dex/github at a3235d022a79ba199687701c9ba9ec39f5ec7047 - dex

OpenID Connect (OIDC) identity and OAuth 2.0 provider with pluggable connectors

hacktoberfest identity-provider idp kubernetes oidc

Eric Chiang a3235d022a *: verify "state" field before passing request to callback connectors Let the server handle the state token instead of the connector. As a result it can throw out bad requests earlier. It can also use that token to determine which connector was used to generate the request allowing all connectors to share the same callback URL. Callbacks now all look like: https://dex.example.com/callback Instead of: https://dex.example.com/callback/(connector id) Even when multiple connectors are being used.	10 years ago
..
github.go	*: verify "state" field before passing request to callback connectors	10 years ago

Eric Chiang a3235d022a *: verify "state" field before passing request to callback connectors

Let the server handle the state token instead of the connector. As a
result it can throw out bad requests earlier. It can also use that
token to determine which connector was used to generate the request
allowing all connectors to share the same callback URL.

Callbacks now all look like:

    https://dex.example.com/callback

Instead of:

    https://dex.example.com/callback/(connector id)

Even when multiple connectors are being used.

10 years ago

github.go

*: verify "state" field before passing request to callback connectors

10 years ago