Dan Brown adfac3e30e OIDC: Updated state handling to prevent loss from other requests ...

Which was occuring in chrome, where background requests to the PWA
manifest, or opensearch, endpoint caused OIDC to fail due to lost state
since it was only flashed to the session.
This persists it with a manual TTL.

Added tests to cover.
Manually tested against Azure.
For #5929

2025-12-03 13:34:00 +00:00

..

ConfirmEmailController.php

Auth: Changed email confirmations to use login attempt user

2024-05-20 17:23:15 +01:00

ForgotPasswordController.php

Routes: Added throttling to a range of auth-related endpoints

2024-05-20 14:00:58 +01:00

HandlesPartialLogins.php

Auth: Changed email confirmations to use login attempt user

2024-05-20 17:23:15 +01:00

LoginController.php

OIDC RP Logout: Added autodiscovery support and test cases

2023-12-06 16:41:50 +00:00

MfaBackupCodesController.php

Cleaned up namespacing in routes

2023-05-18 20:57:05 +01:00

MfaController.php

Cleaned up namespacing in routes

2023-05-18 20:57:05 +01:00

MfaTotpController.php

Framework: Addressed deprecations

2024-03-17 16:52:19 +00:00

OidcController.php

OIDC: Updated state handling to prevent loss from other requests

2025-12-03 13:34:00 +00:00

RegisterController.php

Registration: Reviewed added simple honeypot, added testing

2024-05-04 13:59:41 +01:00

ResetPasswordController.php

Routes: Added throttling to a range of auth-related endpoints

2024-05-20 14:00:58 +01:00

Saml2Controller.php

SAML2: Fixed non-spec point of logout, Improved redirect location

2023-12-08 18:42:13 +00:00

SocialController.php

URL Handling: Removed referrer-based redirect handling

2023-12-10 12:37:21 +00:00

ThrottlesLogins.php

Extracted icon helper, aligned container resolution

2023-09-16 18:26:28 +01:00

UserInviteController.php

Cleaned up namespacing in routes

2023-05-18 20:57:05 +01:00