zitadel/internal/api
Livio Spring fb95f4a8a2
fix(oidc): only return state in access token response for implicit flow (#8108)
# Which Problems Are Solved

Introduced with #7822 the access token response incorrectly returned the
`state` parameter.

# How the Problems Are Solved

The `state` will only be returned for access token responses in an
implicit_flow.

# Additional Changes

None.

# Additional Context

- relates to #7822 
- relates to
https://github.com/zitadel/oidc/issues/446#issuecomment-2144999644
- backport to 2.53.x

---------

Co-authored-by: Tim Möhlmann <tim+github@zitadel.com>
2024-06-12 11:53:56 +00:00
..
assets fix: exclude db connection error details (#7785) 2024-04-23 08:35:25 +00:00
authz chore(deps): update all go deps (#7773) 2024-04-15 09:17:36 +00:00
call fix: reset the call timestamp after a bulk trigger (#6080) 2023-07-07 08:15:05 +00:00
grpc fix: consider oidc session events for authN milestones (#8089) 2024-06-12 06:49:14 +02:00
http fix: exclude db connection error details (#7785) 2024-04-23 08:35:25 +00:00
idp feat(saml): allow setting nameid-format and alternative mapping for transient format (#7979) 2024-05-23 05:04:07 +00:00
info fix: correct method and path for session api activity (#6880) 2023-11-22 12:12:23 +02:00
oidc fix(oidc): only return state in access token response for implicit flow (#8108) 2024-06-12 11:53:56 +00:00
robots_txt fix: introduce measures to avoid bots crawling and indexing activities (#5728) 2023-05-05 10:25:02 +02:00
saml feat(actions): allow getting metadata of organizations from user grants (#7782) 2024-04-22 11:34:23 +00:00
service fix(eventstore): tests 2020-11-26 09:19:14 +01:00
ui fix: potential panics in login and return proper http 405 (#8065) 2024-06-07 07:30:04 +00:00
api.go feat: improve instance not found error (#7413) 2024-02-28 10:49:57 +00:00