goauthentik / goauthentik/authentik

OAuth implicit token response types, including the query-mode crash

Open
#25,308 0 comments 0 reactions 0 assignees View on GitHub
bug/confirmed enhancement enhancement/confirmed
Dominant language
Python
Stars
25.6k
Forks
2k
Avg merge
1d 1h
Merged PRs (30d)
644

Description

## What

OAuth implicit `token` / `id_token+token` response types. #4870 requests support; #21112 is the crash when using that response_type with response_mode=query.

## Want

- OAuth implicit `token` / `id_token+token` response types
- #4870 requests support
- #21112 is the crash when using that response_type with response_mode=query

## Ideas this came from

- [#4870 providers/oauth2: support `token` response type](https://github.com/goauthentik/authentik/issues/4870) — Currently, authentik supports these response types for an OAuth provider: It would be useful if it also supported the token response type as applications such a
- [#21112 OAuth: response_mode=query with response_type=id_token+token results in Python exception](https://github.com/goauthentik/authentik/issues/21112) — When using responsetype=idtoken token (no code) together with responsemode=query (instead of default), it results in a Python exception and doesn't work. How to

Contributor guide

Open the contributing guide

Research direction

Start by tracing the OAuth response_type handling and the response_mode=query path, then read linked issues #4870 and #21112 for the requested behavior and crash details. Done means token and id_token+token implicit responses are supported and the query-mode Python exception no longer occurs.

Written by the indexing model from the issue text.

Assessment

Tech stack
python
Domain
api, authentication, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Active
Clarity
Mostly clear
Newbie friendliness
42/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.