 LoneExileandLinus Rath
|
cb5d754113
|
fix(oauth): harden OIDC discovery (timeout, retry, serve-stale)
|
2026-07-16 17:56:19 +02:00 |
|
|
Linus Rath
|
63f2169ae7
|
fix: add OAUTH_ALLOW_PRIVATE_ENDPOINTS for split-DNS setups
|
2026-05-22 17:22:14 +02:00 |
|
|
Linus Rath
|
ecd0467ffa
|
fix: stop pulling node:dns into client bundle via OAuth discovery
|
2026-05-18 19:31:38 +02:00 |
|
|
Linus Rath
|
f134766fd1
|
fix: validate OAuth discovery endpoints against SSRF
|
2026-05-18 12:53:43 +02:00 |
|
|
Linus Rath
|
8bdadc7ba3
|
fix: standardize punctuation
|
2026-04-16 19:07:42 +02:00 |
|
|
Matthieu MALVACHEandMatthieu MALVACHE
|
7b6b8fc132
|
feat(auth): add RP-initiated logout and OAuth unit tests
OAuth logout now terminates the IdP session via end_session_endpoint
with HTTPS-only URL validation. Adds 14 unit tests for PKCE and
OAuth discovery.
|
2026-02-26 00:08:57 +01:00 |
|