summercms

Files

Jakub Zych c0b1e3cfae feat(08-02): implement exact RFC 7591 registration in wristband

- Register validates redirect_uris/grant_types/response_types/auth-method
  in PHP's exact order, strips control characters and caps client_name at
  255 runes, and generates client_id/secret via crypto/rand base64url
- confidential clients return the raw secret once; only its sha256 hex
  persists (constant-time-comparable fixed transform)
- sweep-unconsented, the atomic cap check and the create all run inside one
  wristband.Backend.WithinTx transaction (T-08-DCR-FLOOD)
- 64 KiB body bound via http.MaxBytesReader collapses to the endpoint's
  native invalid_client_metadata body, matching D-21

2026-09-23 19:37:54 +02:00

crypto.go

test(08-02): add failing RFC 7591 registration RED test in wristband

2026-09-23 19:37:03 +02:00

feat(08-02): implement exact RFC 7591 registration in wristband

2026-09-23 19:37:54 +02:00

registration_test.go

test(08-02): add failing RFC 7591 registration RED test in wristband

2026-09-23 19:37:03 +02:00

server_test.go

feat(08-01): implement exact RFC 8414 metadata writer in wristband

2026-09-23 19:10:26 +02:00

server.go

test(08-02): add failing RFC 7591 registration RED test in wristband

2026-09-23 19:37:03 +02:00

stores.go

test(08-02): add failing RFC 7591 registration RED test in wristband

2026-09-23 19:37:03 +02:00