go-sdk/oauthex
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Yaroslav 12cbafe54d
oauthex: oauth discovery checks (#1220)
add extra checks for the default oauth discovery client:
* disallow redirects which downgrade to http
* disallow redirects to localhost or private ip
* disallow the initial call to a private ip
* proxy configuration opts out of dial time checking
2026-09-02 21:07:19 +02:00
..
testdata oauthex: move internal/oauthex to oauthex (#559) 2025-10-07 08:39:49 -04:00
audience.go oauthex: add MatchesResource helper (RFC 9728/8707 audience comparison) (#970) 2026-06-16 15:20:09 +02:00
audience_test.go oauthex: add MatchesResource helper (RFC 9728/8707 audience comparison) (#970) 2026-06-16 15:20:09 +02:00
auth_meta.go mcp: add optional issuer validator for pre-registered client validation (SEP-2352) (#946) 2026-05-29 12:46:34 +00:00
auth_meta_test.go Compare auth server metadata issuer ignoring trailing slash (#955) 2026-05-14 07:26:57 +00:00
client.go mcp: add optional issuer validator for pre-registered client validation (SEP-2352) (#946) 2026-05-29 12:46:34 +00:00
client_test.go mcp: add optional issuer validator for pre-registered client validation (SEP-2352) (#946) 2026-05-29 12:46:34 +00:00
dcr.go oauthex: bound dcr read to 1mb (#1206) 2026-08-28 09:43:05 +02:00
dcr_test.go oauthex: accept 200 in client registration (#877) 2026-04-01 16:51:18 +02:00
discovery_test.go oauthex: oauth discovery checks (#1220) 2026-09-02 21:07:19 +02:00
oauth2.go oauthex: oauth discovery checks (#1220) 2026-09-02 21:07:19 +02:00
oauthex.go all: client side OAuth support (#785) 2026-02-27 15:30:13 +01:00
oauthex_test.go all: stabilize client OAuth support (#861) 2026-03-31 12:36:31 +02:00
resource_meta.go all: stabilize client OAuth support (#861) 2026-03-31 12:36:31 +02:00
resource_meta_test.go all: stabilize client OAuth support (#861) 2026-03-31 12:36:31 +02:00
token_exchange.go all: stabilize client OAuth support (#861) 2026-03-31 12:36:31 +02:00
token_exchange_test.go all: stabilize client OAuth support (#861) 2026-03-31 12:36:31 +02:00
url_scheme_test.go all: stabilize client OAuth support (#861) 2026-03-31 12:36:31 +02:00