[server][auth] updates the authorization code flow for oidc and utilizes client password -- rfc6749#4.1.3 & rfc6749#2.3.1 #8

gbw commented 2025年07月08日 18:41:17 +02:00

this updates the authorization code flow per https://datatracker.ietf.org/doc/html/rfc6749#section-4.1.3 & https://datatracker.ietf.org/doc/html/rfc6749#section-2.3.1

google also supports client_secret_basic which is the sending of client id, client secret via request headers per https://accounts.google.com/.well-known/openid-configuration

this updates the authorization code flow per https://datatracker.ietf.org/doc/html/rfc6749#section-4.1.3 & https://datatracker.ietf.org/doc/html/rfc6749#section-2.3.1 google also supports `client_secret_basic` which is the sending of client id, client secret via request headers per https://accounts.google.com/.well-known/openid-configuration

shroff commented 2025年07月08日 22:41:07 +02:00

Looks great!

Heads up that there are some breaking changes in the schema migration files on main, so you will need to run admin schema reset (which will wipe your data)

Looks great! Heads up that there are some breaking changes in the schema migration files on `main`, so you will need to run `admin schema reset` (which will wipe your data)