gsadmin/headplane
1
0
Fork 0
mirror of https://github.com/tale/headplane.git synced 2026-07-26 07:48:14 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(oidc): correctly handle client_secret_basic fallback

Browse Source
This commit is contained in:
Aarnav Tale
2026-06-17 11:13:46 -04:00
parent 2f3a440de5
commit 21806caa05
2 changed files with 11 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app/server/oidc/provider.ts
+4 -3
View File
@@ -451,14 +451,15 @@ export function createOidcService(initialConfig: OidcConfig): OidcService {
body: URLSearchParams,
method: "client_secret_basic" | "client_secret_post",
): Promise<Result<TokenResponse, OidcError>> {
const requestBody = new URLSearchParams(body);
const headers: Record<string, string> = {
"Content-Type": "application/x-www-form-urlencoded",
Accept: "application/json",
};
if (method === "client_secret_post") {
body.set("client_id", config.clientId);
body.set("client_secret", config.clientSecret);
requestBody.set("client_id", config.clientId);
requestBody.set("client_secret", config.clientSecret);
} else {
const credentials = btoa(
`${encodeURIComponent(config.clientId)}:${encodeURIComponent(config.clientSecret)}`,
@@ -472,7 +473,7 @@ export function createOidcService(initialConfig: OidcConfig): OidcService {
response = await fetch(tokenEndpoint, {
method: "POST",
headers,
body: body.toString(),
body: requestBody.toString(),
signal: AbortSignal.timeout(10_000),
});
} catch (cause) {