Hans Zandbelt
Hans Zandbelt
Use `strlen(access_token)+1` to include the trailing `\0` in the decoded result.
It is actually possible to compile for Windows today. There's (perhaps a bit stalled) WIP on a CMake environment here: https://github.com/tgorol/cjose
A Windows DLL is provided as part of an official commercial support subscription available via https://github.com/zmartzone/mod_auth_openidc#commercial-services
thanks, that looks very good indeed; it would be even better if you could pull (most of) that code up to [liboauth2](https://github.com/OpenIDC/liboauth2), into https://github.com/OpenIDC/liboauth2/blob/master/src/server/nginx.c and https://github.com/OpenIDC/liboauth2/blob/master/include/oauth2/nginx.h so that it is...
I have adopted the "variables in request context" changes since they're clearly a security risk. Wrt. `OAuth2Require`: am I right that it obsoletes OAuth2Claim ? Alternatively, would it be possible...
@pladen thanks for chiming in, that clarifies things for me a bit; however, it still feels that `OAuth2Require` doesn't do anything that is specific to OAuth 2.0 or ngx_oauth_module; isn't...
I have now adopted - I think - all suggested changes with minor modifications and merged them into the liboauth2 master branch, to be released with liboauth2 1.6.3. I'm closing...
thank you for your contribution!
I don't think I can add more than what is in here: https://github.com/OpenIDC/ngx_oauth2_module/blob/master/.github/workflows/build.yml#L20-L34