TheSunIsLeaking/DorkNet
3
0
Fork 0
mirror of https://github.com/DorkSquadRR/DorkNet.git synced 2026-10-25 15:08:47 -07:00
Code Issues Packages Projects Releases Wiki Activity

fix(auth): don't read the provider's userinfo endpoint by default

Browse Source 
Cloudflare Access answers userinfo without a Content-Type, which the
OpenID Connect handler rejects ("Unknown response type"), so every
sign-in failed after the code exchange. The ID token already carries
sub and email; DorkNet:SignIn:UseUserInfoEndpoint turns the call back
on for providers that need it.
This commit is contained in:
Alexa
2026-10-25 17:24:25 +02:00
parent 99f8c2e016
commit 94781fd11a
3 changed files with 10 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/deploy.md
+3
View File
@@ -477,6 +477,9 @@ DorkNet__SignIn__ClientSecret=<client secret>
DorkNet__SignIn__DisplayName=Cloudflare
# Optional: scopes, default "openid email profile".
DorkNet__SignIn__Scopes=openid email profile
# Optional: also read the userinfo endpoint (default false; the ID token is
# enough for most providers, and Cloudflare Access's userinfo can't be read).
DorkNet__SignIn__UseUserInfoEndpoint=false
```
Register these redirect URIs at the provider, one per host people sign in on: