lukaszraczylo/traefikoidc
1
0
Fork 0
mirror of https://github.com/lukaszraczylo/traefikoidc.git synced 2026-11-03 07:44:13 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
3ce5f428cf42b20c32144010baa781231affb492
traefikoidc/internal
T
History
lukaszraczylo 3ce5f428cf fix(session): keep old access token on failed store, cap incoming path, fold proto case 
SetAccessToken cleared the old token before it found that no request
was available for the chunk cookies. The old token was lost.
The stored post-login path had no length bound and could bloat every
later Cookie header. It is now capped at 2048 bytes.
DetermineScheme compared X-Forwarded-Proto case-sensitively while the
cookie code did not, so HTTPS gave an http redirect_uri.
2026-11-03 01:10:36 +00:00
..
cache
fix(resilience): recover from unhealthy and close half-open on successes
2026-11-03 00:46:46 +00:00
cleanup
Security & correctness hardening: auth flow, cache, recovery, DCR, docs (#155)
2026-09-28 12:55:10 +01:00
dcrstorage
Security & correctness hardening: auth flow, cache, recovery, DCR, docs (#155)
2026-09-28 12:55:10 +01:00
pool
Security & correctness hardening: auth flow, cache, recovery, DCR, docs (#155)
2026-09-28 12:55:10 +01:00
recovery
fix(security): close confirmed findings from the 2026-10-15 hunt (#166)
2026-10-16 00:47:35 +01:00
testutil
Security & correctness hardening: auth flow, cache, recovery, DCR, docs (#155)
2026-09-28 12:55:10 +01:00
utils
fix(session): keep old access token on failed store, cap incoming path, fold proto case
2026-11-03 01:10:36 +00:00