synapse/changelog.d/14750.feature at da911e9ddf55d8230bd2e42bc966173ef8de84d4 - mirrors/synapse - Sadium Git

mirrors/synapse

mirror of https://github.com/element-hq/synapse.git synced 2024-11-25 11:05:49 +03:00

Patrick Cloke 630d0aeaf6

Support RFC7636 PKCE in the OAuth 2.0 flow. (#14750 )

PKCE can protect against certain attacks and is enabled by default. Support
can be controlled manually by setting the pkce_method of each oidc_providers
entry to 'auto' (default), 'always', or 'never'.

This is required by Twitter OAuth 2.0 support.

2023-01-04 14:58:08 -05:00

1 line

119 B

Gherkin

Raw Blame History

Support [RFC7636](https://datatracker.ietf.org/doc/html/rfc7636) Proof Key for Code Exchange for OAuth single sign-on.