You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
memos/web
Johnny 1a9bd32cf1 feat(auth): add PKCE support and enhance OAuth security
Implements critical OAuth 2.0 security improvements to protect against authorization code interception attacks and improve provider compatibility:

- Add PKCE (RFC 7636) support with SHA-256 code challenge/verifier
- Fix access token extraction to use standard field instead of Extra()
- Add OAuth error parameter handling (access_denied, invalid_scope, etc.)
- Maintain backward compatibility for non-PKCE flows

This brings the OAuth implementation up to modern security standards as recommended by Auth0, Okta, and the OAuth 2.0 Security Best Current Practice (RFC 8252).

Backend changes:
- Add code_verifier parameter to ExchangeToken with PKCE support
- Use token.AccessToken for better provider compatibility
- Update proto definition with optional code_verifier field

Frontend changes:
- Generate cryptographically secure PKCE parameters
- Include code_challenge in authorization requests
- Handle and display OAuth provider errors gracefully
- Pass code_verifier during token exchange

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
3 months ago
..
public chore: enhance site.webmanifest in firefox (#4828) 8 months ago
src feat(auth): add PKCE support and enhance OAuth security 3 months ago
.gitignore chore: update gitignore 11 months ago
biome.json chore(web): migrate from ESLint+Prettier to Biome 3 months ago
components.json feat: themes (#4824) 8 months ago
index.html chore: remove fixed theme color 8 months ago
package.json fix(markdown): render single newlines as line breaks 3 months ago
pnpm-lock.yaml fix(markdown): render single newlines as line breaks 3 months ago
tsconfig.json refactor: update import prefix with alias (#1433) 3 years ago
vite.config.mts refactor: update markdown parser 4 months ago