forgejo_fusion/release-notes/4724.md
David Rotermund 49fe13eb4a
Some checks are pending
Integration tests for the release process / release-simulation (push) Waiting to run
10.0.0 base
2025-02-08 23:21:02 +01:00

1 line
359 B
Markdown

OIDC integrations that POST to `/login/oauth/introspect` without sending HTTP basic authentication will now fail with a 401 HTTP Unauthorized error. To fix the error, the client must begin sending HTTP basic authentication with a valid client ID and secret. This endpoint was previously authenticated via the introspection token itself, which is less secure.