You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
M Hickford 34f509eb7a
Parse OAuth Authorization header when request omits client secret (#21351)
This fixes error "unauthorized_client: invalid client secret" when
client includes secret in Authorization header rather than request body.
OAuth spec permits both.

Sanity validation that client id and client secret in request are
consistent with Authorization header.

Improve error descriptions. Error codes remain the same.

Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>
Co-authored-by: zeripath <art27@cantab.net>
2 years ago
..
2fa.go Refactor auth package (#17962) 3 years ago
auth.go Add support mCaptcha as captcha provider (#20458) 2 years ago
linkaccount.go Add support mCaptcha as captcha provider (#20458) 2 years ago
main_test.go Use a struct as test options (#19393) 2 years ago
oauth.go Parse OAuth Authorization header when request omits client secret (#21351) 2 years ago
oauth_test.go Refactor AssertExistsAndLoadBean to use generics (#20797) 2 years ago
openid.go Add support mCaptcha as captcha provider (#20458) 2 years ago
password.go Make better use of i18n (#20096) 2 years ago
webauthn.go WebAuthn CredentialID field needs to be increased in size (#20530) 2 years ago