|
|
|
|
@ -77,8 +77,8 @@ type Config struct {
|
|
|
|
|
// domain.
|
|
|
|
|
AllowedOrigins []string |
|
|
|
|
|
|
|
|
|
// List of allowed headers for CORS requests on discovery, token, and keys endpoint.
|
|
|
|
|
AllowedHeaders []string |
|
|
|
|
// List of allowed headers for CORS requests on discovery, token, and keys endpoint.
|
|
|
|
|
AllowedHeaders []string |
|
|
|
|
|
|
|
|
|
// If enabled, the server won't prompt the user to approve authorization requests.
|
|
|
|
|
// Logging in implies approval.
|
|
|
|
|
@ -217,9 +217,9 @@ func newServer(ctx context.Context, c Config, rotationStrategy rotationStrategy)
|
|
|
|
|
if len(c.SupportedResponseTypes) == 0 { |
|
|
|
|
c.SupportedResponseTypes = []string{responseTypeCode} |
|
|
|
|
} |
|
|
|
|
if len(c.AllowedHeaders) == 0 { |
|
|
|
|
c.AllowedHeaders = []string{"Authorization"} |
|
|
|
|
} |
|
|
|
|
if len(c.AllowedHeaders) == 0 { |
|
|
|
|
c.AllowedHeaders = []string{"Authorization"} |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
allSupportedGrants := map[string]bool{ |
|
|
|
|
grantTypeAuthorizationCode: true, |
|
|
|
|
|