Pass redirect_uri fields in POST. Use full URL

Pass in the missing redirect_uri value along with login data. Use the
full URI (complete with request args) as the form's action.

This resolves the error raised when wrong credentials are provided.

1 files changed, 6 insertions, 1 deletions

diff --git a/gn_auth/templates/oauth2/authorise-user.html b/gn_auth/templates/oauth2/authorise-user.html
index b9284e5..c3842bf 100644
--- a/gn_auth/templates/oauth2/authorise-user.html
+++ b/gn_auth/templates/oauth2/authorise-user.html
@@ -7,8 +7,13 @@
 {%block content%}
 {{flash_messages()}}
 
-<form method="POST" action="{{url_for('oauth2.auth.authorise')}}">
+<form method="POST" action="{{url_for(
+                            'oauth2.auth.authorise',
+                            response_type=response_type,
+                            client_id=client.client_id,
+                            redirect_uri=redirect_uri)}}">
   <input type="hidden" name="response_type" value="{{response_type}}" />
+  <input type="hidden" name="redirect_uri" value="{{redirect_uri}}" />
   <input type="hidden" name="scope" value="{{scope | join(' ')}}" />
   <input type="hidden" name="client_id" value="{{client.client_id}}" />
   <p>