#
290e9b1f |
| 05-Mar-2024 |
Andreas Gohr <andi@splitbrain.org> |
automatic style fixes and new workflows
|
#
a1fa007a |
| 19-Dec-2021 |
Naoto Kobayashi <naoto.kobayashi4c@gmail.com> |
Enable oauth service plugins to implement their own procedures on logout
Although some oauth services need their own procedures on logout (e.g. Keycloak needs to access the logout endpoint), there i
Enable oauth service plugins to implement their own procedures on logout
Although some oauth services need their own procedures on logout (e.g. Keycloak needs to access the logout endpoint), there is no way to implement them. Fix it.
Signed-off-by: Naoto Kobayashi <naoto.kobayashi4c@gmail.com>
show more ...
|
#
28002081 |
| 13-Dec-2021 |
Andreas Gohr <andi@splitbrain.org> |
drop concept of GUID and introduce storageID
Previously we created a new GUID for any user trying to login via oauth. That GUID was used to store the token states. This polluted the cache area but e
drop concept of GUID and introduce storageID
Previously we created a new GUID for any user trying to login via oauth. That GUID was used to store the token states. This polluted the cache area but even worse, it made it impossible to stay logged in on multiple devices when the IdP invalidated onld access tokens when issuing a new one (like google does).
Now a session storage is used for the initial login. Permanent storage is only initialized after a successful login (based on the user's email address).
show more ...
|
#
9cbef4d7 |
| 11-Dec-2021 |
Andreas Gohr <andi@splitbrain.org> |
moved token refresh to adapter class
This also takes care of saving the refresh token for when it's not renewed on refresh (like Google doesn't).
|
#
eae50416 |
| 08-Dec-2021 |
Andreas Gohr <andi@splitbrain.org> |
check for request token on login
|
#
04a78b87 |
| 03-Dec-2021 |
Andreas Gohr <andi@splitbrain.org> |
renamed our Service to Adapter to avoid confusion
Also added a mechanism to register Services from an adapter
|