6 commits

Author	SHA1	Message	Date
Jeremiah Lowin	67527c1f69	Block unsafe OAuth redirect schemes (#4419)	2026-07-05 17:16:10 -04:00
Jeremiah Lowin	cccb529f50	Fix DCR redirect URI validation (#4408)	2026-07-05 17:05:13 -04:00
Taylor Wilsdon	61e56c683e	enh: Add public API for updating OAuthProxy scopes after initialization (#4091)	2026-05-04 15:49:12 -04:00
Jeremiah Lowin	eb1426251c	Allow upstream client_id to be used directly without DCR (#3957) ... Co-authored-by: Claude <noreply@anthropic.com>	2026-04-17 15:22:44 -04:00
Fatia Kusuma Dewi	5587cb7c43	changeable allowed_client_redirect_uris (#3772)	2026-04-06 20:58:09 -04:00
Jeremiah Lowin	23bfdf0680	Consolidate test fixtures and refactor large test files (#2941)	2026-01-19 15:18:35 -05:00