vikunja

github-starred/vikunja

Fork 0

mirror of https://github.com/go-vikunja/vikunja.git synced 2026-08-23 17:46:28 -05:00

Files

T

History

Mauandkolaente 1790727981 fix(openid): stop logging raw token-endpoint response bodies

Three Debug-level log calls in the token-exchange path logged the
raw response body/full oauth2.Token on error. The full token struct
has no String() override, so %v printed AccessToken/RefreshToken in
clear text; the raw response body could similarly carry sensitive
request/response context. Log the RFC 6749 error/error_description
fields (successful-exchange-but-missing-id_token path: the token
type) instead - the intended human-readable diagnostic.

2026-07-29 22:53:46 +02:00

cron.go

…

logout_test.go

fix(auth): build OIDC end-session URL with RP-Initiated Logout params (#2943 )

2026-06-19 18:27:33 +02:00

logout.go

fix(auth): build OIDC end-session URL with RP-Initiated Logout params (#2943 )

2026-06-19 18:27:33 +02:00

main_test.go

…

openid_test.go