Skip to content

fix(oauth): reject incomplete authorization links - #1602

Draft
betegon wants to merge 1 commit into
mainfrom
bt/oauth-incomplete-authorization-links
Draft

betegon wants to merge 1 commit into
mainfrom
bt/oauth-incomplete-authorization-links

Conversation

@betegon

@betegon betegon commented Oct 22, 2026

Copy link
Copy Markdown
Member

Reject incomplete OAuth authorization links before client metadata lookup. Requests with a client ID but no redirect URI now return a local 400 with recovery guidance instead of a metadata error and 500.

Regression coverage exercises the real Worker and provider, including complete requests whose upstream metadata fetch still fails.

@vercel

vercel Bot commented Oct 22, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
sentry-local Ready Ready Preview Oct 22, 2026 5:11pm UTC

Request Review

This branch was successfully deployed

1 active deployment
Preview — 976b19b7 Deployed Oct 22, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant