🔒️(backend) secure native app OIDC login with exchange codes

Browse Source

Add one-time exchange code mechanism for native app OIDC login.
Instead of exposing session ID in redirect URL, generates a
short-lived single-use code stored in Redis. Native apps exchange
this code for the session ID via a dedicated API endpoint.

Includes NativeAppRedirect for custom URL schemes, rate limiting,
logging, and whitelist of allowed schemes.

Closes #1153

Co-Authored-By: gigi206

...

This commit is contained in:

Michel-Marie MAUDET

2026-03-20 18:35:49 +01:00

parent 4f2c4bfaf9

commit 724a4ef3df

72 changed files with 846 additions and 1755 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

src/frontend/public/assets/logo-suite-numerique.png

BIN

Binary file not shown.

Side by Side Swipe Overlay Before Width:  |  Height:  |  Size: 8.9 KiB After Width:  |  Height:  |  Size: 11 KiB