10 Commits (9f5a7bb889ee210c21a0d981eb2a6db504246d8b)

Author	SHA1	Message	Date
Johnny	1a9bd32cf1	feat(auth): add PKCE support and enhance OAuth security ... Implements critical OAuth 2.0 security improvements to protect against authorization code interception attacks and improve provider compatibility: - Add PKCE (RFC 7636) support with SHA-256 code challenge/verifier - Fix access token extraction to use standard field instead of Extra() - Add OAuth error parameter handling (access_denied, invalid_scope, etc.) - Maintain backward compatibility for non-PKCE flows This brings the OAuth implementation up to modern security standards as recommended by Auth0, Okta, and the OAuth 2.0 Security Best Current Practice (RFC 8252). Backend changes: - Add code_verifier parameter to ExchangeToken with PKCE support - Use token.AccessToken for better provider compatibility - Update proto definition with optional code_verifier field Frontend changes: - Generate cryptographically secure PKCE parameters - Include code_challenge in authorization requests - Handle and display OAuth provider errors gracefully - Pass code_verifier during token exchange 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>	7 months ago
johnnyjoy	a0f68895ab	chore: add more logs for oauth2	1 year ago
johnnyjoy	eb33a604b2	feat: support mapping avatar url from oauth2	1 year ago
Steven	43d13a3edc	chore: tweak linter	2 years ago
Steven	b376a20fb4	chore: tweak linter warnings	2 years ago
Steven	cf4db17080	chore: fix linter	2 years ago
Steven	c373131b89	chore: migrate idp service	2 years ago
Steven	cd0ea6558d	chore: update golangci-lint config	3 years ago
boojack	723c444910	chore: update server tests (#2118)	3 years ago
boojack	69726c3925	feat: implement oauth2 plugin (#1110)	3 years ago