Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Support OAuth 2.0 Authorization Server Issuer Identification (RFC 9207) #306

Open
tronghn opened this issue Nov 11, 2024 · 0 comments
Open

Support OAuth 2.0 Authorization Server Issuer Identification (RFC 9207) #306

tronghn opened this issue Nov 11, 2024 · 0 comments
Labels
enhancement New feature or request

Comments

@tronghn
Copy link
Contributor

tronghn commented Nov 11, 2024 •
edited
Loading

Validate that the iss parameter in the callback response is present and has an expected value if the provider has declared support with the authorization_response_iss_parameter_supported property.

This is mostly relevant for preventing mix-up attacks when configured with multiple identity providers, so this isn't really in scope for Wonderwall - but it is a fairly simple enhancement

See the RFC for details: https://www.rfc-editor.org/rfc/rfc9207.
@tronghn tronghn added the enhancement New feature or request label Nov 11, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
enhancement New feature or request
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@tronghn