Discourse OpenID Connect (OIDC)

balazsorban44 · 2024年十月1日 14:59

抱歉打扰，但有一个针对此的开放 PR，合并它以添加 PKCE 支持应该很容易。

@nbianca 我看到您是该存储库的最新提交者，您能看一下吗？

github.com/discourse/discourse-openid-connect

Enable PKCE Support

main ← Jincoco88912:main

opened 07:03AM - 29 Jul 24 UTC

Jincoco88912

+22 -0

### Enable PKCE Support #### Description This pull request enables support f…or PKCE (Proof Key for Code Exchange) to enhance the security of OpenID Connect. #### Changes - Added `openid_connect_use_pkce` configuration in `config/settings.yml`. - Implemented PKCE generation and validation logic in `lib/openid_connect_authenticator.rb`, including: - `generate_code_verifier` method: Generates a random code verifier. - `generate_code_challenge` method: Generates a code challenge based on the SHA256 algorithm. - Enabled support for `openid_connect_use_pkce` configuration in `plugin.rb`. #### Testing - Tested locally to ensure PKCE works as expected. - Successfully implemented in the production environment's identity server SSO. #### Additional Notes These changes will enhance the security of OpenID Connect, especially in public client scenarios.

話題		回覆	觀看
Discourse OAuth2 Basic Plugin official , oauth2 , auth-plugins , included-in-core	30	67377	2025年七月24日
Use Discourse as an identity provider (SSO, DiscourseConnect) Integrations sso , discourseconnect , how-to	142	52053	2024年十一月9日
Setup DiscourseConnect - Official Single-Sign-On for Discourse (sso) Integrations sso , discourseconnect , configuring , how-to	46	459331	2026年五月27日
Configure sign up and log in with Auth0 using the OAuth2 Basic Plugin Integrations sso , oauth2 , auth-plugins , how-to	73	20630	2025年十二月16日
Well known support? SSO oauth2	0	532	2023年五月28日

Discourse OpenID Connect (OIDC)

相關主題