oidc pkce support

2026-02-25 15:07:54 +02:00
parent 74b1c2ba98
commit d678307d2d
15 changed files with 253 additions and 4 deletions
@@ -82,9 +82,11 @@ class OidcLoginHandler extends LoginHandler {
     *  clientId: string,
     *  redirectUri: string,
     *  scopes: string[],
-     *  claims: ?string,
+     *  claims: string|null,
     *  prompt: 'login'|'consent'|'select_account',
-     *  maxAge: ?Number,
+     *  maxAge: Number|null,
+     *  codeChallenge: string|null,
+     *  codeChallengeMethod: string|null
     * }} data
     * @param {WindowProxy} proxy
     * @return {Promise<{code: string, nonce: string}>}
@@ -103,6 +105,11 @@ class OidcLoginHandler extends LoginHandler {
            prompt: data.prompt,
        };

+        if (data.codeChallenge && data.codeChallengeMethod) {
+            params.code_challenge = data.codeChallenge;
+            params.code_challenge_method = data.codeChallengeMethod;
+        }
+
        if (data.maxAge || data.maxAge === 0) {
            params.max_age = data.maxAge;
        }