mirror of
https://github.com/gethomepage/homepage.git
synced 2026-09-29 15:31:16 -07:00
Security: enable PKCE for OIDC
This commit is contained in:
@@ -205,6 +205,7 @@ describe("pages/api/auth/[...nextauth]", () => {
|
|||||||
name: "My OIDC",
|
name: "My OIDC",
|
||||||
type: "oauth",
|
type: "oauth",
|
||||||
idToken: true,
|
idToken: true,
|
||||||
|
checks: ["pkce", "state"],
|
||||||
issuer: "https://issuer.example",
|
issuer: "https://issuer.example",
|
||||||
wellKnown: "https://issuer.example/.well-known/openid-configuration",
|
wellKnown: "https://issuer.example/.well-known/openid-configuration",
|
||||||
clientId: "client-id",
|
clientId: "client-id",
|
||||||
|
|||||||
@@ -73,6 +73,7 @@ if (authEnabled) {
|
|||||||
name: process.env.HOMEPAGE_OIDC_NAME || "Homepage OIDC",
|
name: process.env.HOMEPAGE_OIDC_NAME || "Homepage OIDC",
|
||||||
type: "oauth",
|
type: "oauth",
|
||||||
idToken: true,
|
idToken: true,
|
||||||
|
checks: ["pkce", "state"],
|
||||||
issuer: cleanedIssuer,
|
issuer: cleanedIssuer,
|
||||||
wellKnown: `${cleanedIssuer}/.well-known/openid-configuration`,
|
wellKnown: `${cleanedIssuer}/.well-known/openid-configuration`,
|
||||||
clientId,
|
clientId,
|
||||||
|
|||||||
Reference in New Issue
Block a user