pamapa

Results 412 comments of pamapa

Demonstrating Proof Of Possession (DPoP)

Thanks for providing this, i need some time to read through this. Looks interesting.

CORs header missing from sign in callback request

Typically for CORS is that you must properly configure the authorization server, so its knows your host and callback URL...

CORs header missing from sign in callback request

`Access-Control-Allow-Origin`, .. are part of the response header coming from the authorization server or your own hosting/back-end server...

Automatic token renew on id_token expiry

The re-new process deals with the access token and its expiration time.

Automatic token renew on id_token expiry

You will need to hack something on your own. I do not plan to have that in this library. If you something light-way please let us know...

Infinite Redirects before Redirecting to Identity Server Login Page

Its most probably a logic bug in you application code. Maybe enabling logging helps you to find out: https://authts.github.io/oidc-client-ts/#md:logging

UserManager.signinRedirectCallback response_mode set "fragment"，Error “Expected code in response”

see https://github.com/authts/oidc-client-ts/blob/main/docs/index.md#hash-mode-router-spa

UserManager.signinRedirectCallback response_mode set "fragment"，Error “Expected code in response”

> Thank you for your solution. But IdentityServer4 Application return the callback url. We can not modify the callback url. I assume you are calling `mgr.signinCallback()`, thus you can modify...

Does the library access AccessToken claims data?

Yes, it takes the claims from the id_token, you can see the affected code in the file https://github.com/authts/oidc-client-ts/blob/main/src/ResponseValidator.ts. Follow there `response.profile =`...

Having issues with content security management

The CSP for your application should allow script execution and connecting to your IDP. Like: ``` "script-src 'self', "connect-src 'self' ", "frame-src 'self' " ``` The browser gives you hints...