ether / ep_openid_connect

Etherpad plugin to authenticate users against an OpenID Connect provider
Other
5 stars 8 forks source link

Add support for HTTP Bearer authentication (RFC6750) #16

Open rhansen opened 2 years ago

rhansen commented 2 years ago

This shouldn't be merged because it has several flaws (e.g., the userinfo endpoint shouldn't be used to validate the token), but I'm leaving it up in case I decide to revisit this later.