traefikoidc

mirror of https://github.com/lukaszraczylo/traefikoidc.git synced 2026-10-12 04:04:26 +00:00

Files

T

lukaszraczylo f728f61777 fix(config): wire introspectionURL override and repair dead endpoint overrides (#152 )

Issue #152 asks for a manual introspection endpoint because some IdPs
omit introspection_endpoint from discovery. Analysis found the two
documented overrides revocationURL and oidcEndSessionURL were dead
code: the 1b49e13 rebuild dropped their constructor wiring.

Add the IntrospectionURL config field and wire all three overrides.
The overrides apply inside updateMetadataEndpoints, so they survive
every metadata refresh. A manual value always wins over discovery.
The constructor also seeds the live fields, so a failed discovery
does not lose operator configuration.

Manual values skip the poisoned-discovery defences on purpose. They
sit at the same trust tier as providerURL and isValidSecureURL gates
them at config time.

Add issue152_regression_test.go: 8 tests pin precedence, refresh
survival, cold-start seeding, end-to-end introspection over HTTP,
and the validation contract.

2026-08-09 01:59:47 +01:00

superpowers/specs

feat: opt-in M2M bearer-token authentication (supersedes #93 ) (#140 )

2026-05-18 17:35:37 +01:00

AUTH0_AUDIENCE_GUIDE.md

fix(config): wire introspectionURL override and repair dead endpoint overrides (#152 )

2026-08-09 01:59:47 +01:00

BEARER_AUTH.md

feat: opt-in M2M bearer-token authentication (supersedes #93 ) (#140 )

2026-05-18 17:35:37 +01:00

CNAME

Create CNAME