Skip to content

Loosen dependency of Omniauth to allow v2

Stan Hu requested to merge sh-omniauth-2 into master

By default, OmniAuth v2 only allows POST requests and adds CSRF protection by default. The tests were failing because the POST requests were not generating CSRF tokens.

Part of https://gitlab.com/gitlab-org/gitlab/-/issues/30073

Edited by Stan Hu

Merge request reports

Loading