Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Review oxAuth default configuration to make it more strict by default #246

Closed
yurem opened this issue Jan 10, 2017 · 0 comments
Closed

Review oxAuth default configuration to make it more strict by default #246

yurem opened this issue Jan 10, 2017 · 0 comments
Assignees
@qbert2k @nynymike
Labels
enhancement Update to existing feature or functionality
Milestone
CE 3.0.0

Comments

@yurem
Copy link
Contributor

yurem commented Jan 10, 2017

New release is good change to disable legacy functionality by default to force customers to use new API or change code to not depends on workarounds:

We need to review default setting: https://github.com/GluuFederation/community-edition-setup/blob/master/templates/oxauth-config.json

For example we can change:

"legacyIdTokenClaims": true,

to

"legacyIdTokenClaims": false,
@yurem yurem added the enhancement Update to existing feature or functionality label Jan 10, 2017
@yurem yurem added this to the CE 3.0.0 milestone Jan 10, 2017
qbert2k added a commit that referenced this issue Jan 11, 2017
@qbert2k
community-edition-setup #246
25bf757 
Review oxAuth default configuration to make it more strict by default
@qbert2k qbert2k closed this as completed Jan 11, 2017
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@qbert2k qbert2k

@nynymike nynymike

Labels
enhancement Update to existing feature or functionality
Projects
None yet
Milestone
CE 3.0.0
Development

No branches or pull requests
3 participants
@qbert2k @nynymike @yurem