Wim Van LaerandGitHub 2399513643 Merge commit from fork ...

* fix: added client and scope validation for token exchange

Verify that the token exchange is not cross client

Only yield scopes which were already on the initial token

* comments

* added test

2026-06-22 11:38:49 +02:00

..

integration_test

Merge commit from fork

2026-06-22 11:38:49 +02:00

sign

feat(action v2): add JWT and JWE payload type options (#11196)

2025-12-29 13:35:53 +00:00

access_token.go

chore(oidc): remove feature flag for introspection triggers (#10132)

2025-06-30 05:48:04 +00:00

amr_test.go

feat(oidc): token exchange impersonation (#7516)

2024-03-20 10:18:46 +00:00

amr.go

feat: Add recovery code MFA support (#9954)

2025-11-24 06:44:48 +00:00

auth_request_converter_test.go

fix(oidc): prompts slice conversion function returns slice which contains unexpected empty strings (#8997)

2024-12-04 20:56:36 +00:00

auth_request_converter_v2.go

fix(oidc): store requested response_mode (#8145)

2024-06-17 09:50:12 +00:00

auth_request_converter.go

Merge commit from fork

2026-03-17 12:54:27 +01:00

auth_request_test.go

Merge commit from fork

2025-12-08 10:01:49 +01:00

auth_request.go

fix(oidc): use authenticated encryption for opaque tokens (#12017)

2026-04-13 10:59:50 +00:00

client_converter.go

feat(group): add user groups to token claims (#11009)

2025-11-11 09:06:45 +01:00

client_credentials.go

chore: Service Account Naming Consistency (#11557)

2026-02-13 12:31:43 +01:00

client.go

feat(telemetry): improved instrumentation for observability (#11159)

2026-01-12 05:51:39 +00:00

device_auth.go

Merge commit from fork

2026-03-17 12:54:27 +01:00

error_test.go

feat(telemetry): improved instrumentation for observability (#11159)

2026-01-12 05:51:39 +00:00

error.go

fix: recover from request panics (#11713)

2026-03-03 11:55:17 +00:00

introspect.go

feat(telemetry): improved instrumentation for observability (#11159)

2026-01-12 05:51:39 +00:00

jwt-profile.go

chore(oidc): remove legacy storage methods (#10061)

2025-06-26 08:08:37 +00:00

key_test.go

feat(oidc): use web keys for token signing and verification (#8449)

2024-08-23 14:43:46 +02:00

key.go

feat(telemetry): improved instrumentation for observability (#11159)

2026-01-12 05:51:39 +00:00

op.go

Merge commit from fork

2026-06-15 15:36:14 +02:00

server_test.go

feat(oidc): move back-channel logout from beta to GA (#11493)

2026-02-05 10:51:09 +00:00

server.go

Merge commit from fork

2026-06-15 15:36:14 +02:00

token_client_credentials.go

chore: Service Account Naming Consistency (#11557)

2026-02-13 12:31:43 +01:00

token_code.go

Merge commit from fork

2026-06-16 15:19:56 +02:00

token_device.go

Merge commit from fork

2026-06-16 15:19:56 +02:00

token_exchange_converter.go

perf(oidc): optimize token creation (#7822)

2024-05-16 07:07:56 +02:00

token_exchange.go

Merge commit from fork

2026-06-22 11:38:49 +02:00

token_jwt_profile.go

fix: invalid jwt assertion error handling (#11933)

2026-04-01 10:44:02 +02:00

token_refresh.go

Merge commit from fork

2026-06-16 15:19:56 +02:00

token.go

fix(oidc): use authenticated encryption for opaque tokens (#12017)

2026-04-13 10:59:50 +00:00

userinfo_test.go

feat(group): add user groups to token claims (#11009)

2025-11-11 09:06:45 +01:00

userinfo.go

Merge commit from fork

2026-06-15 15:36:14 +02:00