properly configure the graph-explorer openid connect client

2021-06-10 13:11:47 +02:00
parent 279c73fbb5
commit 68079b7a4b
3 changed files with 103 additions and 64 deletions
@@ -0,0 +1,5 @@
+Enhancement: Properly configure graph-explorer client registration
+
+The client registration in the `identifier-registration.yaml` for the graph-explorer didn't contain `redirect_uris` nor `origins`. Both were added to prevent exploitation.
+
+https://github.com/owncloud/ocis/pull/2118
@@ -14,6 +14,11 @@ clients:
  - id: ocis-explorer.js
    name: oCIS Graph Explorer
    trusted: yes
+    redirect_uris:
+      - {{OCIS_URL}}/graph-explorer/
+    origins:
+      - {{OCIS_URL}}
+      

  - id: xdXOt13JKxym1B1QcEncf2XDkLAexMBFwiT9j6EfhhHFJhs2KM9jbjTmf8JBXE69
    secret: UBntmLjC2yYCeHwsyj73Uwo9TAaecAetRwMw0xYcvNL9yRdLSUi0hUAHfvCHFeFh