vh/homepage
1
0
Fork 0
mirror of https://github.com/gethomepage/homepage.git synced 2026-09-11 22:56:34 -07:00
Code Issues Actions 9 Packages Projects Releases Wiki Activity

Fix: enforce nonce OIDC check too
Docker CI / Docker Build & Push (push) Has been cancelled
Details
Lint / Linting Checks (push) Has been cancelled
Details
Release Drafter / Update Release Draft (push) Has been cancelled
Details
Release Drafter / Auto Label PR (push) Has been cancelled
Details
Tests / vitest (1) (push) Has been cancelled
Details
Tests / vitest (2) (push) Has been cancelled
Details
Tests / vitest (3) (push) Has been cancelled
Details
Tests / vitest (4) (push) Has been cancelled
Details

Browse Source
This commit is contained in:
shamoon
2026-08-07 12:18:47 -07:00
parent 525d476e14
commit 2fae37b004
2 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/__tests__/pages/api/auth/[...nextauth].test.js
+1 -1
View File
@@ -281,7 +281,7 @@ describe("pages/api/auth/[...nextauth]", () => {
name: "My OIDC", name: "My OIDC",
type: "oauth", type: "oauth",
idToken: true, idToken: true,
checks: ["pkce", "state"], checks: ["pkce", "state", "nonce"],
issuer: "https://issuer.example", issuer: "https://issuer.example",
wellKnown: "https://issuer.example/.well-known/openid-configuration", wellKnown: "https://issuer.example/.well-known/openid-configuration",
clientId: "client-id", clientId: "client-id",
src/pages/api/auth/[...nextauth].js
+1 -1
View File
@@ -87,7 +87,7 @@ if (authEnabled) {
name: process.env.HOMEPAGE_OIDC_NAME || "Homepage OIDC", name: process.env.HOMEPAGE_OIDC_NAME || "Homepage OIDC",
type: "oauth", type: "oauth",
idToken: true, idToken: true,
checks: ["pkce", "state"], checks: ["pkce", "state", "nonce"],
issuer: cleanedIssuer, issuer: cleanedIssuer,
wellKnown: `${cleanedIssuer}/.well-known/openid-configuration`, wellKnown: `${cleanedIssuer}/.well-known/openid-configuration`,
clientId, clientId,