You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
feature #57721 [Security][SecurityBundle] Add encryption support to OIDC tokens (Spomky)
This PR was merged into the 7.3 branch.
Discussion
----------
[Security][SecurityBundle] Add encryption support to OIDC tokens
| Q | A
| ------------- | ---
| Branch? | 7.3
| Bug fix? | no
| New feature? | yes
| Deprecations? | no
| Issues | Fix #50441
| License | MIT
The changes add encryption support to OpenID Connect (OIDC) tokens in the Symfony Security Bundle. This is useful in making the application more secure. They also ensure the tokens are correctly decrypted and validated before use. Additionally, tests have been expanded to cover these new scenarios.
```yaml
security:
firewalls:
main:
pattern: ^/
access_token:
token_handler:
oidc:
...
encryption:
enabled: true
algorithms: [...]
keyset: '{"keys": [{...}]}'
```
Commits
-------
04c53b4bae0 [Security] OAuth2 Introspection Endpoint (RFC7662)
0 commit comments