This repository has been archived on 2022-08-17. You can view files and clone it, but cannot push or open issues or pull requests.

Eric Chiang a3235d022a *: verify "state" field before passing request to callback connectors ... Let the server handle the state token instead of the connector. As a result it can throw out bad requests earlier. It can also use that token to determine which connector was used to generate the request allowing all connectors to share the same callback URL. Callbacks now all look like: https://dex.example.com/callback Instead of: https://dex.example.com/callback/(connector id) Even when multiple connectors are being used.		2016-10-27 10:23:09 -07:00
..
oidc.go	*: verify "state" field before passing request to callback connectors	2016-10-27 10:23:09 -07:00