Dan Milne 25e1043312 Add skip-consent, correctly use 303, rather than 302, actually rename per app 'logout' to 'require re-auth'. Add helper methods for token lifetime - allowing 10d for 10days for example.

2026-01-05 12:03:01 +11:00

..

api

Add skip-consent, correctly use 303, rather than 302, actually rename per app 'logout' to 'require re-auth'. Add helper methods for token lifetime - allowing 10d for 10days for example.

2026-01-05 12:03:01 +11:00

concerns

StandardRB fixes

2026-01-01 13:29:44 +11:00

.keep

First commit

2025-10-23 16:19:56 +11:00

input_validation_test.rb

StandardRB fixes

2026-01-01 13:29:44 +11:00

invitations_controller_test.rb

StandardRB fixes

2026-01-01 13:29:44 +11:00

oidc_authorization_code_security_test.rb

StandardRB fixes

2026-01-01 13:29:44 +11:00

oidc_pkce_controller_test.rb

OpenID Conformance: We need to return to the redirect_uri in the case of errors.

2026-01-02 15:12:55 +11:00

oidc_refresh_token_controller_test.rb

OpenID Conformance: user info endpoint should support get and post requets, not just get

2026-01-02 15:26:39 +11:00

oidc_userinfo_controller_test.rb

OpenID conformance test: we get a warning for not having a value for every claim. But we can explictly list support claims. Nothing we can do about a warning in the complience.

2026-01-02 16:35:12 +11:00

passwords_controller_test.rb

StandardRB fixes

2026-01-01 13:29:44 +11:00

sessions_controller_test.rb

StandardRB fixes

2026-01-01 13:29:44 +11:00

totp_security_test.rb

StandardRB fixes

2026-01-01 13:29:44 +11:00