From becbbe2be49c87133f511b50c36e17220de32825 Mon Sep 17 00:00:00 2001 From: Marius Mutu Date: Tue, 7 Jul 2026 21:53:36 +0300 Subject: [PATCH] oauth2: fix buton Actualizare - refresh_token acceptat si prin POST body ROACONT refreshToken trimite refresh_token prin POST (anaf_efactura.prg:719), iar originalul citea parametrii cu $_REQUEST (GET+POST). Citirea doar din $_GET rupea butonul: cererea cadea pe redirectul authorize, logincert.anaf.ro cerea certificat client si msxml6 dadea "Access is denied" (1429 nehandled). Deploy-uit si verificat pe productie (POST si GET -> passthrough JSON ANAF). Co-Authored-By: Claude Fable 5 --- oauth2/index.php | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/oauth2/index.php b/oauth2/index.php index ba5c62b..4a3d094 100644 --- a/oauth2/index.php +++ b/oauth2/index.php @@ -60,7 +60,10 @@ function showPage($page_title, $h1_text, $h1_color, $body_text) { // =================================================================== // Citire explicita parametri GET (FR-10: elimina parse_str care injecta variabile) // =================================================================== -$refresh_token = isset($_GET['refresh_token']) ? (string)$_GET['refresh_token'] : ''; +// refresh_token vine din ROA prin POST body (refreshToken - anaf_efactura.prg) sau GET; +// originalul folosea $_REQUEST, deci accepta ambele - citirea doar din $_GET rupe butonul Actualizare +$refresh_token = isset($_POST['refresh_token']) ? (string)$_POST['refresh_token'] + : (isset($_GET['refresh_token']) ? (string)$_GET['refresh_token'] : ''); $code = isset($_GET['code']) ? (string)$_GET['code'] : ''; $state_param = isset($_GET['state']) ? (string)$_GET['state'] : ''; $error_param = isset($_GET['error']) ? (string)$_GET['error'] : '';