Invalid redirect URI in OAuth Authorize request now results in error response. If this causes any critical issues, turn off the validation temporarily using the _disable_redirect_uri_validation switch in the [openidconnect] section until you update your client config.
As per rfc6749#section-4.1.2.1, invalid redirect URI or client ID results in an error response without redirect.
Config section [seacat_auth] renamed to [seacatauth] to unify with all the other sections.
Changes
Authorize audit messages include access IPs.
Disable all redirect URI validations by toggling the _disable_redirect_uri_validation switch in the [openidconnect] section.
Breaking changes
_disable_redirect_uri_validation
switch in the[openidconnect]
section until you update your client config.[seacat_auth]
renamed to[seacatauth]
to unify with all the other sections.Changes
_disable_redirect_uri_validation
switch in the[openidconnect]
section.