Files
mattermost/api/v4/source
JG HeithcockandMattermost Build a41db04d27 MM 65084 server-side (#33861)
* MM-65084: (server-side) PKCE code-exchange for SSO

Server side changes needed for MM-65084. Guarded by MobileSSOCodeExchange feature flag.

* Update users.yaml for vet-api testing

* Change error for not saving SAML token to existing generic 'can't save token' message

* Restricting to sha256 only PKCEs

* Change out PKCE terminology to SAML

This came out as Claude used "PKCE" as a shorthand for the style and I did not know better. SAML is the correct term here.
This also fixes a linter issue where we were assigning `codeVerifier` to `computed` but then overwriting it in all cases (so that was misleading and unecessary)

* Adding ConsumeTokenOnce and IsExpired as suggested by security review

---------

Co-authored-by: Mattermost Build <build@mattermost.com>
2025-09-29 14:29:32 -07:00
..
2023-06-27 11:10:13 -03:00
2024-03-12 08:36:05 -06:00
2023-08-03 12:45:10 -03:00
2023-06-27 11:10:13 -03:00
2023-06-27 11:10:13 -03:00
2023-08-03 12:45:10 -03:00
2025-06-16 16:19:33 -04:00
2024-04-18 11:50:30 +05:30
2023-08-03 12:45:10 -03:00
2023-08-03 12:45:10 -03:00
2023-06-27 11:10:13 -03:00
2023-06-27 11:10:13 -03:00
2024-12-12 12:19:09 +01:00
2023-06-27 11:10:13 -03:00
2023-06-27 11:10:13 -03:00
2023-08-03 12:45:10 -03:00
2023-06-27 11:10:13 -03:00
2025-09-29 14:29:32 -07:00