M Hickford

Problems with authorization servers that don't support public clients

2

https://www.ietf.org/archive/id/draft-ietf-oauth-v2-1-09.html > Authorization servers MUST record the client type in the client registration details in order to identify and process requests accordingly Unfortunately many authorization servers *don't* record client type....

Strengthen "Authorization server SHOULD NOT process repeated authorization requests automatically" for public clients

1

https://datatracker.ietf.org/doc/html/draft-ietf-oauth-v2-1-09#name-client-impersonation > The authorization server SHOULD NOT process repeated authorization requests automatically (without active resource owner interaction) without authenticating the client or relying on other measures to ensure that the...

User survey

23

Hi users. A quick survey: 1. How did you discover git-credential-oauth? 2. How did you install git-credential-oauth? 3. Do you authenticate to any Git hosts outside GitHub? 4. What's your...

Assumes Git patch https://lore.kernel.org/git/[email protected]/T/#m27abb730e5a8ebc5d1c9b262ea9bbb8b97827c5b https://github.com/bk2204/git/tree/credential-authtype

Show QR code for device auth

1

https://datatracker.ietf.org/doc/html/rfc8628#section-3.3.1 > When "verification_uri_complete" is included in the authorization response, clients MAY present this URI in a non-textual manner using any method that results in the browser being opened with...

Fixes #36

Tested with dev.azure.com, it works Fixes #27 Caveats because Azure DevOps doesn't support OAuth public clients: 1. Redirect URL `https://127.0.0.1:53119` has fixed port 2. HTTPS redirect URL so you may...

So far the following storage helpers support the necessary attributes for OAuth token refresh: | Helper | [password_expiry_utc](https://git-scm.com/docs/git-credential#Documentation/git-credential.txt-codepasswordexpiryutccode) | [oauth_refresh_token ](https://git-scm.com/docs/git-credential#Documentation/git-credential.txt-codeoauthrefreshtokencode)| |-------------|---------------------|---------------------| | cache | Git 2.40 | Git 2.41...

Error "Invalid device flow scope" with googlesource.com

2

If you use the `-device` flag with googlesource.com you get the following error: ``` 2023/09/14 06:50:19 oauth2: cannot fetch token: 400 Bad Request Response: { "error": "invalid_scope", "error_description": "Invalid device...