From yan...@google.com on August 21, 2012 13:42:09

Possible solutions:

Add this to AbstractAuthorizationCodeServlet (deprecating getRedirectUri):

protected void process(AuthorizationCodeRequestUrl authorizationUrl) throws IOException {
}

So you can optionally provide your own implementation like:

@OverRide
protected void process(AuthorizationCodeRequestUrl authorizationUrl) {
authorizationUrl.setRedirectUri("...").setState("foo");
}

Alternatively, add this:

protected String getState(HttpServletRequest req) throws ServletException, IOException {
return null;
}

so you can override as follows:

@OverRide
protected String getState(HttpServletRequest req) {
return "foo";
}

Status: Accepted
Owner: yan...@google.com
Cc: rmis...@google.com
Labels: -Priority-Medium Priority-High Milestone-Version1.11.0 Component-OAuth2

From yan...@google.com on August 23, 2012 08:05:12

http://codereview.appspot.com/6482051

Status: Started
Labels: -Priority-High Priority-Medium

From yan...@google.com on August 27, 2012 06:02:10

Status: Fixed