Ryan Richard c4ff1ca304 auth_handler.go: Ignore invalid CSRF cookies rather than return error ... Generate a new cookie for the user and move on as if they had not sent a bad cookie. Hopefully this will make the user experience better if, for example, the server rotated cookie signing keys and then a user submitted a very old cookie. Signed-off-by: Andrew Keesler <akeesler@vmware.com>		2020-11-20 13:56:35 -08:00
..
auth	auth_handler.go: Ignore invalid CSRF cookies rather than return error	2020-11-20 13:56:35 -08:00
callback	callback_handler.go: Get upstream name from state instead of path	2020-11-20 13:33:08 -08:00
csrftoken	WIP for saving authorize endpoint state into upstream state param	2020-11-10 17:58:00 -08:00
discovery	Implement per-issuer OIDC JWKS endpoint	2020-10-16 17:51:40 -07:00
jwks	Implement per-issuer OIDC JWKS endpoint	2020-10-16 17:51:40 -07:00
oidctestutil	Use /callback (without IDP name) path for callback endpoint (part 1)	2020-11-20 16:14:45 -05:00
provider	callback_handler.go: simplify stored ID token claims	2020-11-20 15:36:51 -05:00
nullstorage_test.go	Add NullStorage for the authorize endpoint to use	2020-11-11 14:49:24 -08:00
nullstorage.go	Add NullStorage for the authorize endpoint to use	2020-11-11 14:49:24 -08:00
oidc.go	Use /callback (without IDP name) path for callback endpoint (part 1)	2020-11-20 16:14:45 -05:00