Skip to content

platform: RegisterOIDCClient takes a slice of redirect URIs#1

Merged
cyberb merged 1 commit into
masterfrom
oidc-redirect-uris
Jun 6, 2026
Merged

platform: RegisterOIDCClient takes a slice of redirect URIs#1
cyberb merged 1 commit into
masterfrom
oidc-redirect-uris

Conversation

@cyberb
Copy link
Copy Markdown
Member

@cyberb cyberb commented Jun 5, 2026

Replace the single redirectUri string with redirectUris []string so an app can register more than one redirect URI per OIDC client (e.g. a web callback and a mobile-app callback).

url.Values encodes the slice as repeated redirect_uri fields:

id=app&redirect_uri=%2Fcb&redirect_uri=%2Fmobile&require_pkce=true&token_endpoint_auth_method=client_secret_basic

which the platform reads via req.Form["redirect_uri"] (see syncloud/platform#749).

Breaking change: callers must pass []string. Since the platform accepts one or many values, a single-element slice behaves exactly as before — consuming apps update the call when they next bump golib.

Added TestClient_RegisterOIDCClient_SendsMultipleRedirectUris asserting both URIs are sent.

Replace the single redirectUri string with redirectUris []string so an app can
register more than one redirect URI (e.g. a web callback plus a mobile-app
callback). url.Values encodes the slice as repeated redirect_uri fields, which
the platform reads via req.Form["redirect_uri"].

Breaking change: callers must pass []string. The platform side already accepts
one or many values, so a single-element slice behaves exactly as before.
@cyberb cyberb merged commit 314bb58 into master Jun 6, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant