Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

fix: require redirect_uri for OpenID Connect calls #814

Merged
merged 5 commits into from
Sep 16, 2024
Merged

fix: require redirect_uri for OpenID Connect calls #814

merged 5 commits into from
Sep 16, 2024

Commits on Aug 4, 2023

  1. fix: openid ignores missing redirect uri 

    Fixes an issue where Authorize Requests which were intended for an OpenID Connect 1.0 client would incorrectly be allowed when missing the redirect URI when it's required by the specification.
    @james-d-elliott
    james-d-elliott committed Aug 4, 2023
    Configuration menu
    Copy the full SHA
    4273501 View commit details
    Browse the repository at this point in the history

Commits on Aug 30, 2023

  1. test: add tdd test

    @james-d-elliott
    james-d-elliott committed Aug 30, 2023
    Configuration menu
    Copy the full SHA
    63c797c View commit details
    Browse the repository at this point in the history

Commits on Dec 2, 2023

  1. Merge branch 'master' into fix-oidc-redirect-uri

    @james-d-elliott
    james-d-elliott authored Dec 2, 2023
    Configuration menu
    Copy the full SHA
    37f4ada View commit details
    Browse the repository at this point in the history

Commits on Feb 13, 2024

  1. Merge branch 'master' into fix-oidc-redirect-uri

    @james-d-elliott
    james-d-elliott authored Feb 13, 2024
    Configuration menu
    Copy the full SHA
    14f50b3 View commit details
    Browse the repository at this point in the history

Commits on Jul 9, 2024

  1. fix: require redirect_uri for OpenID Connect calls 

    Fixes an issue where Authorize Requests which were intended for an OpenID Connect 1.0 client would incorrectly be allowed when missing the redirect URI when it's required by the specification.

Closes #685
Closes #762

BREAKING CHANGES: Going forward, calls to `/oauth2/auth` which trigger OpenID Connect require the `redirect_uri` query parameter to be set.
    @aeneasr
    aeneasr committed Jul 9, 2024
    Configuration menu
    Copy the full SHA
    86c8ea5 View commit details
    Browse the repository at this point in the history