diff options
author | M Hickford <mirth.hickford@gmail.com> | 2022-10-23 07:28:46 +0200 |
---|---|---|
committer | GitHub <noreply@github.com> | 2022-10-23 13:28:46 +0800 |
commit | afebbf29a92b895cd41038a06a68e6f4013df357 (patch) | |
tree | 3ffc1cadcc32be85ec59aede1fb7e01cb6eaeeb6 /go.mod | |
parent | f982a71997e057bce009574d04503177788e5a4e (diff) | |
download | gitea-afebbf29a92b895cd41038a06a68e6f4013df357.tar.gz gitea-afebbf29a92b895cd41038a06a68e6f4013df357.zip |
Require authentication for OAuth token refresh (#21421)
According to the OAuth spec
https://datatracker.ietf.org/doc/html/rfc6749#section-6 when "Refreshing
an Access Token"
> The authorization server MUST ... require client authentication for
confidential clients
Fixes #21418
Co-authored-by: Gusted <williamzijl7@hotmail.com>
Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>
Diffstat (limited to 'go.mod')
0 files changed, 0 insertions, 0 deletions