exchange

commit 10c779bbc6b50e7eaca813fa920f0c083c275b15
parent 5121c6b1cfd71db641d0de8974091e295c22668a
Author: Christian Grothoff <christian@grothoff.org>
Date:   Sun, 16 Apr 2023 21:25:48 +0200

add FIXME

Diffstat:
M
src/kyclogic/plugin_kyclogic_oauth2.c
 | 
5
+++++

1 file changed, 5 insertions(+), 0 deletions(-)
diff --git a/src/kyclogic/plugin_kyclogic_oauth2.c b/src/kyclogic/plugin_kyclogic_oauth2.c
@@ -514,6 +514,11 @@ initiate_task (void *cls)
                    pd->client_id,
                    redirect_uri_encoded);
   GNUNET_free (redirect_uri_encoded);
+  /* FIXME-API: why do we *redirect* the client here,
+     instead of making the HTTP request *ourselves*
+     and forwarding the response? This prevents us
+     from using authentication on initiation,
+     (which is desirable for challenger!) */
   ih->cb (ih->cb_cls,
           TALER_EC_NONE,
           url,