Repository navigation

fix(auth): allow cross-origin resource_metadata urls - #1302

Merged

alexhancock merged 3 commits into

mainfrom

DaleSeo/oauth-discovery-rejects-cross-origin-resource_me

Oct 22, 2026

Merged

fix(auth): allow cross-origin resource_metadata urls#1302
alexhancock merged 3 commits into
mainfrom
DaleSeo/oauth-discovery-rejects-cross-origin-resource_me

Commits on Oct 22, 2026
- fix(auth): allow cross-origin resource_metadata urls
  DaleSeo
  committed
  f0b45e7
- fix(auth): reject https-to-http metadata downgrade
  DaleSeo
  committed
  30e61c0
- fix(auth): keep same-origin resource_metadata pointers
  DaleSeo
  committed
  4183f89