search

meili-NG / meiliNG.js

meiliNG: Easy Identity/Login Infrastructure, Next Generation. Supports oAuth2 and OpenID Connect specifications
https://meili.ng
MIT License
21 stars 7 forks source link

Implement PKCE #1

Closed Alex4386 closed 3 years ago

Alex4386 commented 3 years ago

/auth and /token endpoints should implement PKCE (Proof Key for Code Exchange)

Video Reference

Alex4386 commented 3 years ago

client_secret less login was implemented, PKCE should be implemented to secure these implicit flows

Alex4386 commented 3 years ago

Due to an deadlock with #10, This issue is now included in Minimum Feature Set Milestone