oauth2

oauth2 copied to clipboard

[Under 1.1.1.3 SetImplicitTokenCfg set the implicit grant token config](https://go-oauth2.github.io/) ```go cfg := &manage.Config{ // access token expiration time AccessTokenExp: time.Hour * 1, } manager.SetAuthorizeCodeTokenCfg(cfg) ``` here - `SetAuthorizeCodeTokenCfg` should be...

p000ic

Does the package support GO v1.17.2?

2

I can not download the package using `go get -u -v github.com/go-oauth2/oauth2/v4/...` The error is `go get: github.com/go-oauth2/oauth2/[email protected] requires github.com/go-session/[email protected]+incompatible: stream error: stream ID 11; INTERNAL_ERROR` My Go Version: `go...

gitHusband

How to add a custom grant type, such as email + verification code

2

How to add a custom grant type, such as email + verification code.

bingfenglai

For example, the SigningMethod of the token of client1 is RS256, and the token of client2 is HS256. What should I do in this case? ``` mgr.MapAccessGenerate(generates.NewJWTAccessGenerate("", []byte(config.Get().OAuth2.JWTSignedKey), jwt.SigningMethodHS512)) clientStore...

zlgale

What do you think of implementing a CLI around go-auth2 [maybe with a bunch of command-line args and/or env vars and/or config file] such that oauth2 implementations can have something...

SamuelMarks

Client enumeration possible for client_credentials grant

1

If we do a request with non-existing client_id in the sample server, we get the following response: ``` $ curl 'http://localhost:9096/token?grant_type=client_credentials&client_id=000000000&client_secret=11111111&scope=all' {"error":"server_error","error_description":"The authorization server encountered an unexpected condition that prevented...

hotab

Oauth2 mongo db has some issue. oauth2_txn , oauth2_txn.stash has no ttl, so it's never be deleted. How could I handle with this? It looks oauth2_txn has no purpose for...

whatfor1

Code verifier length is not enforced

5

The code verifier in PKCE has both a minimum and maximum length, per the [spec](https://datatracker.ietf.org/doc/html/rfc7636#section-4.1). It looks like this is currently not enforced in this framework.

torkelrogstad

Is this library support ID_Token? using OpenID ?

1

I can't find in this project.

qkrgksqkr

Bump github.com/tidwall/buntdb from 1.1.2 to 1.2.7

1

[CVE-2021-42836](https://github.com/advisories/GHSA-ppj4-34rq-v8j9) is out for github.com/tidwall/gjson before v1.9.3. This is depended on by github.com/tidwall/buntdb before v1.2.7.

aduong