discourse/lib/auth
David Taylor 17fcdd60c1
FIX: Avoid clock skew issues when logging in with Google (#11442)
All the data we need for the `info` and `credentials` auth hash
are obtained via the user info API, not the JWT. Using and verifying
the JWT can fail due to clock skew, so let's skip it completely.

PR opened to fix the upstream issue at https://github.com/zquestz/omniauth-google-oauth2/pull/392
2020-12-09 09:09:31 +00:00
..
auth_provider.rb FEATURE: Use full page redirection for all external auth methods (#8092) 2019-10-08 12:10:43 +01:00
authenticator.rb
current_user_provider.rb
default_current_user_provider.rb REFACTOR: Introduce RouteMatcher class 2020-10-19 10:40:55 +01:00
discord_authenticator.rb
facebook_authenticator.rb
github_authenticator.rb DEV: Migrate Github authentication to ManagedAuthenticator (#11170) 2020-11-10 10:09:15 +00:00
google_oauth2_authenticator.rb FIX: Avoid clock skew issues when logging in with Google (#11442) 2020-12-09 09:09:31 +00:00
managed_authenticator.rb FEATURE: Allow /u/by-external to work for all managed authenticators (#11168) 2020-11-10 10:41:46 +00:00
oauth2_authenticator.rb
result.rb FEATURE: sso_overrides_(email|username|name) for all auth methods 2020-07-06 10:18:45 +01:00
twitter_authenticator.rb