Repository files (latest commit first)

Filename	Latest commit message	Latest commit date
adam jones 5746e7e99b Remove OIDC authorization flow to fix data race vulnerability (#526) ... ## Summary Fixes a concurrent map access vulnerability in the OIDC handler that could cause remote unauthenticated DoS. ## Changes - Removed OIDC authorization flow endpoints ( and ) - Removed the unsynchronized map that caused the data race - Kept only the OIDC token exchange endpoint () - Simplified by removing OAuth2 flow dependencies The map was being accessed concurrently by the start (write) and callback (read/delete) endpoints without synchronization, causing runtime panics. Since the token exchange flow doesn't require session state, removing the authorization flow eliminates the vulnerability entirely.		2025-09-22 13:41:32 +01:00
..
v0	Remove OIDC authorization flow to fix data race vulnerability (#526)	2025-09-22 13:41:32 +01:00