dunkirk.sh / indiko
my own indieAuth provider! indiko.dunkirk.sh/docs
indieauth oauth2-server
Star
Fork 1
Watch

Improve OAuth 2.0/OIDC spec compliance and harden token handling master

- Redirect OAuth errors to client per RFC 6749 §4.1.2.1 after validating redirect_uri - Rotate refresh tokens on use to prevent replay attacks (RFC 6749 §10.4) - Revoke both access and refresh tokens together per RFC 7009 §2.1 - Require redirect_uri at token endpoint per RFC 6749 §4.1.3 - Add WWW-Authenticate headers to 401 responses per RFC 6750 - Add sub and username to token introspection response

Author avycado13 Committer Tangled Date Commit e03aeaf8 Parent 77b8d838
+227 -128
3 changed files