vigiloauth/vigilo

Support Request parameter during client authorization

オープン

#346 opened on 2025/05/27

 (0 件のコメント) (0 件のリアクション) (0 人の担当者)Go (9 件のフォーク)auto 404
good first issuepriority: medium

Repository metrics

Stars
 (100 個のスター)
PR merge metrics
 (PR metrics pending)

説明

Description Add support for the OAuth 2.0/OpenID Connect request parameter, allowing clients to send a JWT-encoded request object directly in the authorization request. This enhances security by enabling signed and encrypted requests.

User Story: As a client developer, I want to send a signed JWT request object using the request parameter during authorization, So that I can securely transmit complex authorization request data.

Acceptance Criteria:

  • Support receiving the request parameter containing a JWT request object.
  • Validate the JWT signature and claims.
  • Parse and apply request object parameters to the authorization flow.
  • Handle errors for invalid or malformed request objects.
  • Document the feature and provide examples.

コントリビューターガイド