Ryan Richard c4ff1ca304 auth_handler.go: Ignore invalid CSRF cookies rather than return error ...

Generate a new cookie for the user and move on as if they had not sent
a bad cookie. Hopefully this will make the user experience better if,
for example, the server rotated cookie signing keys and then a user
submitted a very old cookie.

Signed-off-by: Andrew Keesler <akeesler@vmware.com>

2020-11-20 13:56:35 -08:00

..

auth

auth_handler.go: Ignore invalid CSRF cookies rather than return error

2020-11-20 13:56:35 -08:00

callback

callback_handler.go: Get upstream name from state instead of path

2020-11-20 13:33:08 -08:00

csrftoken

WIP for saving authorize endpoint state into upstream state param

2020-11-10 17:58:00 -08:00

discovery

Implement per-issuer OIDC JWKS endpoint

2020-10-16 17:51:40 -07:00

jwks

Implement per-issuer OIDC JWKS endpoint

2020-10-16 17:51:40 -07:00

oidctestutil

Use /callback (without IDP name) path for callback endpoint (part 1)

2020-11-20 16:14:45 -05:00

provider

callback_handler.go: simplify stored ID token claims

2020-11-20 15:36:51 -05:00

nullstorage_test.go

Add NullStorage for the authorize endpoint to use

2020-11-11 14:49:24 -08:00

nullstorage.go

Add NullStorage for the authorize endpoint to use

2020-11-11 14:49:24 -08:00

oidc.go

Use /callback (without IDP name) path for callback endpoint (part 1)

2020-11-20 16:14:45 -05:00