OpenID Conformance: user info endpoint should support get and post requets, not just get

2026-01-02 15:26:39 +11:00
parent b09ddf6db5
commit f67a73821c
4 changed files with 30 additions and 11 deletions
--- a/config/routes.rb
+++ b/config/routes.rb
@@ -30,7 +30,7 @@ Rails.application.routes.draw do
  post "/oauth/authorize/consent", to: "oidc#consent", as: :oauth_consent
  post "/oauth/token", to: "oidc#token"
  post "/oauth/revoke", to: "oidc#revoke"
-  get "/oauth/userinfo", to: "oidc#userinfo"
+  match "/oauth/userinfo", to: "oidc#userinfo", via: [:get, :post]
  get "/logout", to: "oidc#logout"

  # ForwardAuth / Trusted Header SSO