Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(core): adjust userinfo endpoint validation on oauth callback #12669

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

matusca96
Copy link

@matusca96 matusca96 commented Feb 18, 2025

☕️ Reasoning

One line change on packages/core/src/lib/actions/callback/oauth/callback.ts to always rely on authorization server (as). This change is necessary because since we don't require userinfo and token endpoints if an issuer is provided, as per packages/core/src/lib/utils/assert.ts, we can retrieve both endpoints directly from the authorization server.

🧢 Checklist

  • Documentation
  • Tests
  • Ready to be merged

🎫 Affected issues

📌 Resources

Copy link

vercel bot commented Feb 18, 2025

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
auth-docs ✅ Ready (Inspect) Visit Preview 💬 Add feedback Feb 18, 2025 7:40pm
1 Skipped Deployment
Name Status Preview Comments Updated (UTC)
next-auth-docs ⬜️ Ignored (Inspect) Visit Preview Feb 18, 2025 7:40pm

Copy link

vercel bot commented Feb 18, 2025

@matusca96 is attempting to deploy a commit to the authjs Team on Vercel.

A member of the Team first needs to authorize it.

@matusca96
Copy link
Author

Can someone take a look on this? It's an annoying issue that requires us to provide issuer, userinfo and token endpoints, while only with the issuer we should have everything we need.

@matusca96
Copy link
Author

@ThangHuuVu can you take a look on this?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
core Refers to `@auth/core`
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant