fix: redirect URI should be the last parameter

oauthlib · Feb 6, 2024 · 68fddcc · 68fddcc
1 parent f9a07c6
commit 68fddcc
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/oauthlib/oauth2/rfc6749/parameters.py b/oauthlib/oauth2/rfc6749/parameters.py
@@ -73,8 +73,6 @@ def prepare_grant_uri(uri, client_id, response_type, redirect_uri=None,
     params = [(('response_type', response_type)),
               (('client_id', client_id))]
 
-    if redirect_uri:
-        params.append(('redirect_uri', redirect_uri))
     if scope:
         params.append(('scope', list_to_scope(scope)))
     if state:
@@ -87,6 +85,9 @@ def prepare_grant_uri(uri, client_id, response_type, redirect_uri=None,
         if kwargs[k]:
             params.append((str(k), kwargs[k]))
 
+    if redirect_uri:
+        params.append(('redirect_uri', redirect_uri))
+
     return add_params_to_uri(uri, params)