8000 Keycloak needs to return invalid_request from Token Endpoint if a token or refresh request lacks DPOP proof by tnorimat · Pull Request #34845 · keycloak/keycloak · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content

Keycloak needs to return invalid_request from Token Endpoint if a token or refresh request lacks DPOP proof #34845

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 1 commit into from
Nov 13, 2024
Merged

Keycloak needs to return invalid_request from Token Endpoint if a token or refresh request lacks DPOP proof #34845

merged 1 commit into from
Nov 13, 2024

Conversation

tnorimat
Copy link
Contributor

closes #34842

@tnorimat
Keycloak needs to return invalid_request from Token Endpoint if a tok…
e41b72f 
…en or refresh request lacks DPOP proof

closes keycloak#34842

Signed-off-by: Takashi Norimatsu <takashi.norimatsu.ws@hitachi.com>
@tnorimat tnorimat requested review from a team as code owners November 12, 2024 07:51
@tnorimat
Copy link
Contributor Author

@mposolda Hello, this PR is related to passing the latest version of FAPI 2.0 security profile as follows. If possible, could you review the PR?
keycloak/kc-sig-fapi#655
keycloak/kc-sig-fapi#649

@mposolda mposolda self-assigned this Nov 13, 2024
mposolda
mposolda approved these changes Nov 13, 2024
View reviewed changes
Copy link
Contributor
@mposolda mposolda left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@tnorimat Thanks

@mposolda mposolda merged commit 9c7ed30 into keycloak:main Nov 13, 2024
75 checks passed
@tnorimat tnorimat deleted the ISSUE-34842 branch November 14, 2024 08:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@mposolda mposolda mposolda approved these changes

Assignees

@mposolda mposolda

Labels
team/cloud-native team/core-clients team/core-iam
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

Keycloak needs to return "invalid_request" from Token Endpoint if a token or refresh request lacks DPOP proof
2 participants
@tnorimat @mposolda
0