Emelia Smith

@evanp per discussion

@nbulaj @ransombriggs would love some feedback on my implementation proposal in the PR description — I think that's the right way forwards, but haven't yet begun to implement.

> I have some feeling that the work should be done inside https://github.com/doorkeeper-gem/doorkeeper-openid_connect 🤔 > > I remember it handles all these stuff around Discovery and related. Have to recheck...

@nbulaj @ransombriggs I think this is ready for a look, I think it works okay for now? Not sure if we need to do something else or not, there's a...

@alex-ross this isn't forgotten, work is just progressing more slowly because of time constraints

There are additional claims registered with IANA outside of those that exist in the OIDC Specificatino, however I don't think any of those currently would be useful to a Mastodon...

Implementation in #32548

cc @mjankowski @renchap — this would be the necessary precursor to finally moving streaming to typescript, but we've still a lot of refactoring to do before we can test most...

We'd also need to restructure `index.js` into a `bin/server.js` that's responsible for actually initializing everything and starting the server to listen, and then having `index.js` (or `src/index.js`) be just the...

I've opened the following PR to enforce SSL/TLS for HTTP-based redirects: https://github.com/mastodon/mastodon/pull/32228