rohit/probo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
5,546 Commits 1 Branch 0 Tags
main
Commit Graph

2 Commits

Author SHA1 Message Date
Bryan Frimin
e7df6f6b2a Restrict OAuth client branding URLs to http(s) 
CIMD and registration accepted any URI scheme for client_uri and
logo_uri, so allowlisted metadata could surface javascript: links on
sign-in. Validate absolute http/https at ingest and only expose those
schemes in branding.

Signed-off-by: Bryan Frimin <bryan@probo.com>
 2026-07-21 15:44:19 +02:00
Bryan Frimin
d447fa295f Add OAuth client branding for trust centers 
Serve CIMD logos from dedicated endpoints, expose client metadata
branding through GraphQL, and resolve branding from OAuth clients.

Signed-off-by: Bryan Frimin <bryan@probo.com>
 2026-07-21 15:44:17 +02:00