Git with a cup of tea! Painless self-hosted all-in-one software development service, including Git hosting, code review, team collaboration, package registry and CI/CD
This PR adds support for the HTTP POST requests to /userinfo endpoint. While the OpenID Core specification recommends using HTTP GET, at least MinIO uses HTTP POST in their OIDC login flow.
It is RECOMMENDED that the request use the HTTP GET method and the Access Token be sent using the Authorization header field.
I tested this manually with a local MinIO instance, and it successfully allows their [x] Claim User Info setting to be checked. Without this change, it fails with a Method not allowed error from the IdP.
This PR adds support for the HTTP POST requests to /userinfo endpoint. While the OpenID Core specification recommends using HTTP GET, at least MinIO uses HTTP POST in their OIDC login flow.
OpenID Core:
I tested this manually with a local MinIO instance, and it successfully allows their
[x] Claim User Info
setting to be checked. Without this change, it fails with aMethod not allowed
error from the IdP.