Thanks to visit codestin.com
Credit goes to github.com

fix: match OAuth2 redirect_uri against every registered redirect URI - #29014

Merged

BobbyHo merged 21 commits into

mainfrom

plat582-1-redirect-uri-allowlist

Sep 9, 2026

Commits on Sep 6, 2026

Commits on Sep 7, 2026

Merge branch 'main' into plat488-1-loopback-comparator
BobbyHo
authored
baca1c6
Merge branch 'main' into plat488-1-loopback-comparator
BobbyHo
authored
c33f0b4
docs(codersdk): cite RFC 8252 correctly in the IsLoopbackAddress comment
BobbyHo
committed
182b465
docs(admin/integrations): say which hosts and clients get the loopback port exception
BobbyHo
committed
6cf371f
refactor(codersdk): unexport isLoopbackAddress and clarify RedirectURIMatches comments
BobbyHo
committed
6fa2fc6
fix(coderd): say the loopback port may differ in the redirect_uri mismatch error
BobbyHo
committed
2eeee6c
test(coderd/httpapi): collapse the loopback component mismatch cases
BobbyHo
committed
e521650
fix: match OAuth2 redirect_uri against every registered redirect URI
BobbyHo
committed
841c2b6
test(coderd/oauth2provider): authorize with a redirect URI that is not the first registered
BobbyHo
committed
2fc732b
docs(admin/integrations): say every registered redirect URI is honoured
BobbyHo
committed
cbfbb70

Commits on Sep 9, 2026