6ed81d6774
### What problem does this PR solve? Add OAuth `state` parameter for CSRF protection: - Updated `get_authorization_url()` to accept an optional state parameter - Generated a unique state value during OAuth login and stored in session - Verified state parameter in callback to ensure request legitimacy This PR follows OAuth 2.0 security best practices by ensuring that the authorization request originates from the same user who initiated the flow. ### Type of change - [x] New Feature (non-breaking change which adds functionality) |
||
|---|---|---|
| .. | ||
| apps | ||
| db | ||
| utils | ||
| __init__.py | ||
| constants.py | ||
| ragflow_server.py | ||
| settings.py | ||
| validation.py | ||
| versions.py | ||