Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Enable PKCE extension in GDS OmniAuth Strategy #283

Merged
merged 1 commit into from
Aug 24, 2023
Merged

Enable PKCE extension in GDS OmniAuth Strategy #283

merged 1 commit into from
Aug 24, 2023
+40 −0

Commits on Aug 24, 2023

  1. Enable PKCE extension in GDS OmniAuth Strategy 

    https://trello.com/c/59EBweBx

In alphagov/signon#2312 we enabled the OAuth2
PKCE extension[1] in Signon.

In this commit we update our GDS OAuth2 OmniAuth Strategy to make use of
the PKCE extension. This means that any of our apps using this Gem will
benefit from the additional protection offered by the PKCE extension.

[1]: https://datatracker.ietf.org/doc/html/rfc7636
    @chrisroos
    chrisroos committed Aug 24, 2023
    Configuration menu
    Copy the full SHA
    a63e75e View commit details
    Browse the repository at this point in the history