| Age | Commit message (Collapse) | Author |
|
|
|
|
|
|
|
|
|
Bit long maybe but we shouldn't limit it too much
|
|
See https://git.sr.ht/~fkooman/vpn-user-portal/tree/v3/item/src/OAuth/VpnClientDb.php
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Not useful enought just yet
|
|
|
|
|
|
|
|
|
|
|
|
Useless spam in the log file
|
|
|
|
|
|
|
|
|
|
|
|
Conditionally embedding based on
https://github.com/golang/go/issues/44484#issuecomment-948137497
To use it, wget the discovery files into the internal/discovery
folder (same JSON name) after verifying the signature. Then build with -tags=release
|
|
This prevents someone from spamming the local redirect URI and sending
additional outgoing token requests to the legitimate server
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
This commit validates the server endpoints by checking the Host and
scheme of each URL to check if they match eachother. This is to
prevent further mixup attacks
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|