-
Notifications
You must be signed in to change notification settings - Fork 16
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Refactor and merge Callbacks #3151
Conversation
auth/api/iam/api.go
Outdated
if request.Params.State == nil || *request.Params.State == "" { | ||
return nil, oauthError(oauth.InvalidRequest, "missing state parameter") | ||
} |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
If the Callback has an error but is missing the client state, the actual error will not be shown
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
RFC6749 4.1.2.1. Error Response
state
REQUIRED if a "state" parameter was present in the client
authorization request. The exact value received from the
client.
I wasn't sure what to do with this, but I will wrap the error if there is one
@@ -472,64 +472,6 @@ paths: | |||
"$ref": "#/components/schemas/VerifiableCredential" | |||
default: | |||
$ref: '../common/error_response.yaml' | |||
/iam/oid4vci/callback: |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
also add to calback API description that it's used for both calls.
cleanup and merge callbacks. This contains some fixes listed in #3152, but the majority is left for when we have access to a compliant issuer so we can do an end to end test of the flow.