oidcc

oidcc copied to clipboard

Default algorithms for `client_secret_jwt` auth

9

> @maennchen I did have one question about this. My read of the spec was that `RS256` should be allowed but not `HS256`, but there's a specific test case which...

maennchen

### Description Defined in [JWT Response for OAuth Token Introspection](https://datatracker.ietf.org/doc/html/draft-ietf-oauth-jwt-introspection-response-12) and required for the [FAPI 2.0 Message Signing](https://openid.bitbucket.io/fapi/fapi-2_0-message-signing.html) profile. See #317.

paulswartz

HTTP Message Signing

2

### Description for FAPI 2.0 - Message Signing * https://openid.bitbucket.io/fapi/fapi-2_0-message-signing.html#name-http-message-signing * https://datatracker.ietf.org/doc/html/draft-ietf-httpbis-message-signatures-19

maennchen

### oidcc version 3.2.0 ### Erlang version 27.0 ### Elixir version 1.17.2 ### Summary Attempting to integrate with kanidm (https://kanidm.com) as an OIDC provider, I am unable to successfully start...

adamcstephens

token introspect remove client id constraint

2

resolves #364 previously could only introspect a client_id's own token, introspect needs to be able to introspect any token for an issuer. It is my understanding from https://datatracker.ietf.org/doc/html/rfc7662 that introspect...

danj3

Prevent jwks_expired flood in worker 2nd try

1

Fixes #359

maennchen

oidcc_provider_configuration_worker:get_provider_configuration/1 randomly times out

13

### oidcc version 3.2.0 ### Erlang version 26.2.5 ### Elixir version - ### Summary calls to `oidcc_provider_configuration_worker:get_provider_configuration/1` randomly times out. It seems that this is somehow related to httpc timing...

asabil

### Discussed in https://github.com/erlef/oidcc/discussions/362 Originally posted by **danj3** July 30, 2024 There's a line in oidcc_token_introspection.erl:extract_response: ``` IntrospectionClientId == ClientId; IntrospectionClientId == undefined ``` Which seems to mean that the...

maennchen

Basis for tasks following in `oidcc_plug`.

maennchen

'None' authentication method for authorization code flow with PKCE?

1

### Description According to the docs, there are four supported authentication methods: `client_secret_basic`, `client_secret_post`, `client_secret_jwt`, and `private_key_jwt`. As such, all functions in `Oidcc` require both a client ID and client...

Nezteb