Brian Joerger 0d50c9369e feat(rp): optional authorized party check (#752) ...

This PR makes the default Authorized Party check in `rp.VerifyIDToken`
optional by adding an options parameter for dynamic verification
functions. This check is meant to be an optional validation requirement,
so some providers (including GCP) do not adhere to it.

See https://github.com/zitadel/oidc/issues/405 for more context.

Closes https://github.com/zitadel/oidc/issues/405

2025-07-31 08:36:27 +00:00

..

grants

chore(linting): apply gofumpt & goimports to all .go files (#225)

2022-10-05 09:33:10 +02:00

regression_data

fix: unmarshalling of scopes in access token (#327)

2023-03-15 14:44:49 +01:00

authorization_test.go

feat: go 1.22 and slog migration (#557)

2024-02-28 10:44:14 +01:00

authorization.go

feat(op): Add response_mode: form_post (#551)

2024-03-05 15:04:43 +02:00

code_challenge.go

upgrade this module to v3

2023-03-20 13:38:21 +02:00

device_authorization_test.go

feat: support verification_url workaround for DeviceAuthorizationResponse unmarshal (#577)

2024-04-08 13:43:31 +00:00

device_authorization.go

feat: support verification_url workaround for DeviceAuthorizationResponse unmarshal (#577)

2024-04-08 13:43:31 +00:00

discovery.go

feat(OP): add back channel logout support (#671)

2024-10-30 08:44:31 +00:00

error_test.go

feat(op): allow returning of parent errors to client (#629)

2024-08-09 05:10:11 +00:00

error.go

feat: support for session_state (#712)

2025-02-24 10:50:38 +00:00

introspection_test.go

fix: do not modify userInfo when marshaling

2023-03-28 12:58:34 +03:00

introspection.go

feat(oidc): add actor claim to introspection response (#570)

2024-03-18 11:36:16 +01:00

jwt_profile.go

chore(linting): apply gofumpt & goimports to all .go files (#225)

2022-10-05 09:33:10 +02:00

keyset_test.go

feat(deps): update go-jose to v4 (#588)

2024-04-11 18:13:30 +03:00

keyset.go

feat(crypto): hash algorithm for EdDSA (#638)

2024-08-21 07:32:13 +00:00

regression_assert_test.go

fix: do not modify userInfo when marshaling

2023-03-28 12:58:34 +03:00

regression_create_test.go

refactor: use struct types for claim related types (#283)

2023-03-10 16:31:22 +02:00

regression_test.go

chore: replace interface{} with any (#448)

2023-10-12 12:41:04 +03:00

revocation.go

feat: Token Revocation, Request Object and OP Certification (#130)

2021-11-02 13:21:35 +01:00

session.go

feat: update end session request to pass all params according to specification (#754)

2025-06-05 13:19:51 +02:00

token_request.go

fix: Omit empty assertion fields in client creds request (#745)

2025-07-02 12:34:13 +00:00

token_test.go

feat(OP): add back channel logout support (#671)

2024-10-30 08:44:31 +00:00

token.go

fix(op): add scope to access token scope (#664)

2024-11-13 08:49:55 +00:00

types_test.go

fix: ignore empty json strings for locale (#678)

2025-03-14 10:30:08 +00:00

types.go

feat: update end session request to pass all params according to specification (#754)

2025-06-05 13:19:51 +02:00

userinfo_test.go

fix: do not modify userInfo when marshaling

2023-03-28 12:58:34 +03:00

userinfo.go

feat: generic Userinfo and Introspect functions (#389)

2023-05-05 12:36:37 +00:00

util_test.go

refactor: use struct types for claim related types (#283)

2023-03-10 16:31:22 +02:00

util.go

fix: do not modify userInfo when marshaling

2023-03-28 12:58:34 +03:00

verifier_parse_test.go

feat: merge the verifier types (#336)

2023-03-22 19:18:41 +02:00

verifier_test.go

feat(rp): optional authorized party check (#752)

2025-07-31 08:36:27 +00:00

verifier.go

feat(rp): optional authorized party check (#752)

2025-07-31 08:36:27 +00:00