fix clearing of oauth state cookie

missing path arg
This commit is contained in:
Min RK
2017-09-14 16:01:34 +02:00
parent 3b07bd286b
commit eecec7183e

View File

@@ -774,7 +774,7 @@ class HubOAuthCallbackHandler(HubOAuthenticated, RequestHandler):
next_url = None
if arg_state or cookie_state:
# clear cookie state now that we've consumed it
self.clear_cookie(self.hub_auth.state_cookie_name)
self.clear_cookie(self.hub_auth.state_cookie_name, path=self.hub_auth.base_url)
if isinstance(cookie_state, bytes):
cookie_state = cookie_state.decode('ascii', 'replace')
# check that state matches