{"payload":{"feedbackUrl":"https://github.com/orgs/community/discussions/53140","repo":{"id":18187508,"defaultBranch":"master","name":"mod_auth_openidc","ownerLogin":"OpenIDC","currentUserCanPush":false,"isFork":false,"isEmpty":false,"createdAt":"2014-03-27T18:54:06.000Z","ownerAvatar":"https://avatars.githubusercontent.com/u/26088328?v=4","public":true,"private":false,"isOrgOwned":true},"refInfo":{"name":"","listCacheKey":"v0:1715196065.0","currentOid":""},"activityList":{"items":[{"before":"f1dba0ca99f472d37af72563518cd171eac1c99b","after":"855d780e61c43e4639c829ab75df47993d796fa5","ref":"refs/heads/v3.x","pushedAt":"2024-06-05T18:10:46.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"zandbelt","name":"Hans Zandbelt","path":"/zandbelt","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/2339879?s=80&v=4"},"commit":{"message":"release 3.4.0: depend on liboauth2 >= 1.6.2\n\nSigned-off-by: Hans Zandbelt ","shortMessageHtmlLink":"release 3.4.0: depend on liboauth2 >= 1.6.2"}},{"before":"d8dac6b1e381af019a15b7c812b9e572783d3855","after":"d9e9990eeecfc2f8559b7250528f824b7294571e","ref":"refs/heads/master","pushedAt":"2024-06-05T13:52:07.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"zandbelt","name":"Hans Zandbelt","path":"/zandbelt","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/2339879?s=80&v=4"},"commit":{"message":"add \"nbf\" claim in the Request Object\n\nas per https://openid.net/specs/openid-financial-api-part-2-1_0-final.html#rfc.section.5.2.2\n\nSigned-off-by: Hans Zandbelt ","shortMessageHtmlLink":"add \"nbf\" claim in the Request Object"}},{"before":"38bf65bf10836ed9d21560fd823b044633802da9","after":"d8dac6b1e381af019a15b7c812b9e572783d3855","ref":"refs/heads/master","pushedAt":"2024-06-05T11:18:39.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"zandbelt","name":"Hans Zandbelt","path":"/zandbelt","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/2339879?s=80&v=4"},"commit":{"message":"refactor/rename functions in proto.c into jwt.c/id_token.c/token.c\n\nSigned-off-by: Hans Zandbelt ","shortMessageHtmlLink":"refactor/rename functions in proto.c into jwt.c/id_token.c/token.c"}},{"before":"aebd9ed06b7659e9566b5e514d650cc609bfec74","after":"38bf65bf10836ed9d21560fd823b044633802da9","ref":"refs/heads/master","pushedAt":"2024-06-04T21:32:50.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"zandbelt","name":"Hans Zandbelt","path":"/zandbelt","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/2339879?s=80&v=4"},"commit":{"message":"refactor proto.c into subdir and files\n\nSigned-off-by: Hans Zandbelt ","shortMessageHtmlLink":"refactor proto.c into subdir and files"}},{"before":"488dadf9c397369c371abe2851c8d5fc67a34e5e","after":"aebd9ed06b7659e9566b5e514d650cc609bfec74","ref":"refs/heads/master","pushedAt":"2024-06-04T13:57:01.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"zandbelt","name":"Hans Zandbelt","path":"/zandbelt","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/2339879?s=80&v=4"},"commit":{"message":"use cjose_get_dealloc() consistently\n\nfix memory leaks in oidc_proto_dpop\n\nSigned-off-by: Hans Zandbelt ","shortMessageHtmlLink":"use cjose_get_dealloc() consistently"}},{"before":"edc5ef8f7975a48b1546093406e6525c8b759292","after":"488dadf9c397369c371abe2851c8d5fc67a34e5e","ref":"refs/heads/master","pushedAt":"2024-06-04T11:23:30.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"zandbelt","name":"Hans Zandbelt","path":"/zandbelt","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/2339879?s=80&v=4"},"commit":{"message":"add DPoP and FAPI 2.0 support\n\n- add (client) support for RFC 9449 OAuth 2.0 Demonstrating Proof of\nPossession (DPoP)\n- replace multi-provider .conf \"issuer_specific_redirect_uri\" boolean\nwith \"response_require_iss\" boolean\n- tighten up the \"aud\" claim validation in ID tokens\n- add support for the FAPI 2.0 Security Profile\nhttps://openid.net/specs/fapi-2_0-security-profile-ID2.html\n\nSigned-off-by: Hans Zandbelt ","shortMessageHtmlLink":"add DPoP and FAPI 2.0 support"}},{"before":"652ab1baaca66137b099bee61a40e60428e6f40f","after":"edc5ef8f7975a48b1546093406e6525c8b759292","ref":"refs/heads/master","pushedAt":"2024-05-30T23:53:27.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"zandbelt","name":"Hans Zandbelt","path":"/zandbelt","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/2339879?s=80&v=4"},"commit":{"message":"add support for RFC 9126 OAuth 2.0 Pushed Authorization Requests\n\nSigned-off-by: Hans Zandbelt ","shortMessageHtmlLink":"add support for RFC 9126 OAuth 2.0 Pushed Authorization Requests"}},{"before":"da8718c89bd92cbe00d1f7b885a3e5fde85238b9","after":"652ab1baaca66137b099bee61a40e60428e6f40f","ref":"refs/heads/master","pushedAt":"2024-05-29T16:44:20.000Z","pushType":"push","commitsCount":2,"pusher":{"login":"zandbelt","name":"Hans Zandbelt","path":"/zandbelt","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/2339879?s=80&v=4"},"commit":{"message":"add a note that private_key_jwt must come after OIDCPrivateKeyFiles\n\nsee #1223\n\nSigned-off-by: Hans Zandbelt ","shortMessageHtmlLink":"add a note that private_key_jwt must come after OIDCPrivateKeyFiles"}},{"before":null,"after":"4be242a916c85052d193167383a08035ff98f026","ref":"refs/heads/fedcm","pushedAt":"2024-05-08T19:21:05.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"zandbelt","name":"Hans Zandbelt","path":"/zandbelt","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/2339879?s=80&v=4"},"commit":{"message":"first stab at FedCM support\n\nSigned-off-by: Hans Zandbelt ","shortMessageHtmlLink":"first stab at FedCM support"}},{"before":"96cb5c278f2292fa097c6065609f7a11060681a6","after":"da8718c89bd92cbe00d1f7b885a3e5fde85238b9","ref":"refs/heads/master","pushedAt":"2024-05-02T13:47:16.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"zandbelt","name":"Hans Zandbelt","path":"/zandbelt","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/2339879?s=80&v=4"},"commit":{"message":"util.c: complete function renaming and documentation\n\nSigned-off-by: Hans Zandbelt ","shortMessageHtmlLink":"util.c: complete function renaming and documentation"}},{"before":"fbb506516824704058d7a14d24d34047ffc314ff","after":"96cb5c278f2292fa097c6065609f7a11060681a6","ref":"refs/heads/master","pushedAt":"2024-05-02T08:28:54.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"zandbelt","name":"Hans Zandbelt","path":"/zandbelt","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/2339879?s=80&v=4"},"commit":{"message":"session.c: complete function documentation\n\nSigned-off-by: Hans Zandbelt ","shortMessageHtmlLink":"session.c: complete function documentation"}},{"before":"1f2697468a505c66439117b769dbe6779d26968c","after":"fbb506516824704058d7a14d24d34047ffc314ff","ref":"refs/heads/master","pushedAt":"2024-04-29T12:44:20.000Z","pushType":"push","commitsCount":2,"pusher":{"login":"zandbelt","name":"Hans Zandbelt","path":"/zandbelt","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/2339879?s=80&v=4"},"commit":{"message":"proto.c: complete function documentation\n\nrename oidc_proto_resolve_userinfo to oidc_proto_userinfo_request\n\nSigned-off-by: Hans Zandbelt ","shortMessageHtmlLink":"proto.c: complete function documentation"}},{"before":"7b06f77f7580fc4ad27cd63c6660bdddc4217cc4","after":"1f2697468a505c66439117b769dbe6779d26968c","ref":"refs/heads/master","pushedAt":"2024-04-24T07:28:48.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"zandbelt","name":"Hans Zandbelt","path":"/zandbelt","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/2339879?s=80&v=4"},"commit":{"message":"remove RSAES-PKCS1-V1_5 tests so make check runs against cjose-0.6.2.3\n\nSigned-off-by: Hans Zandbelt ","shortMessageHtmlLink":"remove RSAES-PKCS1-V1_5 tests so make check runs against cjose-0.6.2.3"}},{"before":"a65ff57f9ce20c714b577c8f6b6633d79a07043b","after":"7b06f77f7580fc4ad27cd63c6660bdddc4217cc4","ref":"refs/heads/master","pushedAt":"2024-04-23T16:07:28.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"zandbelt","name":"Hans Zandbelt","path":"/zandbelt","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/2339879?s=80&v=4"},"commit":{"message":"disable support for the RSA PKCS v1.5 JWE encryption algorithm\n\nas it is deemed unsafe due to the Marvin attack and is removed from\nlibcjose as well\n\nSigned-off-by: Hans Zandbelt ","shortMessageHtmlLink":"disable support for the RSA PKCS v1.5 JWE encryption algorithm"}},{"before":"8736dd181c140e4d89c469d6e7014983c446e9c7","after":"a65ff57f9ce20c714b577c8f6b6633d79a07043b","ref":"refs/heads/master","pushedAt":"2024-04-23T10:07:42.000Z","pushType":"push","commitsCount":3,"pusher":{"login":"zandbelt","name":"Hans Zandbelt","path":"/zandbelt","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/2339879?s=80&v=4"},"commit":{"message":"mod_auth_openidc.c: complete function docs\n\nreformat with clang-format-18.1.3\n\nSigned-off-by: Hans Zandbelt ","shortMessageHtmlLink":"mod_auth_openidc.c: complete function docs"}},{"before":"626a86dae89059c6bb5b028d2def3664a9b236a5","after":"8736dd181c140e4d89c469d6e7014983c446e9c7","ref":"refs/heads/master","pushedAt":"2024-04-22T14:02:42.000Z","pushType":"push","commitsCount":3,"pusher":{"login":"zandbelt","name":"Hans Zandbelt","path":"/zandbelt","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/2339879?s=80&v=4"},"commit":{"message":"jose.c: document functions\n\nSigned-off-by: Hans Zandbelt ","shortMessageHtmlLink":"jose.c: document functions"}},{"before":"0aa5431d917a635f77e473fdb725f4438c561b74","after":"626a86dae89059c6bb5b028d2def3664a9b236a5","ref":"refs/heads/master","pushedAt":"2024-04-05T14:51:21.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"zandbelt","name":"Hans Zandbelt","path":"/zandbelt","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/2339879?s=80&v=4"},"commit":{"message":"add debug printout for OIDCUnAuthAction expression evaluation\n\nSigned-off-by: Hans Zandbelt ","shortMessageHtmlLink":"add debug printout for OIDCUnAuthAction expression evaluation"}},{"before":"66b84a0a6c390af3450bf2b83afbd64e4c3df478","after":"0aa5431d917a635f77e473fdb725f4438c561b74","ref":"refs/heads/master","pushedAt":"2024-04-03T10:35:09.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"zandbelt","name":"Hans Zandbelt","path":"/zandbelt","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/2339879?s=80&v=4"},"commit":{"message":"re-use expression from OIDCUnAuthAction for OIDCUnAutzAction stepup auth\n\nwhen an expression is configured for OIDCUnAuthAction (i.e. in the 2nd\nargument), also apply it to OIDCUnAutzAction so that it can be used to\nenable step-up authentication for SPAs with non-conformant browsers\n(some versions of Safari) and in (potentially insecure) iframes;\nsee #1205; thanks @ryanwilliamnicholls\n\nSigned-off-by: Hans Zandbelt ","shortMessageHtmlLink":"re-use expression from OIDCUnAuthAction for OIDCUnAutzAction stepup auth"}},{"before":"52f8e65dfd0b5880729ffeadd4acb5441c957f3e","after":"66b84a0a6c390af3450bf2b83afbd64e4c3df478","ref":"refs/heads/master","pushedAt":"2024-04-02T15:14:27.000Z","pushType":"push","commitsCount":2,"pusher":{"login":"zandbelt","name":"Hans Zandbelt","path":"/zandbelt","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/2339879?s=80&v=4"},"commit":{"message":"README.md: correct link to OpenID RP Certification anchor\n\nminor grammar fixes\n\nSigned-off-by: Hans Zandbelt ","shortMessageHtmlLink":"README.md: correct link to OpenID RP Certification anchor"}},{"before":"f46c77b2a177005d9300a02fdf60ef3fa6439c16","after":"52f8e65dfd0b5880729ffeadd4acb5441c957f3e","ref":"refs/heads/master","pushedAt":"2024-04-02T09:32:01.000Z","pushType":"push","commitsCount":2,"pusher":{"login":"zandbelt","name":"Hans Zandbelt","path":"/zandbelt","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/2339879?s=80&v=4"},"commit":{"message":"clang-format: use $(command) form for shell find command\n\nSigned-off-by: Hans Zandbelt ","shortMessageHtmlLink":"clang-format: use $(command) form for shell find command"}},{"before":"247c9f9af5b4bf49010c2d863972c5d83b81dcc5","after":"f46c77b2a177005d9300a02fdf60ef3fa6439c16","ref":"refs/heads/master","pushedAt":"2024-04-01T22:41:20.000Z","pushType":"push","commitsCount":2,"pusher":{"login":"zandbelt","name":"Hans Zandbelt","path":"/zandbelt","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/2339879?s=80&v=4"},"commit":{"message":"fix typos in redis pwd\n\nSigned-off-by: Hans Zandbelt ","shortMessageHtmlLink":"fix typos in redis pwd"}},{"before":"743240d16a62448a1edbf033dbb6b6fa05e3383b","after":"247c9f9af5b4bf49010c2d863972c5d83b81dcc5","ref":"refs/heads/master","pushedAt":"2024-04-01T13:29:07.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"zandbelt","name":"Hans Zandbelt","path":"/zandbelt","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/2339879?s=80&v=4"},"commit":{"message":"release 2.4.15.7\n\nSigned-off-by: Hans Zandbelt ","shortMessageHtmlLink":"release 2.4.15.7"}},{"before":"9ac1e205962dff01a557425c03840712722c82a9","after":"743240d16a62448a1edbf033dbb6b6fa05e3383b","ref":"refs/heads/master","pushedAt":"2024-03-29T21:45:10.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"zandbelt","name":"Hans Zandbelt","path":"/zandbelt","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/2339879?s=80&v=4"},"commit":{"message":"fix OIDCUserInfoRefreshInterval\n\ninterval seconds would be interpreted as microseconds\n\nSigned-off-by: Hans Zandbelt ","shortMessageHtmlLink":"fix OIDCUserInfoRefreshInterval"}},{"before":"73cc7f1e6569f5936acb97dec85a24c7da097c08","after":"9ac1e205962dff01a557425c03840712722c82a9","ref":"refs/heads/master","pushedAt":"2024-03-23T16:47:54.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"zandbelt","name":"Hans Zandbelt","path":"/zandbelt","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/2339879?s=80&v=4"},"commit":{"message":"remove failing scorecard.yml...\n\nSigned-off-by: Hans Zandbelt ","shortMessageHtmlLink":"remove failing scorecard.yml..."}},{"before":"b696f3dc7feb844c3edc28ccffabf5e060238075","after":"73cc7f1e6569f5936acb97dec85a24c7da097c08","ref":"refs/heads/master","pushedAt":"2024-03-14T20:06:57.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"zandbelt","name":"Hans Zandbelt","path":"/zandbelt","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/2339879?s=80&v=4"},"commit":{"message":"2.4.15.6: use SameSite=Lax when OIDCCookieSameSite is On\n\n(also by default) instead of Strict as overriding from Lax to Strict\ndoes not work reliably anymore (Chrome)\n\nSigned-off-by: Hans Zandbelt ","shortMessageHtmlLink":"2.4.15.6: use SameSite=Lax when OIDCCookieSameSite is On"}},{"before":"b696f3dc7feb844c3edc28ccffabf5e060238075","after":null,"ref":"refs/tags/v2.4.15.6","pushedAt":"2024-03-14T18:19:43.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"zandbelt","name":"Hans Zandbelt","path":"/zandbelt","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/2339879?s=80&v=4"}},{"before":"bc447a83733b385e3f10863b8cb65e4e2a174729","after":"b696f3dc7feb844c3edc28ccffabf5e060238075","ref":"refs/heads/master","pushedAt":"2024-03-14T17:39:47.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"zandbelt","name":"Hans Zandbelt","path":"/zandbelt","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/2339879?s=80&v=4"},"commit":{"message":"release 2.4.15.6\n\nSigned-off-by: Hans Zandbelt ","shortMessageHtmlLink":"release 2.4.15.6"}},{"before":"28bda50f7aef9ee9d3ef6ace5fe6f8f236ba363a","after":"bc447a83733b385e3f10863b8cb65e4e2a174729","ref":"refs/heads/master","pushedAt":"2024-03-14T14:59:29.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"zandbelt","name":"Hans Zandbelt","path":"/zandbelt","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/2339879?s=80&v=4"},"commit":{"message":"fix userinfo refresh interval parsing; closes #1200; thanks @HolgerHees\n\navoid refreshing userinfo on each request until access token expiry\nstore interval as JSON integer in session\n\nSigned-off-by: Hans Zandbelt ","shortMessageHtmlLink":"fix userinfo refresh interval parsing; closes #1200; thanks @HolgerHees"}},{"before":"595681c493ec03333f2b4e2cb6799417811ccb0c","after":"28bda50f7aef9ee9d3ef6ace5fe6f8f236ba363a","ref":"refs/heads/master","pushedAt":"2024-03-13T11:30:27.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"zandbelt","name":"Hans Zandbelt","path":"/zandbelt","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/2339879?s=80&v=4"},"commit":{"message":"release 2.4.15.5\n\nSigned-off-by: Hans Zandbelt ","shortMessageHtmlLink":"release 2.4.15.5"}},{"before":"3bb1e7c09e21a15ea29882d35477c70066ee7bec","after":"595681c493ec03333f2b4e2cb6799417811ccb0c","ref":"refs/heads/master","pushedAt":"2024-03-13T10:20:48.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"zandbelt","name":"Hans Zandbelt","path":"/zandbelt","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/2339879?s=80&v=4"},"commit":{"message":"fix `OIDCPassClaimsAs environment` bug introduced in 2.4.15.4\n\nsee #1196; thanks @HolgerHees\n\nSigned-off-by: Hans Zandbelt ","shortMessageHtmlLink":"fix OIDCPassClaimsAs environment bug introduced in 2.4.15.4"}}],"hasNextPage":true,"hasPreviousPage":false,"activityType":"all","actor":null,"timePeriod":"all","sort":"DESC","perPage":30,"cursor":"djE6ks8AAAAEXW2N0AA","startCursor":null,"endCursor":null}},"title":"Activity ยท OpenIDC/mod_auth_openidc"}