🐛(oauth2) disable PKCE for Proconnect
The PKCE is not available for Proconnect, security is made otherwise.
This commit is contained in:
@@ -178,3 +178,17 @@ class ProConnectValidator(BaseValidator):
|
|||||||
|
|
||||||
# Call the superclass method to create the authorization code
|
# Call the superclass method to create the authorization code
|
||||||
return super()._create_authorization_code(request, code, expires)
|
return super()._create_authorization_code(request, code, expires)
|
||||||
|
|
||||||
|
def is_pkce_required(self, client_id, request):
|
||||||
|
"""
|
||||||
|
Determine if PKCE is required for the given client.
|
||||||
|
For ProConnect, PKCE is disabled.
|
||||||
|
|
||||||
|
Args:
|
||||||
|
client_id: The client identifier.
|
||||||
|
request: The OAuth2 request object containing user and scope information.
|
||||||
|
|
||||||
|
Returns:
|
||||||
|
bool: True if PKCE is required, False otherwise.
|
||||||
|
"""
|
||||||
|
return False
|
||||||
|
|||||||
Reference in New Issue
Block a user