vigiloauth/vigilo

Support Request parameter during client authorization

開放

#346 建立於 2025年5月27日

 (0 則留言) (0 個反應) (0 位負責人)Go (9 個分叉)auto 404
good first issuepriority: medium

倉庫指標

星標
 (100 顆星)
PR 合併指標
 (平均合併 162天 7小時) (30 天內合併 1 個 PR)

描述

Description Add support for the OAuth 2.0/OpenID Connect request parameter, allowing clients to send a JWT-encoded request object directly in the authorization request. This enhances security by enabling signed and encrypted requests.

User Story: As a client developer, I want to send a signed JWT request object using the request parameter during authorization, So that I can securely transmit complex authorization request data.

Acceptance Criteria:

  • Support receiving the request parameter containing a JWT request object.
  • Validate the JWT signature and claims.
  • Parse and apply request object parameters to the authorization flow.
  • Handle errors for invalid or malformed request objects.
  • Document the feature and provide examples.

貢獻者指南