oidc-client-ts

oidc-client-ts copied to clipboard

Silent refresh causing excessive requests

4

Trying to use this library in an application to authenticate via our corporate SSO. Login is fine, and in my development environment (Firefox) the silent-refresh works fine. But when we...

rjray

Don't only allow "code" as response_type

2

In [your migration guide](https://github.com/authts/oidc-client-ts/blob/4615182dbc12abf2032f534b9595d4d43be1c18c/docs/migration.md) you write that > restricted response_type to code flow only. As per [OAuth 2.1](https://oauth.net/2.1/): PKCE is required for all OAuth clients using the authorization code flow...

ch-lepp

Have an ergonomic way to do dynamic client registration

2

There is no builtin way to do client registration as defined in [OpenID Connect Dynamic Client Registration 1.0](https://openid.net/specs/openid-connect-registration-1_0.html). Currently, if one wanted to do a dynamic client registration, it would...

sandhose

Change scope separators

4

Hey y'all. I am using this to log in to one server and the scope seems to be separated by commas instead of spaces. Is it possible to change scope...

b1ek

refresh userinfo data on demand

7

Fixes #846 #852 ### Checklist - [X] This PR makes changes to the public API - [X] I have included links for closing relevant issue numbers This PR adds a...

marcoreni

signinPopup open window not centered on an additional screen

2

Call UserManager.signinPopup method open new window but not centered in front of the current window. This issue occurs when user has multiple screens. Method PopupUtils.center works perfect on main screen,...

l0kers

Revoke Token Request doesn't respect client_authentication settings

2

Hi @all Revoke Token Request doesn't respect client_authentication settings TokenRequest: https://github.com/authts/oidc-client-ts/blob/1f4390bd2a2f0e2670a63e712ccf4c23df31ae55/src/TokenClient.ts#L133 RevokeRequest: https://github.com/authts/oidc-client-ts/blob/1f4390bd2a2f0e2670a63e712ccf4c23df31ae55/src/TokenClient.ts#L180 In RFC there is a example: https://datatracker.ietf.org/doc/html/rfc7009#section-2.1 ``` POST /revoke HTTP/1.1 Host: server.example.com Content-Type: application/x-www-form-urlencoded Authorization: Basic...

approached

Had a problem with signinSilent() **IFrame timed out without a response** Previously I've implemented user redirect to a page he was on after login/logout. So if user was on the...

Rodimusbot

The return type `Promise` of `signinCallback` is not properly typed and should be `Promise`. Functions annotated with a `void` return type are created with the intention that their return value...

noshiro-pf

Bumps [@testing-library/jest-dom](https://github.com/testing-library/jest-dom) from 6.4.2 to 6.4.3. Release notes Sourced from @​testing-library/jest-dom's releases. v6.4.3 6.4.3 (2024-05-03) Bug Fixes Updates role support for aria-required attribute in toBeRequired (#590) (20aca33) Commits 20aca33 fix:...

dependabot[bot]