-
Notifications
You must be signed in to change notification settings - Fork 2
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Update lstoll/oidc #43
Conversation
Latest version, for JWT access tokens and PKCE. Plus, it has a bundled static client manager - just use that, and drop the local one.
Serve up some info about the user, including an avatar. This will be used by various services to collect profile info.
@@ -11,11 +11,12 @@ require ( | |||
github.com/google/uuid v1.6.0 | |||
github.com/justinas/nosurf v1.1.1 | |||
github.com/lstoll/cookiesession v0.0.0-20240302214249-23c5d01c3fb9 | |||
github.com/lstoll/oidc v0.0.0-20240302161652-ec893a64705d | |||
github.com/lstoll/oidc v1.0.0-alpha.1 |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
v1 when
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
when I stop fucking around lol
} | ||
if len(c.RedirectURL) == 0 { | ||
return fmt.Errorf("issuer %s client %d must set at least one redirectURLs", parsed, ii) | ||
} |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Would be nice to validate early still; could this call IsValidClientID etc at the end?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
redirect URL isn't always needed - I'll add some better validation to the upstream library.
Add userinfo endpoint
Latest version, for JWT access tokens and PKCE. Plus, it has a bundled static client manager - just use that, and drop the local one.