Yaroslav
12cbafe54d
oauthex: oauth discovery checks ( #1220 )
...
add extra checks for the default oauth discovery client:
* disallow redirects which downgrade to http
* disallow redirects to localhost or private ip
* disallow the initial call to a private ip
* proxy configuration opts out of dial time checking
2026-09-02 21:07:19 +02:00
..
testdata
oauthex: move internal/oauthex to oauthex ( #559 )
2025-10-07 08:39:49 -04:00
audience.go
oauthex: add MatchesResource helper (RFC 9728/8707 audience comparison) ( #970 )
2026-06-16 15:20:09 +02:00
audience_test.go
oauthex: add MatchesResource helper (RFC 9728/8707 audience comparison) ( #970 )
2026-06-16 15:20:09 +02:00
auth_meta.go
mcp: add optional issuer validator for pre-registered client validation (SEP-2352) ( #946 )
2026-05-29 12:46:34 +00:00
auth_meta_test.go
Compare auth server metadata issuer ignoring trailing slash ( #955 )
2026-05-14 07:26:57 +00:00
client.go
mcp: add optional issuer validator for pre-registered client validation (SEP-2352) ( #946 )
2026-05-29 12:46:34 +00:00
client_test.go
mcp: add optional issuer validator for pre-registered client validation (SEP-2352) ( #946 )
2026-05-29 12:46:34 +00:00
dcr.go
oauthex: bound dcr read to 1mb ( #1206 )
2026-08-28 09:43:05 +02:00
dcr_test.go
oauthex: accept 200 in client registration ( #877 )
2026-04-01 16:51:18 +02:00
discovery_test.go
oauthex: oauth discovery checks ( #1220 )
2026-09-02 21:07:19 +02:00
oauth2.go
oauthex: oauth discovery checks ( #1220 )
2026-09-02 21:07:19 +02:00
oauthex.go
all: client side OAuth support ( #785 )
2026-02-27 15:30:13 +01:00
oauthex_test.go
all: stabilize client OAuth support ( #861 )
2026-03-31 12:36:31 +02:00
resource_meta.go
all: stabilize client OAuth support ( #861 )
2026-03-31 12:36:31 +02:00
resource_meta_test.go
all: stabilize client OAuth support ( #861 )
2026-03-31 12:36:31 +02:00
token_exchange.go
all: stabilize client OAuth support ( #861 )
2026-03-31 12:36:31 +02:00
token_exchange_test.go
all: stabilize client OAuth support ( #861 )
2026-03-31 12:36:31 +02:00
url_scheme_test.go
all: stabilize client OAuth support ( #861 )
2026-03-31 12:36:31 +02:00