issues
search
arianvp
/
webauthn-oidc
an stateless OpenID Connect authorization server that mints ID Tokens from Webauthn challenges
Apache License 2.0
29
stars
0
forks
source link
issues
Newest
Newest
Most commented
Recently updated
Oldest
Least commented
Least recently updated
Bump golang.org/x/net from 0.1.0 to 0.7.0
#29
dependabot[bot]
opened
1 year ago
0
Fix PKCE Downgrade Attack vulnerability
#28
arianvp
opened
1 year ago
0
Switch to scs for session management
#27
arianvp
closed
2 years ago
0
Handle case where audience is not an array
#26
arianvp
opened
2 years ago
0
Move to SCS for session management
#25
arianvp
closed
2 years ago
0
Firestore
#24
arianvp
closed
2 years ago
0
Remove dependency on go-jose and use own jwt implementation
#23
arianvp
closed
2 years ago
0
Allow support for decentralised group management using LargeBlob
#22
arianvp
opened
2 years ago
1
Move to https://github.com/arianvp/webauthn-minimal
#21
arianvp
opened
2 years ago
0
More tests
#20
arianvp
closed
2 years ago
0
Move to https://github.com/caos/oidc for base library
#19
arianvp
opened
2 years ago
0
Various fixes
#18
arianvp
closed
2 years ago
0
Cosign
#17
arianvp
opened
2 years ago
0
Add provenance generation
#16
arianvp
opened
2 years ago
0
Implement https://openid.net/specs/openid-connect-eap-acr-values-1_0.html
#15
arianvp
opened
2 years ago
0
Allow choosing key signing algorithm during registration
#14
arianvp
opened
2 years ago
0
CORS
#13
arianvp
opened
2 years ago
1
Cache control
#12
arianvp
opened
2 years ago
0
Refactorings
#11
arianvp
closed
2 years ago
0
OIDCCCheckDiscEndpointGrantTypesSupportedDynamic: Servers certifying for the 'dynamic' certification profile are required to support the grant types 'authorization_code' and 'implicit'.
#10
arianvp
closed
2 years ago
1
OIDCCCheckDiscEndpointIdTokenSigningAlgValuesSupported: RS256 support is required, but the server does not list it in id_token_signing_alg_values_supported
#9
arianvp
closed
2 years ago
0
OIDCCCheckDiscEndpointResponseTypesSupportedDynamic: The server does not support all of the mandatory to implement response_types for dynamic OpenID Providers.
#8
arianvp
closed
2 years ago
0
Tidy up deps
#7
arianvp
closed
2 years ago
0
Weed dependencies.
#6
arianvp
closed
2 years ago
0
Force git rev-parse
#5
arianvp
closed
2 years ago
0
Do not generate keys on startup; but load from disk
#4
arianvp
opened
2 years ago
0
Add CI
#3
arianvp
closed
2 years ago
0
Create LICENSE
#2
arianvp
closed
2 years ago
0
Authorization codes should expire if not redeemed
#1
arianvp
opened
2 years ago
0