Jeremy Evans b1961b4a54 Avoid OIDC discovery at runtime ...

This avoids 4 separate requests from Clover to the OIDC provider
during an OIDC login flow, 2 Webfinger requests to
/.well-known/webfinger and 2 SWD requests to
/.well-known/openid-configuration, 1 each during the setup and
callback phases. These requests are unnecessary, since we can
record the necessary information during OIDC client registration.
OIDC login flow now only requires 3 server-initiated requests,
all during the callback phase.

This also means you don't need to set WebFinger.url_builder
and SWD.url_builder when testing with a local development server
using HTTP instead of HTTPS.

To avoid a lot of extra work, this modifies the migration added
earlier.  The migration has not been committed to main yet, so
this is safe.

2025-07-08 00:10:06 +09:00

25 KiB

Raw Permalink Blame History

View Raw