Merge pull request #130 from SeanZicari/get_or_post_code

Look for code in _GET or _POST explicitly.
auth0 · Dec 30, 2016 · f91c74b · f91c74b
2 parents 561db79 + dfd7e0a
commit f91c74b
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/src/API/Oauth2Client.php b/src/API/Oauth2Client.php
@@ -237,10 +237,11 @@ private function dontPersist($name) {
      * @return Boolean Whether it exchanged the code or not correctly
      */
     public function exchangeCode() {
-        if (!isset($_REQUEST['code'])) {
+        $code = $_GET['code'] ?: $_POST['code'];
+        if (!isset($code)) {
+            $this->debugInfo("No code found in _GET or _POST params.");
             return false;
         }
-        $code = $_REQUEST['code'];
 
         $this->debugInfo("Code: ".$code);