core/appview/oauth/ at dafebcc64ef1a26e3902e7c65522f78d0b692bb1 · alice.pds.demo.boltless.dev/core · Tangled

alice.pds.demo.boltless.dev / core

0

This repository has no description

0

core / appview / oauth

2 folders 2 files

at dafebcc64ef1a26e3902e7c65522f78d0b692bb1

Mike P appview/oauth: verify "iss" parameter in auth response 1y ago

appview/oauth: verify "iss" parameter in auth response From https://datatracker.ietf.org/doc/html/rfc9207#section-2.4 : "Clients MUST [...] compare the result to the issuer identifier of the authorization server where the authorization request was sent to. [...] If the value does not match the expected issuer identifier, clients MUST reject the authorization response and MUST NOT proceed with the authorization grant." Signed-off-by: Mike P <fentiger@mythik.co.uk>

1 year ago

appview/oauth: verify "iss" parameter in auth response From https://datatracker.ietf.org/doc/html/rfc9207#section-2.4 : "Clients MUST [...] compare the result to the issuer identifier of the authorization server where the authorization request was sent to. [...] If the value does not match the expected issuer identifier, clients MUST reject the authorization response and MUST NOT proceed with the authorization grant." Signed-off-by: Mike P <fentiger@mythik.co.uk>

1 year ago

appview: oauth: clean up router init Signed-off-by: Anirudh Oppiliappan <anirudh@tangled.sh>

1 year ago

appview/oauth: return to original page after login-block when attempting to do an authorized request while logged-out, the auth middleware boots the user to the login page. this page now keeps track of the 'Referer' in the oauth request. once the oauth callback is complete, the user is sent back to the page they came from. Signed-off-by: oppiliappan <me@oppi.li>

1 year ago