Trong Huu Nguyen 6cf48cd668 feat(openid/config): validate client assertion alg against provider metadata ...

Fail at startup rather than on the first token request when the identity
provider does not accept the client assertion algorithm. The check is
skipped when the provider omits the field, which is optional in Discovery.

2026-08-10 12:33:16 +02:00

..

config

feat(openid/config): require and expose the client JWK algorithm

2026-08-10 12:32:04 +02:00

cookie

fix: annotate reviewed gosec findings

2026-07-28 12:52:34 +02:00

handler

refactor(handler/sso/server): remove redundant logout overrides

2026-08-10 09:58:05 +02:00

ingress

refactor(ingress): simplify and remove unnecessary variables

2023-10-03 14:21:08 +02:00

metrics

fix(metrics): record on the collector that is actually registered

2026-07-28 12:52:45 +02:00

middleware

refactor: remove unreachable functions

2026-07-28 12:52:45 +02:00

mock

feat(openid/config): require and expose the client JWK algorithm

2026-08-10 12:32:04 +02:00

openid

feat(openid/config): validate client assertion alg against provider metadata

2026-08-10 12:33:16 +02:00

router

fix: check or explicitly ignore returned errors

2026-07-28 09:04:59 +02:00

server

fix: check or explicitly ignore returned errors

2026-07-28 09:04:59 +02:00

session

fix: annotate reviewed gosec findings

2026-07-28 12:52:34 +02:00

url

fix: check or explicitly ignore returned errors

2026-07-28 09:04:59 +02:00