From e3355706247b8dcc2e7feb44e13ab89d1b1eee39 Mon Sep 17 00:00:00 2001 From: bayger Date: Mon, 22 Jun 2026 14:18:40 +0200 Subject: [PATCH] fix: allow extra query params in OAuth2 callback --- src/http/contracts/smtp-imap-oauth2.ts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/http/contracts/smtp-imap-oauth2.ts b/src/http/contracts/smtp-imap-oauth2.ts index 6715821..e924001 100644 --- a/src/http/contracts/smtp-imap-oauth2.ts +++ b/src/http/contracts/smtp-imap-oauth2.ts @@ -17,7 +17,7 @@ export const oauth2AuthorizeResponseSchema = z.strictObject({ state: z.string().describe('Random state parameter for CSRF protection'), }); -export const oauth2CallbackQuerySchema = z.strictObject({ +export const oauth2CallbackQuerySchema = z.object({ code: z.string().min(1).describe('Authorization code from the OAuth2 provider'), state: z.string().min(1).describe('State parameter that was returned from the authorization URL'), });