Support HTTP POST requests to `/userinfo`, aligning to OpenID Core specification (#32578)

go-gitea / gitea

Git with a cup of tea! Painless self-hosted all-in-one software development service, including Git hosting, code review, team collaboration, package registry and CI/CD

https://gitea.com

MIT License

45.24k stars 5.5k forks source link

Support HTTP POST requests to `/userinfo`, aligning to OpenID Core specification (#32578) #32594

Closed lunny closed 16 hours ago

lunny commented 1 day ago

Backport #32578

This PR adds support for the HTTP POST requests to /userinfo endpoint. While the OpenID Core specification says both are supported and recommends using HTTP GET.

ref: https://openid.net/specs/openid-connect-core-1_0.html#UserInfo