Changes 11/8/2025 (v1.8.11)
release(v1.8.11): fix(oidc): always send PKCE (S256) and treat empty secret as public client
- Force PKCE via setCodeChallengeMethod('S256') so Authelia’s public-client policy is satisfied.
- Convert empty OIDC client secret to null to correctly signal a public client.
- Optional commented hook to switch token endpoint auth to client_secret_post if desired.
- OIDC_TOKEN_ENDPOINT_AUTH_METHOD added to config.php
v1.8.11
Full Changelog
SHA-256 (zip)
da892d192d5d2a62b691be90812c2aa7d5045abdf489b3ca25cd8b590d03c2b1 FileRise-v1.8.11.zip