hypo-sh/emissary

Issues

• Gracefully handle absent `origin` remote

  #38 opened a year ago by telekid
  0

• Don't save entire remote config

  #33 opened a year ago by telekid
  0

• Document that it is not safe to ship config to browser

  #29 opened a year ago by telekid
  0

• Validate authentication response according to spec

  #4 opened a year ago by telekid
  0

• Ensure state parameter is round-tripped correctly

  #9 opened a year ago by telekid
  1

• Fix config key for redirect after authentication

  #27 opened a year ago by telekid
  1

• Handle token error response according to spec

  #5 opened a year ago by telekid
  1

• Create function that pulls browser-safe values from config map

  #22 opened a year ago by telekid
  1

• Handle authentication response errors

  #3 opened a year ago by telekid
  0

• Support use of nonce value as described by spec

  #7 opened a year ago by telekid
  0

• Support acr claim to mandate that authentication is phishing-resistant

  #8 opened a year ago by telekid
  0

• Write test that validates that `access_token` is unsigned in make-handle-oidc

  #14 opened a year ago by telekid
  0

• Ensure all security considerations in OIDC spec are addressed

  #2 opened a year ago by telekid
  0

• Validate ID token according to spec

  #6 opened a year ago by telekid
  0

• Install and configure kondo

  #17 opened a year ago by telekid
  0

• Test calls to `save-session!`

  #16 opened a year ago by telekid
  0

• Test HTTP failures

  #15 opened a year ago by telekid
  0

• Factor out hypo-specific code

  #13 opened a year ago by telekid
  0

• Create docstrings for every public function

  #12 opened a year ago by telekid
  0

• Run cljs tests in CI

  #11 opened a year ago by telekid
  0

• Run clj tests in CI

  #10 opened a year ago by telekid
  0