GluuFederation / oxAuth

OAuth 2.0 server and client; OpenID Connect Provider (OP) & UMA Authorization Server (AS)
https://gluu.org/docs/ce
MIT License
423 stars 150 forks source link

fix(oxauth): the `requestUriParameterSupported` and `requestParameterSupported` should be involved in request processing #1891

Closed mmrraju closed 7 months ago

mmrraju commented 8 months ago

Target ticket-11696

Describe the issue

There exist a configuration parameters under OxAuth JSON configuration - requestUriParameterSupported and requestParameterSupported (see https://gluu.org/docs/gluu-server/4.5/reference/JSON-oxauth-prop/#general-configuration ) If we set value to false, When RP still tries to use these. Gluu shoud returns error codes and starts to handle the content of these parameters. Screenshot from 2024-02-16 20-15-56

mmrraju commented 8 months ago

@yuriyz , please have a look on it.

yuriyz commented 8 months ago

I'm transfering it to oxauth project. It's about AS, not UI.

yuriyz commented 7 months ago

Fixed in 4.5.4 version.

mmrraju commented 7 months ago

Thanks.