Description	Shortcut
Open this window	`?`
Open the "+ New" dropdown	`c`
Go to personal dashboard	`d`
Open the "Switch to..." modal	`/` / `s`

Description	Shortcut
Focus first sidebar service	`shift + g`
Go to Test Management	`g + e`
Go to Trackers	`g + t`
Go to Git	`g + i`
Go to Documents	`g + d`
Go to Backlog	`g + b`
Go to Kanban	`g + k`

request #9408 Prevent mix-up attacks with OpenID Connect

Infos

Artifact ID#9408

Submitted byThomas Gerbet (tgerbet)

Last Modified On2016-08-24 12:19

Submitted on2016-08-18 18:38

Rank9685

Details

Summary *

Prevent mix-up attacks with OpenID Connect

Original Submission

It is a best practice to add the support of the nonce parameter in the authentication flow to prevent mix-up attacks [1].
Also, it could improve the number of providers we can use with the plugin since some of them like France Connect require the use of a nonce.

[1] https://openid.net/2016/07/16/preventing-mix-up-attacks-with-openid-connect/

CategoryAuthentication & LDAP

Reported in versionAll

PlatformEmpty

Is an Enhancement or an internal improvement?

[x] enhancement
[ ] internal improvement

CC listEmpty

Stage

Assigned toEmpty

StatusClosed

Close date2016-08-24

Attachments

Connected artifacts

Artifact links

By type:
Fixed in
Trackers:
Releases

	Artifact ID	Project	Tracker	Summary	Status	Last Update Date	Submitted By	Assigned to
	rel #9212	Tuleap	Releases	8.19	Delivered	2016-09-20 15:46	Manuel Vacelet (vaceletm)

Reverse artifact links

By type:
Trackers:

Empty

AttachmentsEmpty

References

Cross references

Referencing request #9408

Git commit

tuleap/tuleap/stable

Merge commit 'refs/changes/63/6363/2' of ssh://gerrit.tuleap.net:29418/tuleap into stable f615fdc56f

Nicolas Terray (nterray) , 9 years ago

request #9408: Prevent mix-up attacks with OpenID Connect 9f92619d00

Thomas Gerbet (tgerbet) , 9 years ago

Show items referenced by request #9408

Referenced by request #9408

Artifact Tracker v5

Other

Follow-ups

Nicolas Terray (nterray)

9 years ago

Connected artifacts
- Changed type from no type to Fixed in: rel #9212

Nicolas Terray (nterray)

9 years ago

Integrated into Tuleap 8.18.99.15

Status changed from Under review to Closed
Connected artifacts
- Added: rel #9212
Close date set to 2016-08-24

Thomas Gerbet (tgerbet)

9 years ago

A patch is under review: gerrit #6363.

Status changed from Under implementation to Under review

of

by