Repository navigation

All pull requests

fix: migrate go-jose to v4.1.6
#892mrchypark opened Nov 1, 2026
5
fix: return 400 instead of 500 for some client_assertion jwt errors
#891Oliboy50 opened Sep 9, 20266 tasks done
7
fix: avoid unbounded split in HMACStrategy.Signature
#890aroh3006 opened Sep 2, 2026
4
fix: map HMAC base64 decode failures to ErrInvalidTokenFormat
#889BetterAndBetterII opened Sep 2, 20262 tasks done
1
fix: parse aud claim from []interface{} in JWTClaims.FromMap
#887vincentluan opened Jul 21, 2026
2
feat: allow overriding PKCE verifier validation via CodeVerifierStrategy
#886shilps1583 opened Jul 15, 2026
4
fix: delete the PKCE request session only after a successful verification
#883shilps1583 opened Jul 15, 2026
2
fix: set "Content-Type" header rather than add
#878jfoshee opened May 19, 20266 tasks
2
fix: reject jwt-bearer assertions with future iat claim
#877SAY-5 opened May 13, 20263 of 6 tasks
2
Fix link to CONTRIBUTING.md
#871jjasghar opened Mar 11, 20265 of 6 tasks
chore(deps): bump golang.org/x/crypto from 0.31.0 to 0.45.0
#869dependabot[bot] opened Nov 20, 2025Bot
fix: return refresh token expiration time on introspection
#867mitar opened Oct 15, 2025Contributor5 of 6 tasks
fix: when used with a JWK, the kid value is used to match a JWK k…
#866jcouyang opened Oct 14, 20254 of 6 tasks
1
chore: upgrade to ristretto v2 and ory/x to latest
#865adityab-datadog opened Sep 17, 20256 tasks
2
add support for RFC8693 (Token Exchange / Token Delegation)
#863HarryKodden opened Aug 15, 20255 of 6 tasks
3
feat: pass new expiry to refresh rotation
#862aeneasr opened Jul 25, 2025Member
5
chore(deps): bump golang.org/x/oauth2 from 0.23.0 to 0.27.0
#861dependabot[bot] opened Jul 18, 2025Bot
fix: remove useless lock
#860aeneasr opened Jul 3, 2025Member6 tasks
chore(deps): bump github.com/go-jose/go-jose/v3 from 3.0.3 to 3.0.4
#858dependabot[bot] opened Jul 1, 2025Bot
fix: sign with jose.OpaqueSigner check incorrect key type
#854elct9620 opened Jun 20, 20256 tasks done
4
chore(deps): bump golang.org/x/net from 0.33.0 to 0.38.0
#852dependabot[bot] opened Apr 16, 2025Bot
fix: typo: JKWKSFetcherWithDefaultTTL -> JWKSFetcherWithDefaultTTL
#850FenTiger opened Apr 16, 2025
1
feat: configure client assertion issuer
#847tilgovi opened Apr 8, 20255 of 6 tasks
5
feat: store JWT claims in access request
#844phooijenga opened Feb 25, 20253 of 6 tasks
2
feat: (rfc8693) Token exchange
#821vivshankar opened Sep 1, 2024Contributor5 of 6 tasks
6

Pull requests