Repository navigation

oauth2: OIDC login nonce and per-attempt CSRF state - #14296

Draft

rootnomad wants to merge 6 commits into

apache:mainfrom

rootnomad:feature/oidc-nonce-state

Commits on Oct 8, 2026
- oauth2: add a generic OIDC provider type
  rootnomad
  committed
  4cad8b4
- oauth2: harden the generic OIDC provider from review
  rootnomad
  committed
  35f86d7
- oauth2: address generic OIDC review findings
  rootnomad
  committed
  8e69905
- oauth2: add OIDC nonce and a per-attempt CSRF state
  rootnomad
  committed
  1ff78f7
- oauth2: resolve the OIDC authorize endpoint server side, fix the login page
  rootnomad
  committed
  57c9fe0
- oauth2: update oauth2 tests for the OIDC review hardening
  rootnomad
  committed
  dae1029