-
-
### Feature Description
When refresh token invalidation is enabled and refresh token replay attack is detected, Gitea should invalidate all refresh tokens for the client following OAuth security …
-
### Summary:
Implement logic to compute and return the refreshOn value as half the token lifetime for long-lived Managed Identity tokens (those with a token expiry of >2 hours). This adjustment will …
-
Currently refresh tokens are not deleted from the database. We could use a background service to remove records when the stored expiration has been reached.
-
### Steps to reproduce
1. Log in on a homeserver running OIDC with short lived access tokens and refresh tokens
2. Wait a while (while for example having an unstable internet connection
3. Get si…
-
Currently, the user has to renew their oauth tokens every couple of weeks. This can be jarring and would be better to streamline this ease of use by making it such that the token auto-renews.
https…
-
Currently, we are not using refresh tokens. We should be using refresh tokens. 😅
-
Hello there,
I've been using the `oidc-client-ts` package, and I've encountered an issue regarding the support for refresh token rotation. This feature is a requirement for being able to secure…
-
I am using Django OAuth toolkit and the following code for OAuth implementation.
```
import requests
from django.http import JsonResponse
from django.shortcuts import redirect, render
from djan…
-
### Describe the bug
We're using Github (specifically a Github app) as an external IDP. We have configured Github to use expiring access tokens (good for 8 hours). When we want to get data from Git…