- Shipped
- 15 Novemba 2026, 09:54 UTC
- Author
- Kamo
- Commit
- d906985
- Mtoa relay: **************** na RFC 8414 **************** (Ifuatayo rewrites juu ya /oauth/well-known/*), **************** na /o/{orgId}/oauth/{authorize, alama, kufutwa}; X-Kuelekezwa-Host + X-Kamo-Mtoa-Org (mkondo org 1-20 namba, vinginevyo 404 bila wito); ugunduzi / JWKS kuweka SecurityService ya umma cache, kila kitu kingine hakuna-kuhifadhi; CORS kwa ugunduzi/JWKS/userinfo; 5xx/outage = 503, kamwe makosa ya kitambulisho. Mzizi /oauth/token|revoke kuweka SP09 ya header halisi kuweka (Amazon). - kuruhusu mbele **************** tu wakati kutumwa (mwili Alexa kukaa saba); prompt = hakuna inaendelea org ya mtoa mkutano server-upande na ifuatayo SecurityService ya redirect; loopback app asili / binafsi-schema kosa ni kufuatwa tu wakati inachukua ISS. - Kuunganishwa-app kuingia-katika (O2 aina APP): org-branded (mtoa org ya palette + nembo, slate fallback, giza mode), org = <alias> juu /api/login, amr juu ya kuunganishwa (pwd / pwd + OTP, kuweka na njia), kuunganishwa {redirectTo} au {consentPath} + providerSession -> HttpOnly mwenyeji-pekee kamo_op_<orgId> cookie; 409 wrong_organization card; kuendelea kama <name> kadi kupitia ... / kikao na ... / kuendelea (HttpOnly kuki kusoma server- upande tu); Si wewe? mwisho wa mtoa mkutano na restarts ombi moja. - Makubaliano ya kawaida kwa aina APP: app nembo karibu na org, orodha ya kawaida wigo na alama mpya, Alijiunga kama / Si wewe?, kuruhusu / Don't kuruhusu na vidokezo msaada, kukataa rahisi (ACCESS_POLICY ...); uamuzi {consentToken, uamuzi} tu, mtoa kuki kuhifadhiwa. Alexa / Google Nyumbani / Msaidizi idhini na kuingia-ni unchanged (SP09 wote vipimo untouched na kijani). - RP-initiated logout ukurasa [/o/{orgId}]/oauth/mwisho-session (server-kuanza, Kujiunga nje / Kukaa Kujiunga ndani, walinzi redirect); /api/logout pia kumalizika kila kamo_op_* mtoa mkutano (bounded 2.5 s, ndani muhimu kufuta kama backstop).