Girish Ramakrishnan
c15e342bb8
webadmin: remove the implicit flow
...
we now use pkce . main advantage is that we don't see the access token
in the url anymore.
in pkce, the auth code by itself is useless. need the verifier.
fixes #844
2026-03-15 17:38:27 +05:30
Johannes Zellner
76ab99bca6
redirectTo is not a const
2025-08-10 15:53:05 +02:00
Girish Ramakrishnan
337c5412b7
oidc: remove authcallback.html from history
...
this way atleast token goes away from history. part of #844
2025-07-10 14:03:29 +02:00
Girish Ramakrishnan
820aeee659
oidcserver: fix login events not being raised for webadmin
...
we should remove implicit flow at some point . also #844
2025-07-10 13:43:25 +02:00
Johannes Zellner
2300e1baee
Fully replace gulp with vite
2024-10-04 17:43:45 +02:00