obsidian-plugin/heymoosh_ticktick-quick-add-obsidian
1
0
Fork 0
mirror of https://github.com/heymoosh/ticktick-quick-add-obsidian.git synced 2026-07-22 05:43:55 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
heymoosh_ticktick-quick-add.../index.html

36 lines
1.1 KiB
HTML
Raw Permalink Normal View History

Added index.html
2025-04-13 20:18:30 +00:00
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<title>TickTick OAuth Callback</title>
</head>
<body>
<h1>Authorization Complete</h1>
<p id="message">Processing...</p>
Enable mobile compatibility with seamless OAuth deep-link - Flip isDesktopOnly to false in manifest.json; the runtime code uses only platform-safe APIs (requestUrl, crypto.subtle, URLSearchParams). - Register obsidian://ticktick-callback protocol handler so the OAuth redirect returns directly into Obsidian on desktop and mobile, removing the manual copy-paste step. - Verify state parameter against tempState to mitigate CSRF, and clear tempCodeVerifier/tempState after a successful exchange. - Update Vercel callback pages (callback.html, index.html) to redirect to the obsidian:// deep link instead of displaying the code as text. Note: the deployed Vercel page must be redeployed for users to see the new behavior. - Drop the now-vestigial "Authorization code" paste field from the settings UI.
2026-05-10 23:41:32 +00:00
<p id="fallback" style="display:none">
If Obsidian did not open automatically,
<a id="deeplink" href="#">tap here to return to Obsidian</a>.
</p>
Added index.html
2025-04-13 20:18:30 +00:00
<script>
const params = new URLSearchParams(window.location.search);
const code = params.get('code');
const state = params.get('state');
Enable mobile compatibility with seamless OAuth deep-link - Flip isDesktopOnly to false in manifest.json; the runtime code uses only platform-safe APIs (requestUrl, crypto.subtle, URLSearchParams). - Register obsidian://ticktick-callback protocol handler so the OAuth redirect returns directly into Obsidian on desktop and mobile, removing the manual copy-paste step. - Verify state parameter against tempState to mitigate CSRF, and clear tempCodeVerifier/tempState after a successful exchange. - Update Vercel callback pages (callback.html, index.html) to redirect to the obsidian:// deep link instead of displaying the code as text. Note: the deployed Vercel page must be redeployed for users to see the new behavior. - Drop the now-vestigial "Authorization code" paste field from the settings UI.
2026-05-10 23:41:32 +00:00
const messageEl = document.getElementById('message');
Added index.html
2025-04-13 20:18:30 +00:00
if (code && state) {
Enable mobile compatibility with seamless OAuth deep-link - Flip isDesktopOnly to false in manifest.json; the runtime code uses only platform-safe APIs (requestUrl, crypto.subtle, URLSearchParams). - Register obsidian://ticktick-callback protocol handler so the OAuth redirect returns directly into Obsidian on desktop and mobile, removing the manual copy-paste step. - Verify state parameter against tempState to mitigate CSRF, and clear tempCodeVerifier/tempState after a successful exchange. - Update Vercel callback pages (callback.html, index.html) to redirect to the obsidian:// deep link instead of displaying the code as text. Note: the deployed Vercel page must be redeployed for users to see the new behavior. - Drop the now-vestigial "Authorization code" paste field from the settings UI.
2026-05-10 23:41:32 +00:00
const target = 'obsidian://ticktick-callback'
+ '?code=' + encodeURIComponent(code)
+ '&state=' + encodeURIComponent(state);
messageEl.innerText = 'Returning you to Obsidian…';
const fallback = document.getElementById('fallback');
const link = document.getElementById('deeplink');
link.href = target;
fallback.style.display = 'block';
window.location.replace(target);
Added index.html
2025-04-13 20:18:30 +00:00
} else {
Enable mobile compatibility with seamless OAuth deep-link - Flip isDesktopOnly to false in manifest.json; the runtime code uses only platform-safe APIs (requestUrl, crypto.subtle, URLSearchParams). - Register obsidian://ticktick-callback protocol handler so the OAuth redirect returns directly into Obsidian on desktop and mobile, removing the manual copy-paste step. - Verify state parameter against tempState to mitigate CSRF, and clear tempCodeVerifier/tempState after a successful exchange. - Update Vercel callback pages (callback.html, index.html) to redirect to the obsidian:// deep link instead of displaying the code as text. Note: the deployed Vercel page must be redeployed for users to see the new behavior. - Drop the now-vestigial "Authorization code" paste field from the settings UI.
2026-05-10 23:41:32 +00:00
messageEl.innerText = 'Authorization failed or was canceled. Please try again.';
Added index.html
2025-04-13 20:18:30 +00:00
}
</script>
</body>
Enable mobile compatibility with seamless OAuth deep-link - Flip isDesktopOnly to false in manifest.json; the runtime code uses only platform-safe APIs (requestUrl, crypto.subtle, URLSearchParams). - Register obsidian://ticktick-callback protocol handler so the OAuth redirect returns directly into Obsidian on desktop and mobile, removing the manual copy-paste step. - Verify state parameter against tempState to mitigate CSRF, and clear tempCodeVerifier/tempState after a successful exchange. - Update Vercel callback pages (callback.html, index.html) to redirect to the obsidian:// deep link instead of displaying the code as text. Note: the deployed Vercel page must be redeployed for users to see the new behavior. - Drop the now-vestigial "Authorization code" paste field from the settings UI.
2026-05-10 23:41:32 +00:00
</html>
Reference in a new issue Copy permalink