this repo has no description
validate token_endpoint_auth_method
+4
-1
+4
-1
atproto/auth/oauth/types.go
+4
-1
atproto/auth/oauth/types.go
···
124
124
return fmt.Errorf("%w: invalid web redirect_uris: %w", ErrInvalidClientMetadata, err)
125
125
}
126
126
if u.Scheme != "https" && u.Hostname() != "127.0.0.1" {
127
-
fmt.Printf("bad redirect_uris: %s\n", ru)
128
127
return fmt.Errorf("%w: web redirect_uris must have 'https' scheme", ErrInvalidClientMetadata)
129
128
}
130
129
}
130
+
}
131
+
132
+
if !(m.TokenEndpointAuthMethod == "none" || m.TokenEndpointAuthMethod == "private_key_jwt") {
133
+
return fmt.Errorf("%w: unsupported token_endpoint_auth_method", ErrInvalidClientMetadata)
131
134
}
132
135
133
136
if m.TokenEndpointAuthSigningAlg != nil && *m.TokenEndpointAuthSigningAlg == "none" {