4 people afebbf29a9 Require authentication for OAuth token refresh (#21421) ...

According to the OAuth spec
https://datatracker.ietf.org/doc/html/rfc6749#section-6 when "Refreshing
an Access Token"

> The authorization server MUST ... require client authentication for
confidential clients


Fixes #21418

Co-authored-by: Gusted <[email protected]>
Co-authored-by: Lunny Xiao <[email protected]>

2022-10-23 13:28:46 +08:00

..

2fa.go

Refactor auth package (#17962)

2022-01-02 21:12:35 +08:00

auth.go

Suppress ExternalLoginUserNotExist error (#21504)

2022-10-19 20:07:21 +01:00

linkaccount.go

Add support mCaptcha as captcha provider (#20458)

2022-08-10 15:20:10 +02:00

main_test.go

Use a struct as test options (#19393)

2022-04-14 21:58:21 +08:00

oauth_test.go

Refactor AssertExistsAndLoadBean to use generics (#20797)

2022-08-16 10:22:25 +08:00

oauth.go

Require authentication for OAuth token refresh (#21421)

2022-10-23 13:28:46 +08:00

openid.go

Add support mCaptcha as captcha provider (#20458)

2022-08-10 15:20:10 +02:00

password.go

Make better use of i18n (#20096)

2022-06-26 22:19:22 +08:00

webauthn.go

WebAuthn CredentialID field needs to be increased in size (#20530)

2022-07-30 15:25:26 +02:00