Dmitry Telegin

Support physical devices

2

At the moment, mkosi can't operate physical devices directly. Running mkosi -o /dev/sdX will give an error in the final stage (Linking image...) because of the way image creation is...

Fixes: #9017

DPoP design doc

5

This PR outlines the design of [OAuth 2.0 Demonstrating Proof-of-Possession](https://tools.ietf.org/id/draft-ietf-oauth-dpop-02.html) for Keycloak.

KEYCLOAK-15169 OAuth 2.0 Demonstrating Proof-of-Possession at the Application Layer (DPoP)

3

Initial implementation of DPoP. Limitations and open issues: - [ ] UserInfo endpoint support - see [discussion](https://github.com/keycloak/keycloak/discussions/8801) - [x] Token Revocation (won't do) - [x] Do not bind refresh tokens...

No support for IdPs using multiple JWK certificates

2

### Impacted package Which packages do you think might be impacted by the bug ? - [ ] solid-client-authn-browser - [ ] solid-client-authn-node - [x] solid-client-authn-core - [ ] oidc-client-ext...

Wrong dynamic client ID used for code-to-token exchange

1

### Impacted package Which packages do you think might be impacted by the bug ? - [x] solid-client-authn-browser - [ ] solid-client-authn-node - [x] solid-client-authn-core - [x] oidc-client-ext - [x]...

Update to DPoP specification v08

3

Recent DPoP spec updates introduce some changes that could be relevant for Solid-OIDC. I'd suggest that we update the DPoP-related parts of the spec and the primer in order to...

Autoexpiry of DCR-registered clients

3

11.2. Client IDs: > Implementors SHOULD expire ephemeral Client IDs that are kept in server storage to mitigate the potential for a bad actor to fill server storage with unexpired...

Unable to guarantee stable LDAP sync period in clustered environment

2

### Before reporting an issue - [x] I have read and understood the above terms for submitting issues, and I understand that my issue may be closed without action if...