Read params from query or body.

jaredhanson · Feb 24, 2023 · f894692 · f894692
1 parent 5fcd4c5
commit f894692
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/lib/strategy.js b/lib/strategy.js
@@ -156,14 +156,14 @@ OAuth2Strategy.prototype.authenticate = function(req, options) {
     callbackURL: callbackURL
   }
 
-  if (req.query && req.query.code) {
+  if ((req.query && req.query.code) || (req.body && req.body.code)) {
     function loaded(err, ok, state) {
       if (err) { return self.error(err); }
       if (!ok) {
         return self.fail(state, 403);
       }
 
-      var code = req.query.code;
+      var code = (req.query && req.query.code) || (req.body && req.body.code);
 
       var params = self.tokenParams(options);
       params.grant_type = 'authorization_code';
@@ -213,7 +213,7 @@ OAuth2Strategy.prototype.authenticate = function(req, options) {
       );
     }
 
-    var state = req.query.state;
+    var state = (req.query && req.query.state) || (req.body && req.body.state);
     try {
       var arity = this._stateStore.verify.length;
       if (arity == 4) {