openid

openid copied to clipboard

Dynamic registration

1

kilork

feat: support reqwest-middleware

2

This would allow adding caching, otel etc without needing more changes to the openid crate. One pattern I quite like is to define a trait that specifies only what you...

rbtcollins

Validating access tokens

2

I noticed that the `validate_token` function does validate an id token. On the backend, shouldn't there be a way to validate access tokens?

ctron

References: - https://openid.net/specs/openid-connect-rpinitiated-1_0.html

kilork

Receiving Decode(MissingKey(...)) error from Google after many hours of running

12

Hi, I've been using openid [in my project](https://github.com/Isixhosa-click/isixhosa_click) for a while now (code for it is [here](https://github.com/IsiXhosa-click/isixhosa_click/blob/master/src/auth.rs)) - thanks for the effort you've put into it! I have however run...

Restioson

Seems like documentation tells it is JHipster, but it is actually just one index.html app to get account details.

kilork

jwks should handle rotated keys

1

The jwks list doesn't appear to provide any mechanism for periodic refreshing or rediscovery for missing keys. OIDC providers may rotate keys at any time so they should be periodically...

davidcorrigan714

PKCE

4

I'd like to add support for PKCE, specifically: 1. Allow passing optional `code_challenge` to `auth_url`. 2. Allow passing optional `code_verifier` to `request_token`. (1) is not a strictly necessary change, as...

teohhanhui

Optional issuer validation?

13

Hi, Thanks for this library. I wonder what the best way to solve an issue I have with validating the issuer. Microsoft OIDC uses `{tenantId}` in the issuer URL returned...

jetersen

Dynamic Issuer Validation

3

Hi I am trying to use the issuer 'https://login.microsoftonline.com/common/v2.0' which serves all Microsoft accounts, regardless of their tenant. Now it seems that `openid` sees a tenant mismatch, because Microsoft will...

inzanez