Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Make the oauth2 state length configurable #65

Merged
merged 2 commits into from
Nov 23, 2024

Conversation

simon511000
Copy link
Contributor

Authelia requires that the state must be at least be 8 characters long to ensure sufficient entropy

@yzx9
Copy link
Collaborator

yzx9 commented Nov 21, 2024

It would be great if an environment variable could be added. May I request your attention on this?

@simon511000
Copy link
Contributor Author

Indeed, that's a good idea, I'll take care of it!

@simon511000
Copy link
Contributor Author

I made the OAuth2 state length configurable with a new OAUTH2_STATE_LENGTH variable, and reverted the default to 6 to preserve the current behavior.
I will create a second PR to document the configuration for Authelia once it supports adding custom user attributes (for is_admin) authelia/authelia#8081.

@simon511000 simon511000 changed the title Increase state length to 8 Make the oauth2 state length configurable Nov 22, 2024
@yzx9 yzx9 self-requested a review November 22, 2024 10:55
@yzx9 yzx9 merged commit 0fd1a27 into smhaller:master Nov 23, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants