Closed
Bug 2044463
Opened 2 months ago
Closed 2 months ago
add support for OAuth2 Authorization Server Issuer Identification
Categories
(Thunderbird :: Account Manager, enhancement)
Thunderbird
Account Manager
Tracking
(Not tracked)
RESOLVED
FIXED
153 Branch
People
(Reporter: jtracey, Assigned: jtracey)
References
(Blocks 1 open bug)
Details
Attachments
(1 file)
OAuth 2.0 Authorization Server Issuer Identification (IETF RFC2907) specifies behavior for clients we're not currently following. Namely, if the OAuth response provides an iss field, we should verify that it matches the issuer we launched the request with, and we should reject any responses that should have the iss field but don't.
|
Assignee | |
Comment 1•2 months ago
|
||
|
|
Assignee | |
Updated•2 months ago
|
Keywords: checkin-needed-tb
Target Milestone: --- → 153 Branch
Pushed by corey@thunderbird.net:
https://hg.mozilla.org/comm-central/rev/6081a1fa216a
Add support for OAuth2 Authorization Server Issuer Identification. r=darktrojan
You need to log in
before you can comment on or make changes to this bug.
Description
•