jojo/routers/web
Gusted 37973790dc fix: verify code challenge of S256
We do not know for sure, but it is quite likely someone assumed implicit
fallthrough. This meant that if someone used S256 for PKCE, it simply
did not verify the code challenge and always accepted it.

PKCE only started working recently as it was broken for a long time
already, forgejo/forgejo!8678
2026-03-06 11:20:50 -07:00
..
admin fix(sec): consider webauthn for external login 2025-05-02 07:31:20 +02:00
auth fix: verify code challenge of S256 2026-03-06 11:20:50 -07:00
devtest [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
events [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
explore [v11.0/forgejo] fix(code-search): fix broken pagination. (#9005) 2025-08-23 14:04:14 +02:00
feed [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
healthcheck [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
misc [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
org [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
repo [v11.0/forgejo] 2025-11-21 combined security patches (#10039) 2025-11-21 04:31:31 +01:00
shared [v11.0/forgejo] fix: package cleaned rule fails if the keep count is too high (#9469) 2025-09-29 18:02:21 +02:00
user [v11.0/forgejo] fix(code-search): fix broken pagination. (#9005) 2025-08-23 14:04:14 +02:00
base.go [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
githttp.go [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
goget.go [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
home.go [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
metrics.go [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
nodeinfo.go [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
swagger_json.go [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
web.go [v11.0/forgejo] 2025-11-21 combined security patches (#10039) 2025-11-21 04:31:31 +01:00
webfinger.go [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00