Allow all standard OIDC authorize params

TeskaLabs / seacat-auth

SeaCat Auth provides authentication, authorization, identity management, session management and other access control features.

GNU General Public License v3.0

11 stars 7 forks source link

Closed byewokko closed 10 months ago

byewokko commented 10 months ago

OpenID Authorization endpoint should ignore all unknown request parameters.
Standard OAuth / OpenID parameters are at the least acknowledged and preserved in redirections.
Client secret parameter does not belong in the authorization request, hence it was removed from the method arguments.
BREAKING Dropped support for authorize query params ldid and expiration.