Skip to content

v1.0.5

Choose a tag to compare

View all tags
@mathsgod mathsgod released this 09 Oct 02:12
v1.0.5
c6cf3e2

Adds an optional frontend authorization UI and lets users choose which requested scopes to approve.

  • Set OAUTH_AUTHORIZATION_UI_URL on the API to redirect to a Nuxt authorization page. The existing PHP authorization page remains the default when unset.
  • Adds a session-backed OAuth interaction endpoint for login, two-factor authentication, consent, and validated callback redirects, with CSRF and origin checks, expiring request IDs, and replay protection.
  • Restricts issued permissions to the user-selected subset of the requested and permitted scopes.
  • Documents frontend configuration and updates the environment example.

Validation: Composer validation passed. Full suite passed with 127 tests, 620 assertions, and 9 optional integration skips. Browser and frontend authorization integration tests passed separately against a configured Light checkout (3 tests, 53 assertions).

Assets 2
Loading