Repository navigation

Validate OIDC resource tokens against provider session state - #906

Merged

KrzysztofPajak merged 2 commits into

feature/oidc-sessions-api

Oct 13, 2026

Merged

Validate OIDC resource tokens against provider session state#906
KrzysztofPajak merged 2 commits into
developfrom
feature/oidc-sessions-api

Commits on Oct 13, 2026
- OIDC resource server: maximum token age per resource, refuse tokens revoked by the provider
  KrzysztofPajak
  committed
  0936a40
- Require provider sign-in for OIDC-connected staff accounts (#903)
  KrzysztofPajak
  committed
  5306b24