- Shipped
- 15 Novemba 2026, 10:52 UTC
- Author
- Kamo
- Commit
- fc3c53b
Hukua oauthserver / (kamwe forked): kwa-org mtoa pinned katika kwanza kuruhusu (https://login.<verified+ssl mizizi>, vinginevyo kuingia .< jukwaa apex> / o / < orgId>; wazalishaji wa awali bado alitumikia), ES256 kusaini funguo encrypted na PlatformSecretCipher na NEXT-> CURRENT-> RETIRED kazi mzunguko (SingletonTaskRunner), ugunduzi + RFC 8414 metadata + JWKS, id_token (nonce, auth_time, amr, acr, at_hash, sid; pairwise chini chaguo), userinfo, mteja-authenticated introspection, PAR, RP-initiated mwisho-session + nyuma-channel logout tokens, RFC 9207 iss juu ya kila kushikamana-app idhini jibu. Kusudi CONNECTED_APP na Mjumbe / Mteja watoa mkuu karibu na wale sauti-link; upatikanaji wa sera (idara / kazi majina / timu / wanachama / wateja) katika kuruhusu; ridhaa ASK / PREEAPPROVED kuhifadhiwa kama moja ACTIVE msaada kwa kila mwanachama (widened, kamwe badala); mtoa SSO kikao = OAuth-mode kujiandikisha katika *** ("Kuendelea kama", prompt = hakuna). Admin API /api/security/connected-apps (MANAGE_CONNECTED_APPS) na /api/security/my-app-grants. PKCE required kwa wateja umma (auth njia hakuna), hasa kurekebisha kulinganisha kuhifadhiwa. Alexa / Google Home / Msaidizi wateja (org_id NULL = safu jukwaa) kuweka SP09 mtiririko byte kwa byte; jukwaa ukurasa orodha yao tu.