Issue 14478: Fix OAuth registration with Buffer

diff --git a/src/Security/OAuth.php b/src/Security/OAuth.php
index 2add1ce584f687f74916f24d2190dd8a6cb266b5..9a50a438d7c479925658e231da7dd23f8195c7eb 100644 (file)
--- a/src/Security/OAuth.php
+++ b/src/Security/OAuth.php
@@ -129,8 +129,9 @@ class OAuth
                        return [];
                }
 
-               // The redirect_uri could contain several URI that are separated by spaces.
-               if (($application['redirect_uri'] != $redirect_uri) && !in_array($redirect_uri, explode(' ', $application['redirect_uri']))) {
+               // The redirect_uri could contain several URI that are separated by spaces or new lines.
+               $uris = explode(' ', str_replace(["\n", "\r", "\t"], ' ', $application['redirect_uri']));
+               if (!in_array($redirect_uri, $uris)) {
                        Logger::warning('Redirection uri does not match', ['redirect_uri' => $redirect_uri, 'application-redirect_uri' => $application['redirect_uri']]);
                        return [];
                }