diff --git a/apps/backend/src/app/api/latest/auth/oauth/authorize/[provider_id]/route.tsx b/apps/backend/src/app/api/latest/auth/oauth/authorize/[provider_id]/route.tsx index aca1a9b49..460477d26 100644 --- a/apps/backend/src/app/api/latest/auth/oauth/authorize/[provider_id]/route.tsx +++ b/apps/backend/src/app/api/latest/auth/oauth/authorize/[provider_id]/route.tsx @@ -47,7 +47,7 @@ export const GET = createSmartRouteHandler({ code_challenge: yupString().defined(), code_challenge_method: yupString().defined(), response_type: yupString().defined(), - }).defined(), + }).noUnknown(/* Allow unknown query params such as ttclid, other stuff that's being injected by browsers */ false).defined(), }), response: yupObject({ // we never return as we always redirect