-website/issues/6130/3004092...@github.com>
_______________________________________________
rails-dev mailing list
rails-dev@openstreetmap.org
https://lists.openstreetmap.org/listinfo/rails-dev

Reply via email to