Livio Spring fb95f4a8a2

fix(oidc): only return state in access token response for implicit flow (#8108) ...

# Which Problems Are Solved

Introduced with #7822 the access token response incorrectly returned the
`state` parameter.

# How the Problems Are Solved

The `state` will only be returned for access token responses in an
implicit_flow.

# Additional Changes

None.

# Additional Context

- relates to #7822 
- relates to
https://github.com/zitadel/oidc/issues/446#issuecomment-2144999644
- backport to 2.53.x

---------

Co-authored-by: Tim Möhlmann <tim+github@zitadel.com>

2024-06-12 11:53:56 +00:00

..

access_token.go

perf(oidc): optimize token creation (#7822)

2024-05-16 07:07:56 +02:00

amr_test.go

feat(oidc): token exchange impersonation (#7516)

2024-03-20 10:18:46 +00:00

amr.go

perf(oidc): optimize token creation (#7822)

2024-05-16 07:07:56 +02:00

auth_request_converter_v2.go

merge main into next

2023-10-19 12:34:00 +02:00

auth_request_converter.go

fix(oidc): IDP and machine user auth methods (#7992)

2024-05-23 05:35:10 +00:00

auth_request_integration_test.go

fix(oidc): only return state in access token response for implicit flow (#8108)

2024-06-12 11:53:56 +00:00

auth_request.go

fix(oidc): respect role assertion and idTokenInfo flags and trigger preAccessToken trigger (#8046)

2024-05-31 10:10:18 +00:00

client_converter.go

perf(oidc): optimize token creation (#7822)

2024-05-16 07:07:56 +02:00

client_credentials.go

perf(oidc): optimize token creation (#7822)

2024-05-16 07:07:56 +02:00

client_integration_test.go

fix(oidc): respect role assertion and idTokenInfo flags and trigger preAccessToken trigger (#8046)

2024-05-31 10:10:18 +00:00

client.go

perf(oidc): optimize token creation (#7822)

2024-05-16 07:07:56 +02:00

device_auth.go

perf(oidc): optimize token creation (#7822)

2024-05-16 07:07:56 +02:00

error_test.go

fix: uniform oidc errors (#7237)

2024-01-18 07:10:49 +01:00

error.go

fix(oidc): return bad request for base64 errors (#7730)

2024-04-09 08:42:59 +02:00

introspect.go

fix(oidc): respect role assertion and idTokenInfo flags and trigger preAccessToken trigger (#8046)

2024-05-31 10:10:18 +00:00

jwt-profile.go

fix: uniform oidc errors (#7237)

2024-01-18 07:10:49 +01:00

key_test.go

chore(deps): update all go deps (#7773)

2024-04-15 09:17:36 +00:00

key.go

chore(deps): update all go deps (#7773)

2024-04-15 09:17:36 +00:00

oidc_integration_test.go

fix(oidc): respect role assertion and idTokenInfo flags and trigger preAccessToken trigger (#8046)

2024-05-31 10:10:18 +00:00

op.go

perf(oidc): optimize token creation (#7822)

2024-05-16 07:07:56 +02:00

server_integration_test.go

chore(oidc): add refresh token error integration test (#7766)

2024-04-17 08:38:03 +00:00

server_test.go

feat: restrict languages (#6931)

2023-12-05 11:12:01 +00:00

server.go

perf(oidc): optimize token creation (#7822)

2024-05-16 07:07:56 +02:00

token_client_credentials_integration_test.go

fix(oidc): respect role assertion and idTokenInfo flags and trigger preAccessToken trigger (#8046)

2024-05-31 10:10:18 +00:00

token_client_credentials.go

fix(oauth2): correctly return an error on client_credentials and jwt_profile (#8092)

2024-06-12 06:42:50 +00:00

token_code.go

fix(oidc): only return state in access token response for implicit flow (#8108)

2024-06-12 11:53:56 +00:00

token_device.go

fix(oidc): respect role assertion and idTokenInfo flags and trigger preAccessToken trigger (#8046)

2024-05-31 10:10:18 +00:00

token_exchange_converter.go

perf(oidc): optimize token creation (#7822)

2024-05-16 07:07:56 +02:00

token_exchange_integration_test.go

perf(oidc): optimize token creation (#7822)

2024-05-16 07:07:56 +02:00

token_exchange.go

fix(oidc): respect role assertion and idTokenInfo flags and trigger preAccessToken trigger (#8046)

2024-05-31 10:10:18 +00:00

token_jwt_profile_integration_test.go

fix(oidc): respect role assertion and idTokenInfo flags and trigger preAccessToken trigger (#8046)

2024-05-31 10:10:18 +00:00

token_jwt_profile.go

fix(oauth2): correctly return an error on client_credentials and jwt_profile (#8092)

2024-06-12 06:42:50 +00:00

token_refresh.go

fix(oidc): respect role assertion and idTokenInfo flags and trigger preAccessToken trigger (#8046)

2024-05-31 10:10:18 +00:00

token.go

fix(oidc): respect role assertion and idTokenInfo flags and trigger preAccessToken trigger (#8046)

2024-05-31 10:10:18 +00:00

userinfo_integration_test.go

fix(oidc): respect role assertion and idTokenInfo flags and trigger preAccessToken trigger (#8046)

2024-05-31 10:10:18 +00:00

userinfo_test.go

fix(oidc): respect role assertion and idTokenInfo flags and trigger preAccessToken trigger (#8046)

2024-05-31 10:10:18 +00:00

userinfo.go

fix(oidc): make sure id_token does not contain any info from access token actions (#8053)

2024-05-31 13:06:59 +00:00