fix(openid): trim secret gates and add PKCE client metadata tests

This commit is contained in:
CMF\e-leite 2026-04-02 16:39:20 +01:00
parent c9fb9c4a67
commit 3b7d8ac247
5 changed files with 77 additions and 7 deletions

View file

@ -526,7 +526,8 @@ OPENID_IMAGE_URL=
# Set to true to automatically redirect to the OpenID provider when a user visits the login page
# This will bypass the login form completely for users, only use this if OpenID is your only authentication method
OPENID_AUTO_REDIRECT=false
# Set to true to use PKCE (Proof Key for Code Exchange) for OpenID authentication
# Set to true to use PKCE (Proof Key for Code Exchange) for OpenID authentication.
# For public clients (no client secret), leave OPENID_CLIENT_SECRET empty and set this to true.
OPENID_USE_PKCE=false
#Set to true to reuse openid tokens for authentication management instead of using the mongodb session and the custom refresh token.
OPENID_REUSE_TOKENS=