Jakub Zych eaa545c6f3 test(19.4-03): pin OIDC code binding, credential-free logs and random subjects ...

- a code is refused for another client or redirect URI and burned
- authorize refuses plain and malformed challenges; verifier rules; 60 s code TTL
- rejected token exchanges log client id, IP and reason only; key parse errors quote no key
- a public sub is a random UUIDv4

2026-10-19 20:32:19 +02:00

6.7 KiB

Raw Blame History

View Raw