mirror of
https://github.com/baptisteArno/typebot.io.git
synced 2026-06-05 21:04:43 +08:00
c0ffd825e2
- Secure Google Sheets OAuth state with a signed payload, expiry, user binding, and HttpOnly nonce cookie. - Enforce workspace and typebot write authorization before generating consent URLs and before callback side effects. - Scope Google Sheets credential creation and typebot updates in a transaction, and clear the OAuth state cookie after callback. - Add OAuth state verification to the Forge popup flow and centralize OAuth block definition lookup. - Add tests for signed Google Sheets OAuth state parsing and redirect sanitization. |
||
|---|---|---|
| .. | ||
| builder | ||
| docs | ||
| landing-page | ||
| viewer | ||
| workflows | ||