Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[fapi] [PAR] PKCE required #5973

Closed
leleueri opened this issue Aug 6, 2021 · 0 comments
Closed

[fapi] [PAR] PKCE required #5973

leleueri opened this issue Aug 6, 2021 · 0 comments
Labels
project: AM type: enhancement
Milestone
AM - 3.11.0

Comments

@leleueri
Copy link
Contributor

leleueri commented Aug 6, 2021

FAPI1-Advanced-Final requires servers to reject PAR requests that do not use PKCE.
See https://openid.net/specs/openid-financial-api-part-2-1_0.html#authorization-server item 18
@leleueri leleueri added this to the AM - 3.11.0 milestone Aug 6, 2021
@leleueri leleueri mentioned this issue Aug 11, 2021
Merged
@tcompiegne tcompiegne changed the title [FAPI][PAR] PKCE required [fapi] [PAR] PKCE required Aug 13, 2021
leleueri added a commit to gravitee-io/gravitee-access-management that referenced this issue Sep 1, 2021
@leleueri
fix: check PKCE is used for FAPI using PAR authentication request
2efa516 
fixes gravitee-io/issues#5973
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
project: AM type: enhancement
Projects
None yet
Milestone
AM - 3.11.0
Development

No branches or pull requests
1 participant
@leleueri