sendnrw/pocket-id
2
0
Fork 0
mirror of https://github.com/pocket-id/pocket-id.git synced 2026-10-29 20:19:04 +01:00
Code Issues Packages Projects Releases Wiki Activity

feat: add support for unencrypted OIDC request parameter

Browse Source
This commit is contained in:
Elias Schneider
2026-07-08 10:42:05 +02:00
parent c72da58eaf
commit 25dcad757a
6 changed files with 122 additions and 22 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/internal/oidc/authorization_handler.go
+4 -1
View File
@@ -172,7 +172,10 @@ func requestMetaFromGin(c *gin.Context) requestMeta {
func authorizeRequestParams(requester fosite.AuthorizeRequester) map[string]string {
params := make(map[string]string)
for key, values := range requester.GetRequestForm() {
if len(values) == 0 || key == "request_uri" || key == "interaction" {
// The raw "request" object is dropped alongside "request_uri": its claims are already merged
// into the form, and replaying the JWT on interaction resume would re-validate its "exp"
// against the resume time, failing logins that took longer than the object's lifetime.
if len(values) == 0 || key == "request" || key == "request_uri" || key == "interaction" {
continue
}
params[key] = values[0]