Skip to content

fix(oidc): validate ID tokens + PKCE/nonce, stop email auto-link, tokens off URL (OC1/OC2/OH4/OH5)#57

Open
PenguinzTech wants to merge 2 commits into
fix/auth-secrets-configfrom
fix/oidc-hardening
Open

fix(oidc): validate ID tokens + PKCE/nonce, stop email auto-link, tokens off URL (OC1/OC2/OH4/OH5)#57
PenguinzTech wants to merge 2 commits into
fix/auth-secrets-configfrom
fix/oidc-hardening

fix(oidc): pin JWS algorithms in id_token validation (alg confusion)

48a70a4
Select commit
Loading
Failed to load commit list.

Select a check to view from the sidebar