Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: partially revert "Don't send the same parameters in query string and JWT for redirect URL (#360)" #375

Merged
merged 1 commit into from
Sep 3, 2024

Conversation

paulswartz
Copy link
Collaborator

This reverts partially commit 3b0b522.

This commit started to fail the OIDC conformance suite: https://gitlab.com/paulswartz/ueberauth_oidcc_certification/-/pipelines/1391557144

In particular, the error is:

Required http request parameters and request object claims must match

Required parameter 'response_type' was not found in http request parameters
Required parameter 'client_id' was not found in http request parameters

redirect_url does not appear to be required, so we continue to leave that out.

@paulswartz
Copy link
Collaborator Author

@Stratus3D it would be great if you could test this PR against your Okta setup, as you were the original reporter.

@maennchen maennchen self-assigned this Aug 31, 2024
@maennchen maennchen added the bug label Aug 31, 2024
@Stratus3D
Copy link
Contributor

@paulswartz yes I will test this now.

@Stratus3D
Copy link
Contributor

I just tested my Elixir app with this:

{:oidcc, git: "git@github.com:paulswartz/oidcc.git", tag: "ps-request-object-params", override: true},

And it seems fine. I'm able to login and out no problem. Not sure why I determined all response_type and client_id needed to be removed.

… and JWT for redirect URL (erlef#360)"

This reverts partially commit 3b0b522.

This commit started to fail the OIDC conformance suite:
https://gitlab.com/paulswartz/ueberauth_oidcc_certification/-/pipelines/1391557144

In particular, the error is:

Required http request parameters and request object claims must match

```
Required parameter 'response_type' was not found in http request parameters
Required parameter 'client_id' was not found in http request parameters
```

`redirect_url` does not appear to be required, so we continue to leave
that out.
@maennchen maennchen enabled auto-merge (squash) September 3, 2024 14:14
@maennchen maennchen merged commit faf3830 into erlef:main Sep 3, 2024
26 of 28 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants