| 273 | } |
| 274 | |
| 275 | func removeLocalCallbackURLFromClient(ctx context.Context, clientManager auth0.ClientAPI, client *management.Client) error { |
| 276 | callbacks := make([]string, 0) |
| 277 | for _, callbackURL := range client.GetCallbacks() { |
| 278 | if callbackURL != cliLoginTestingCallbackURL { |
| 279 | callbacks = append(callbacks, callbackURL) |
| 280 | } |
| 281 | } |
| 282 | |
| 283 | // No callback URLs to remove, so don't attempt to do so. |
| 284 | if len(client.GetCallbacks()) == len(callbacks) { |
| 285 | return nil |
| 286 | } |
| 287 | |
| 288 | // Can't update a client to have 0 callback URLs, so don't attempt it. |
| 289 | if len(callbacks) == 0 { |
| 290 | return nil |
| 291 | } |
| 292 | |
| 293 | updatedClient := &management.Client{ |
| 294 | Callbacks: &callbacks, |
| 295 | } |
| 296 | return clientManager.Update(ctx, client.GetClientID(), updatedClient) |
| 297 | } |
| 298 | |
| 299 | // generate state parameter value used to mitigate CSRF attacks |
| 300 | // more: https://auth0.com/docs/protocols/state-parameters |