oauth2-proxy
oauth2-proxy copied to clipboard
[Feature]: RFC 7662 Token Introspection
Motivation
Currently if the user logs out from the identity provider or the provider revokes the user token, reauthentication is not required until the oauth2-proxy cookie expires.
Possible solution
By implementing token introspection (RFC 7662) oauth2-proxy will be able to verify that the user session is still valid and act accordingly
Provider
None