Crea un profiloAccedi

Ricerche recenti

Nessuna ricerca recente

Opzioni di ricerca

Disponibile solo dopo aver effettuato l'accesso.
mastodon.uno è uno dei tanti server Mastodon indipendenti che puoi usare per partecipare al fediverso.
Mastodon.Uno è la principale comunità mastodon italiana. Con 77.000 iscritti è il più grande nodo Mastodon italiano: anima ambientalista a supporto della privacy e del mondo Open Source.

Amministrato da:

Statistiche del server:

6,3K
utenti attivi

mastodon.uno: InfoStatoCartella dei profiliPolitica sulla privacy

Mastodon: InfoScarica l'appScorciatoie da tastieraVisualizza il codice sorgentev4.3.7

#oauth

6 post6 partecipanti1 post oggi
Ha risposto nella discussione
Pubblico
Erik Play2Learn

@elmiko in my python tests #GeminiAI has been pretty good. So galang doesn't worry me that much. Interestingly multiple AIs struggle with #oauth, eg also #lovable .

There aren't even free standing computers and library employees not respecting documentation standards pisses me off. So i have to check now if another library has a free computer. It's already the second library. In the first ive got #hausverbot because I dont want to be #homeless anymore, see other thread on this masto account.

Discussione continua
Pubblico
Jörn Franke

Check your programming frameworks. For example, this is currently only planned in the upcoming major Version of the Spring framework github.com/spring-projects/spr

At least for the Rust crate openidconnect-rs this is included in the default example: docs.rs/openidconnect/latest/o

PKCE is recommended to prevent CSRF and authorization code injection attacks. We should consider enabling enabling PKCE for authorization_code flows by default to ensure we have secure defaults. In...
GitHubConsider Enabling PKCE for Authorization Code by Default · Issue #16391 · spring-projects/spring-securityDi rwinch
#oauth#oauth2_1#spring
Pubblico *
Jörn Franke

browsing the specs of OAuth 2.1 and found that PKCE is now mandatory for Authorization Code Flow (not only Desktops or frontend-only apps!):
datatracker.ietf.org/doc/html/

"The authorization code grant is extended with the functionality from PKCE [RFC7636] such that the default method of using the authorization code grant according to this specification requires the addition of the PKCE parameters"

Logo of the IETF
IETF DatatrackerThe OAuth 2.1 Authorization FrameworkThe OAuth 2.1 authorization framework enables an application to obtain limited access to a protected resource, either on behalf of a resource owner by orchestrating an approval interaction between the resource owner and an authorization service, or by allowing the application to obtain access on its own behalf. This specification replaces and obsoletes the OAuth 2.0 Authorization Framework described in RFC 6749 and the Bearer Token Usage in RFC 6750.
#oauth#oauth2_1#pkce
EsploraFeed dal vivo
Info