[java-idp-oidc] branch maint-4.3 updated (c3d2258f -> c2e4f1b7)

Codeberg noreply at shibboleth.net
Thu Nov 5 17:42:11 UTC 2026


This is an automated email from the git hooks/post-receive script.

codeberg pushed a change to branch maint-4.3
in repository java-idp-oidc.

    from c3d2258f JOIDC-298 - Response mode query should not be allowed for implicit and hybrid flows
     new 3098ca59 Improve redirect URI validation in token request for unregistered clients
     new 57e3e50e JOIDC-300 - RP-initiated logout is hardcoded to use GET method
     new c2e4f1b7 JOIDC-301 - Unnecessary PKCE verifier in the token request is silently ignored

The 3 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "add" were already present in the repository and have only
been added to this reference.


Summary of changes:
 .../oauth2/profile/impl/ValidateRedirectURI.java   |  32 +++++-
 .../plugin/oidc/op/profile/impl/ValidatePKCE.java  |  16 ++-
 .../flows/oidc/end-session/end-session-flow.xml    |   6 +-
 .../idp/flows/oidc/token/token-beans.xml           |   1 +
 .../oidc/op/profile/flow/EndSessionFlowTest.java   | 120 +++++++++++++++++++++
 .../plugin/oidc/op/profile/flow/TokenFlowTest.java |  43 ++++++++
 6 files changed, 206 insertions(+), 12 deletions(-)

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.


More information about the commits mailing list