2 Commits
Author SHA1 Message Date
Tuomo TanskanenandGitHub d7eae8fe79 remove extra method="get" from device-code template (#4145)
In device-code template, same form tag has method="post", then
followed by method="get".. Chrome can handle that as post just fine,
but in headless environments you might be using Lynx, which uses GET:
it results in 400 Bad Request from Dex server.

Signed-off-by: Tuomo Tanskanen <tuomo.tanskanen@est.tech>
2025-06-13 17:30:48 +02:00
Justin Slowikandjustin-slowik 9bbdc721d5 Device flow token code exchange (#2)
* Added /device/token handler with associated business logic and storage tests.

Perform user code exchange, flag the device code as complete.

Moved device handler code into its own file for cleanliness.  Cleanup

* Removed PKCE code

* Rate limiting for /device/token endpoint based on ietf standards

* Configurable Device expiry

Signed-off-by: justin-slowik <justin.slowik@thermofisher.com>
2020-07-08 16:25:05 -04:00