collective / collective/pas.plugins.oidc
Why can we set multiple redirect_uris ?
Open
bug
question
- Dominant language
- Python
- Stars
- 6
- Forks
- 16
- PR merge metrics
- No merged PRs in 30d
Description
`pas.plugins.oidc` allows setting multiple `redirect_uris`.
According to [OpenID Connect Core 1.0](https://openid.net/specs/openid-connect-core-1_0.html#AuthRequest), only **one** `redirect_uri` should be sent in an authentication request.
Configuring multiple `redirect_uris` causes `oic` to raise an exception on login:
```
2025-09-11 13:31:42,177 DEBUG [oic.oauth2:402][waitress-0] request:
oic.oauth2.message.TooManyValues: redirect_uri
```
**Question:** Is supporting multiple `redirect_uris` intentional, or is this a bug/misconfiguration?
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.