Change in the treatment of the state parameter in the VALId service (pre-production)

Facebook Facebook Facebook Facebook Share

In order to comply with the recommendations of the OAuth 2.0 standard, and guarantee the compatibility of the VALId service with Moodle integrations, given the possibility of special characters being incorporated in the redirection URL, we have applied the following to the VALId service, in the pre-production/testing environment (valid-pre.aoc.cat):

  • From now on, URL encoding is applied to the “state” parameter, since if the value contains special characters (+, /, =, etc.), it can break the URL or be misinterpreted.
     

Therefore, if in your integrations in the pre-production/testing environment (valid-pre.aoc.cat), you see that you have been affected by this small change, you will have to adapt your integration to support the corresponding encoding for the special characters in the “state” field.

For any questions you may have, you can contact us.

Published in

Subscribe to the AOC newsletter

Receive weekly doses of vitamins to move towards a digital government

Related entries

See all →