Trong Huu Nguyen 4b56c77ddb fix(openid/client): refuse redirects for credential-bearing requests ...

Requests to the token and pushed authorization endpoints carry the
client secret or a signed client assertion. Following a redirect would
forward those credentials to a host the provider never advertised.

2026-07-28 11:43:53 +02:00

..

config

fix: check or explicitly ignore returned errors

2026-07-28 09:04:59 +02:00

cookie

refactor: drop redundant embedded field selectors

2026-07-28 09:04:42 +02:00

handler

fix: check or explicitly ignore returned errors

2026-07-28 09:04:59 +02:00

ingress

refactor(ingress): simplify and remove unnecessary variables

2023-10-03 14:21:08 +02:00

metrics

fix(metrics): log collector registration failures

2026-07-28 09:05:04 +02:00

middleware

fix(metrics): log collector registration failures

2026-07-28 09:05:04 +02:00

mock

fix: check or explicitly ignore returned errors

2026-07-28 09:04:59 +02:00

openid

fix(openid/client): refuse redirects for credential-bearing requests

2026-07-28 11:43:53 +02:00

router

fix: check or explicitly ignore returned errors

2026-07-28 09:04:59 +02:00

server

fix: check or explicitly ignore returned errors

2026-07-28 09:04:59 +02:00

session

fix(metrics): log collector registration failures

2026-07-28 09:05:04 +02:00

url

fix: check or explicitly ignore returned errors

2026-07-28 09:04:59 +02:00