Tiger fc8c1a77d3 Validate session key when authorizing with GCP to create a cluster ... It was previously possible to link a GCP account to another user's GitLab account by having them visit the callback URL, as there was no check that they were the initiator of the request. We now reject the callback unless the state parameter matches the one added to the initiating user's session.		2019-02-19 17:21:08 +11:00
..
authorizations_controller.rb