Drop-OSS/drop
1
0
Fork 0
mirror of https://github.com/Drop-OSS/drop.git synced 2026-07-24 20:05:39 -04:00
Code Issues 77 Packages Projects Releases 10 Wiki Activity

[GH-ISSUE #292] Add PKCE support for OIDC #150

New Issue
Open
opened 2026-02-17 17:06:16 -05:00 by yindo · 0 comments
yindo commented 2026-02-17 17:06:16 -05:00
Owner
Copy Link
Copy Source

Originally created by @CEbbinghaus on GitHub (Nov 25, 2025).
Original GitHub issue: https://github.com/Drop-OSS/drop/issues/292

Most OIDC clients support PKCE (rfc7636) for the OIDC authentication. It not only allows for secret-less auth (which would be required if we wanted to authenticate the client application directly) but also strengthens the auth provided by the server.

Almost every single modern ODIC Provider supports PKCE and some even enforce it as a standard (such as kanidm) so there is really no downside, only additional security

Originally created by @CEbbinghaus on GitHub (Nov 25, 2025). Original GitHub issue: https://github.com/Drop-OSS/drop/issues/292 Most OIDC clients support PKCE ([rfc7636](https://datatracker.ietf.org/doc/html/rfc7636)) for the OIDC authentication. It not only allows for secret-less auth (which would be required if we wanted to authenticate the client application directly) but also strengthens the auth provided by the server. Almost every single modern ODIC Provider supports PKCE and some even enforce it as a standard (such as [kanidm](https://kanidm.com/)) so there is really no downside, only additional security
yindo added the featureconfirmedgood first issue labels 2026-02-17 17:06:17 -05:00
yindo changed title from Add PKCE support for OIDC to [GH-ISSUE #292] Add PKCE support for OIDC 2026-06-05 14:21:45 -04:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
bug
confirmed
duplicate
feature
feature
good first issue
needs-triage
pull-request
Mirrored from GitHub Pull Request
 qol
support
No Label confirmed feature good first issue
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
yindo
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: Drop-OSS/drop#150
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?