Mauandkolaente 1790727981 fix(openid): stop logging raw token-endpoint response bodies ...

Three Debug-level log calls in the token-exchange path logged the
raw response body/full oauth2.Token on error. The full token struct
has no String() override, so %v printed AccessToken/RefreshToken in
clear text; the raw response body could similarly carry sensitive
request/response context. Log the RFC 6749 error/error_description
fields (successful-exchange-but-missing-id_token path: the token
type) instead - the intended human-readable diagnostic.

2026-07-29 22:53:46 +02:00

..

ldap

fix(auth): use binddn as group sync dn instead of userbind

2026-06-27 15:12:10 +00:00

oauth2server

fix(oauth2): burn authorization code even when validation fails (#3350)

2026-07-28 17:13:15 +02:00

openid

fix(openid): stop logging raw token-endpoint response bodies

2026-07-29 22:53:46 +02:00

auth_test.go

feat(auth): add GetAuthFromContext for Huma handlers

2026-05-31 12:56:57 +00:00

auth.go

chore(deps): replace vendored humaecho5 with upstream humaecho adapter (#3205)

2026-07-17 22:35:53 +02:00