vigiloauth/vigilo

Support Request parameter during client authorization

开放

#346 创建于 2025年5月27日

 (0 条评论) (0 个反应) (0 位负责人)Go (9 个派生)auto 404
good first issuepriority: medium

仓库指标

星标
 (100 个星标)
PR 合并指标
 (平均合并 162天 7小时) (30 天内合并 1 个 PR)

描述

Description Add support for the OAuth 2.0/OpenID Connect request parameter, allowing clients to send a JWT-encoded request object directly in the authorization request. This enhances security by enabling signed and encrypted requests.

User Story: As a client developer, I want to send a signed JWT request object using the request parameter during authorization, So that I can securely transmit complex authorization request data.

Acceptance Criteria:

  • Support receiving the request parameter containing a JWT request object.
  • Validate the JWT signature and claims.
  • Parse and apply request object parameters to the authorization flow.
  • Handle errors for invalid or malformed request objects.
  • Document the feature and provide examples.

贡献者指南