Validates the authorize query. Every failure names the offending parameter so the app developer can see what is wrong without the portal ever echoing an attacker-supplied value back into a redirect.
Raw query object from Fastify.
Live runtime carrying the redirect-URI allow-list.
Procedure with the validated parameters, or the reason it failed.
Validates the authorize query. Every failure names the offending parameter so the app developer can see what is wrong without the portal ever echoing an attacker-supplied value back into a redirect.