mirror of
https://git.anonymousland.org/anonymousland/synapse.git
synced 2025-05-17 22:40:19 -04:00
Support RFC7636 PKCE in the OAuth 2.0 flow. (#14750)
PKCE can protect against certain attacks and is enabled by default. Support can be controlled manually by setting the pkce_method of each oidc_providers entry to 'auto' (default), 'always', or 'never'. This is required by Twitter OAuth 2.0 support.
This commit is contained in:
parent
747f8eb231
commit
630d0aeaf6
7 changed files with 212 additions and 16 deletions
|
@ -92,6 +92,7 @@ class MacaroonGeneratorTestCase(TestCase):
|
|||
nonce="nonce",
|
||||
client_redirect_url="https://example.com/",
|
||||
ui_auth_session_id="",
|
||||
code_verifier="",
|
||||
)
|
||||
token = self.macaroon_generator.generate_oidc_session_token(
|
||||
state, session_data, duration_in_ms=2 * 60 * 1000
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue