fix: patch OIDC consent flow regression and add CI build step

Browse Source

The OIDC app 1.16.2 broke the consent flow by only falling back to
session params when client_id is missing. After consent, the redirect
includes client_id and scope but loses state, response_type, and
redirect_uri — causing a 500. The submodule fix restores per-param
session fallback when ANY critical param is missing.

Also adds a CI build step for the OIDC app (composer + npm) so the
JS assets (oidc-consent.js, oidc-redirect.js) are available in OAuth
test profiles.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

...

This commit is contained in:

Chris Coutinho

2026-03-17 09:48:28 +01:00

parent 69b84102b1

commit 7a2280a981

3 changed files with 27 additions and 19 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

third_party/oidc

Vendored

+1 -1

Submodule third_party/oidc updated: 1f5d9ffe9f...d371a4a797