jrd / django-oauth2-authcodeflow

Authenticate with any OpenId Connect/Oauth2 provider through authorization code flow. PKCE is also supported
https://pypi.org/project/django-oauth2-authcodeflow/
MIT License
14 stars 8 forks source link

Fix checks for claims parameter supported #15

Closed hy-ntyni closed 7 months ago

hy-ntyni commented 11 months ago

get_oidc_urls() populates the session with SESSION_OP_CLAIMS_PARAMETER_SUPPORTED but views.py checks for OIDC_CLAIMS_PARAMETER_SUPPORTED (and its tests populate that). So the claims support code path is never taken.

Presumably the intention is to use SESSION_OP_CLAIMS_PARAMETER_SUPPORTED.

jrd commented 7 months ago

Merged.