Remove quotes from cookie value in OAuthStateUtils

Refer to #1647
slackapi · Feb 1, 2025 · 2479532 · 2479532
1 parent c77b863
commit 2479532
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/slack_sdk/oauth/state_utils/__init__.py b/slack_sdk/oauth/state_utils/__init__.py
@@ -36,6 +36,7 @@ def is_valid_browser(
         for cookie in cookies:
             values = cookie.split(";")
             for value in values:
-                if value.strip() == f"{self.cookie_name}={state}":
+                 # handle quoted cookie values (e.g. due to base64 encoding)
+                 if value.strip().replace('"', "").replace("'", "") == f"{self.cookie_name}={state}":
                     return True
         return False