[OIDC] Improve integration #1340

New issue

Open

opened 2025-07-31 18:06:30 +02:00 by hansegucker · 3 comments

hansegucker commented

2025-07-31 18:06:30 +02:00

Owner

We identified several things we need to support in our OIDC system, e.g. to support Matrix native OIDC. Respective issues are linked.

DOT should support more APIs/endpoints in order to secure OIDC clients, e.g. to allow forced logout and to prevent leaking sessions:

Furthermore, we should follow best practices more closely to improve compatibility (cf. https://openid.net/specs/openid-connect-core-1_0.html#Claims):

#1542

Some applications require or request to be informed about authentication of the user, e.g. to verify a second factor was used (cf. https://openid.net/specs/openid-connect-eap-acr-values-1_0.html):

#1067

We identified several things we need to support in our OIDC system, e.g. to support [Matrix native OIDC](https://areweoidcyet.com/). Respective issues are linked. DOT should support more APIs/endpoints in order to secure OIDC clients, e.g. to allow forced logout and to prevent leaking sessions: - https://github.com/jazzband/django-oauth-toolkit/pull/1573 - https://github.com/jazzband/django-oauth-toolkit/pull/1571 - https://github.com/jazzband/django-oauth-toolkit/pull/1543 - #1068 - #1064 - #1065 Furthermore, we should follow best practices more closely to improve compatibility (cf. https://openid.net/specs/openid-connect-core-1_0.html#Claims): - #1542 Some applications require or request to be informed about authentication of the user, e.g. to verify a second factor was used (cf. https://openid.net/specs/openid-connect-eap-acr-values-1_0.html): - #1067

Rows
Columns