Humanstate / mojolicious-plugin-oauth2-server / 106

96%

push

travis-ci

implicit grant should put params in a URL fragment

as per the RFC[1], which states:

   If the resource owner grants the access request, the authorization
   server issues an access token and delivers it to the client by adding
   the following parameters to the *fragment* component of the redirection
   URI using the "application/x-www-form-urlencoded" format

rather than in the query string, this will prevent the token and such
ending up in server access logs

[1] https://tools.ietf.org/html/rfc6749#section-4.2.2

3 of 3 new or added lines in 1 file covered. (100.0%)

123 of 129 relevant lines covered (95.35%)

177.17 hits per line