Discourse OpenID Connect (OIDC)

balazsorban44 · 2024 年10 月 1 日 14:59

抱歉打扰，但有一个针对此的开放 PR，合并它以添加 PKCE 支持应该很容易。

@nbianca 我看到您是该存储库的最新提交者，您能看一下吗？

github.com/discourse/discourse-openid-connect

Enable PKCE Support

main ← Jincoco88912:main

opened 07:03AM - 29 Jul 24 UTC

Jincoco88912

+22 -0

### Enable PKCE Support #### Description This pull request enables support f…or PKCE (Proof Key for Code Exchange) to enhance the security of OpenID Connect. #### Changes - Added `openid_connect_use_pkce` configuration in `config/settings.yml`. - Implemented PKCE generation and validation logic in `lib/openid_connect_authenticator.rb`, including: - `generate_code_verifier` method: Generates a random code verifier. - `generate_code_challenge` method: Generates a code challenge based on the SHA256 algorithm. - Enabled support for `openid_connect_use_pkce` configuration in `plugin.rb`. #### Testing - Tested locally to ensure PKCE works as expected. - Successfully implemented in the production environment's identity server SSO. #### Additional Notes These changes will enhance the security of OpenID Connect, especially in public client scenarios.

话题		回复	浏览量
Discourse OAuth2 Basic Plugin official , oauth2 , auth-plugins , included-in-core	31	64106	2025 年7 月 24 日
Use Discourse as an identity provider (SSO, DiscourseConnect) Integrations sso , discourseconnect , how-to	143	49265	2024 年11 月 9 日
Configure sign up and log in with Auth0 using the OAuth2 Basic Plugin Integrations sso , oauth2 , auth-plugins , how-to	72	19436	2025 年4 月 10 日
Well known support? SSO oauth2	0	471	2023 年5 月 28 日
Setup DiscourseConnect - Official Single-Sign-On for Discourse (sso) Integrations sso , discourseconnect , configuring , how-to	42	450628	2025 年11 月 13 日

Discourse OpenID Connect (OIDC)

相关话题