goauthentik / goauthentik/authentik
OAuth implicit token response types, including the query-mode crash
- Dominant language
- Python
- Stars
- 25.6k
- Forks
- 2k
- Avg merge
- 1d 1h
- Merged PRs (30d)
- 644
Description
## What
OAuth implicit `token` / `id_token+token` response types. #4870 requests support; #21112 is the crash when using that response_type with response_mode=query.
## Want
- OAuth implicit `token` / `id_token+token` response types
- #4870 requests support
- #21112 is the crash when using that response_type with response_mode=query
## Ideas this came from
- [#4870 providers/oauth2: support `token` response type](https://github.com/goauthentik/authentik/issues/4870) — Currently, authentik supports these response types for an OAuth provider: It would be useful if it also supported the token response type as applications such a
- [#21112 OAuth: response_mode=query with response_type=id_token+token results in Python exception](https://github.com/goauthentik/authentik/issues/21112) — When using responsetype=idtoken token (no code) together with responsemode=query (instead of default), it results in a Python exception and doesn't work. How to
Contributor guide
Research direction
Start by tracing the OAuth response_type handling and the response_mode=query path, then read linked issues #4870 and #21112 for the requested behavior and crash details. Done means token and id_token+token implicit responses are supported and the query-mode Python exception no longer occurs.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- api, authentication, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Active
- Clarity
- Mostly clear
- Newbie friendliness
- 42/100