12 Commits

Include renames

Author	SHA1	Message	Date
raucao	8dd0bf10ce	Add PKCE support to remoteStorage OAuth ... Implements the optional OAuth 2.0 Authorization Code grant with PKCE (RFC 7636) for remoteStorage, as described in the remoteStorage spec (section 10.1). - Advertise the authorization and token endpoints plus the supported code_challenge method (S256) in WebFinger, and bump the advertised spec version to draft-dejong-remotestorage-27 - Add RsAuthorizationCode: a short-lived (5 min), single-use authorization code stored only as a SHA256 digest - Add RsOauthManager services for issuing and exchanging codes, including S256 verification - Add a cross-origin POST /rs/oauth/token endpoint that exchanges a code (and code_verifier) for an access token, with CORS and no CSRF token - Consent dialog now carries response_type / code_challenge through the form and redirects with the code in the query string for the code flow - Remove the existing-token reuse shortcut so every authorization results in a distinct authorization (and token) Part of #254	2026-11-03 09:17:43 +04:00
raucao	bc37df52a0	Allow remote access to dev services	2026-10-06 19:34:24 +02:00
raucao	a098ea43bb	Add avatar URL to Webfinger when available	2025-05-14 15:39:50 +04:00
raucao	646c95ecc2	Fix local/development RS auth URL	2025-04-27 16:09:32 +04:00
raucao	27d9f73c61	Set host for RS auth url ... With X-Forwarded-Host set on the proxied request, Rails uses that host for URLs. But we need it to be the accounts domain.	2024-09-14 17:17:09 +02:00
raucao	af3da0a26c	Set CORS headers for all .well-known responses ... So we don't have to consider it for reverse proxies etc.	2024-09-10 16:06:11 +02:00
raucao	8f600f44bd	Add Mastodon aliases and links to Webfinger when enabled ... Also requires "remotestorage" service to be enabled via attribute	2024-04-04 17:17:57 +03:00
raucao	243cf9c08d	Don't add CORS headers for Webfinger in production ... The reverse proxy should handle it.	2024-01-26 11:01:45 +03:00
Râu Cao	1995e6dda2	Fix RS OAuth URL in Webfinger record	2023-11-16 12:44:59 +01:00
Râu Cao	56c127ca0c	Only allow primary domain for RS ... Replace user addresses with usernames in the respective URLs	2023-11-01 21:46:38 +01:00
Râu Cao	a2100b23a9	Formatting, wording	2023-04-11 11:41:30 +02:00
galfert	0774c88918	WebFinger endpoint	2023-04-10 21:23:21 +02:00