Add OIDC provider functionality with validation setup - #548

Closed

shreknel wants to merge 13 commits into

tinyauthapp:mainfrom

shreknel:feature/oidc-provider-pr

Commits on Dec 30, 2025

Add OIDC provider functionality with validation setup
shreknel
committed
020fcb9
Fix critical security issue: verify JWT signature in access token validation
shreknel
committed
ef157ae
Implement PKCE (Proof Key for Code Exchange) support
shreknel
committed
dabb439
Fix open redirect vulnerability in authorize endpoint
shreknel
committed
f006ebe
Remove insecure query parameter fallback for client credentials
shreknel
committed
672914c
Fix XSS vulnerability: Escape user claims in HTML output
shreknel
committed
5b5799a
Fix Python scoping issue: rename html variable to avoid conflict
shreknel
committed
cd068d1
CRITICAL: Add replay protection for authorization codes
shreknel
committed
1b37096
Add bcrypt hashing for client secrets and RSA key encryption
shreknel
committed
ca74534
Replace SHA256 with HKDF for key derivation and fix scope validation
shreknel
committed
ad12110
Remove redundant 'openid' scope special case logic
shreknel
committed
5ec9989
CRITICAL: Add audience validation for access tokens
shreknel
committed
014550f
Trigger automated review
shreknel
committed
3f2f813