mirror of
https://github.com/gethomepage/homepage.git
synced 2026-08-31 01:15:53 -07:00
Fix: enforce nonce OIDC check too
Docker CI / Docker Build & Push (push) Has been cancelled
Lint / Linting Checks (push) Has been cancelled
Release Drafter / Update Release Draft (push) Has been cancelled
Release Drafter / Auto Label PR (push) Has been cancelled
Tests / vitest (1) (push) Has been cancelled
Tests / vitest (2) (push) Has been cancelled
Tests / vitest (3) (push) Has been cancelled
Tests / vitest (4) (push) Has been cancelled
Docker CI / Docker Build & Push (push) Has been cancelled
Lint / Linting Checks (push) Has been cancelled
Release Drafter / Update Release Draft (push) Has been cancelled
Release Drafter / Auto Label PR (push) Has been cancelled
Tests / vitest (1) (push) Has been cancelled
Tests / vitest (2) (push) Has been cancelled
Tests / vitest (3) (push) Has been cancelled
Tests / vitest (4) (push) Has been cancelled
This commit is contained in:
@@ -281,7 +281,7 @@ describe("pages/api/auth/[...nextauth]", () => {
|
||||
name: "My OIDC",
|
||||
type: "oauth",
|
||||
idToken: true,
|
||||
checks: ["pkce", "state"],
|
||||
checks: ["pkce", "state", "nonce"],
|
||||
issuer: "https://issuer.example",
|
||||
wellKnown: "https://issuer.example/.well-known/openid-configuration",
|
||||
clientId: "client-id",
|
||||
|
||||
@@ -87,7 +87,7 @@ if (authEnabled) {
|
||||
name: process.env.HOMEPAGE_OIDC_NAME || "Homepage OIDC",
|
||||
type: "oauth",
|
||||
idToken: true,
|
||||
checks: ["pkce", "state"],
|
||||
checks: ["pkce", "state", "nonce"],
|
||||
issuer: cleanedIssuer,
|
||||
wellKnown: `${cleanedIssuer}/.well-known/openid-configuration`,
|
||||
clientId,
|
||||
|
||||
Reference in New Issue
Block a user