hsiegeln d4b530ff8a refactor: remove PKCE from OIDC flow (confidential client) ...

Backend holds client_secret and does the token exchange server-side,
making PKCE redundant. Removes code_verifier/code_challenge from all
frontend auth paths and backend exchange method. Eliminates the source
of "grant request is invalid" errors from verifier mismatches.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-04-07 10:22:13 +02:00

..

queries

fix: make API calls respect BASE_PATH for subpath deployments

2026-04-06 00:04:52 +02:00

client.ts

Fix 401 race condition: wire getAccessToken at module level

2026-03-13 22:09:46 +01:00

environment-store.ts

fix: persist environment selection in Zustand store instead of URL params

2026-04-04 17:12:16 +02:00

openapi.json

fix: regenerate OpenAPI types, fix search scoping by applicationId

2026-04-01 20:55:19 +02:00

schema.d.ts

refactor: remove PKCE from OIDC flow (confidential client)

2026-04-07 10:22:13 +02:00

types.ts

feat: migrate UI to @cameleer/design-system, add backend endpoints

2026-03-19 17:38:39 +01:00