zitadel-oidc/pkg
Mark Laing 6e7ee79a68
pkg/client: Add integration tests for request aware cookie handling.
Adds a new type `cookieSpec` which is accepted as an argument to
`RunAuthorizationCodeFlow`. `TestRelyingPartySession` now runs with
`wrapServer` true/false and with two cookie handlers, one static and one
request aware.

The request aware handler extracts encryption keys from a secret using a
salt from a "login_id" cookie.

Signed-off-by: Mark Laing <mark.laing@canonical.com>
2025-06-06 09:45:46 +01:00
..
client pkg/client: Add integration tests for request aware cookie handling. 2025-06-06 09:45:46 +01:00
crypto feat(crypto): hash algorithm for EdDSA (#638) 2024-08-21 07:32:13 +00:00
http pkg/http: Don't set MaxAge if cookie handler is request aware. 2025-06-06 09:44:02 +01:00
oidc fix: ignore empty json strings for locale (#678) 2025-03-14 10:30:08 +00:00
op fix(op): Add mitigation for PKCE Downgrade Attack (#741) 2025-04-29 14:33:31 +00:00
strings refactor: mark pkg/strings as deprecated in favor of stdlib (#680) 2024-11-15 18:47:32 +02:00