synapse/changelog.d/14750.feature at da911e9ddf55d8230bd2e42bc966173ef8de84d4 - MirrorHub/synapse - tilera Git

MirrorHub/synapse

mirror of https://mau.dev/maunium/synapse.git synced 2024-11-19 00:11:47 +01:00

Patrick Cloke 630d0aeaf6

Support RFC7636 PKCE in the OAuth 2.0 flow. (#14750 )

PKCE can protect against certain attacks and is enabled by default. Support
can be controlled manually by setting the pkce_method of each oidc_providers
entry to 'auto' (default), 'always', or 'never'.

This is required by Twitter OAuth 2.0 support.

2023-01-04 14:58:08 -05:00

1 line

119 B

Gherkin

Raw Blame History

Support [RFC7636](https://datatracker.ietf.org/doc/html/rfc7636) Proof Key for Code Exchange for OAuth single sign-on.