Merge pull request cli#650 from cli/oauth-localhost-callback

mislav · web-flow · commit da4bbe398e14 · 2020-03-16T15:08:23.000+01:00
Avoid redirecting to `localhost` during authorization flow
diff --git a/auth/oauth.go b/auth/oauth.go
@@ -47,7 +47,7 @@ func (oa *OAuthFlow) ObtainAccessToken() (accessToken string, err error) {
 
 	q := url.Values{}
 	q.Set("client_id", oa.ClientID)
-	q.Set("redirect_uri", fmt.Sprintf("http://localhost:%d/callback", port))
+	q.Set("redirect_uri", fmt.Sprintf("http://127.0.0.1:%d/callback", port))
 	// TODO: make scopes configurable
 	q.Set("scope", "repo")
 	q.Set("state", state)
