| Age | Commit message (Collapse) | Author |
|
This fixes cancelling oauth
|
|
|
|
|
|
|
|
Has() was only added in Go 1.17
|
|
|
|
|
|
|
|
|
|
|
|
|
|
- This patch implements ISS checking according to RFC 9207
https://datatracker.ietf.org/doc/html/rfc9207
- This tries to prevent so called "mix-up" attacks where the client is
fooled into authorizing with an honest AS through a malicious entity
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
HTML Template adapted from: https://github.com/eduvpn/apple/blob/5b18f834be7aebfed00570ae0c2f7bcbaf1c69cc/EduVPN/Helpers/Mac/OAuthRedirectHTTPHandler.m#L25
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
See: https://github.com/eduvpn/vpn-user-portal/pull/204 as an alternative
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|