Repository Issue Activity (beta)

#303 LoadAccessToken -> This checks for refresh token expiry but not refresh token existence

#297 Support Identity Assertion JWT Authorization Grant (ID-JAG)

#267 Validating redirect_uri via ValidateURIHandler is a bit weird

#298 Potential open redirect bypass

#296 No need to verify client_secret when use PKCE flow

#294 Open Security Advisory

#174 Support Multiple redirect URL?

#287 Could we get a new tagged release with the JWT CVE patched

#283 您好，看了你们的oauth2开源项目，请问可以帮忙改一套SSO登陆支持是OAUTH2.0授权码模式吗

#286 This library does not support scope

#285 The redirect jump url is abnormal, if it contains #

#167 Support RFC 7591: OAuth 2.0 Dynamic Client Registration Protocol

#247 Redirect URI is not compared to configured value

#162 Store client secret hashed in persistent store

#280 Update JWT lib version

#281 Update to JWT v5 to fix vulnerability

#278 Mixture of line endings

#275 Wrong PKCE padding in client example.

#274 Found no way to set the value of `ForcePKCE` to true

#270 [QUESTION] - how to make username password work with oauth2