From 4161be91525cc88aefa06ec105afb2e84dbee4f0 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Sun, 9 Nov 2025 06:38:54 +0000 Subject: [PATCH] build(deps): update module authelia.com/provider/oauth2 to v0.2.18 (#10719) * build(deps): update module authelia.com/provider/oauth2 to v0.2.18 * fix: account for upstream breaking change Signed-off-by: James Elliott --------- Signed-off-by: James Elliott Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: James Elliott --- go.mod | 4 ++-- go.sum | 8 ++++---- internal/oidc/util.go | 2 +- 3 files changed, 7 insertions(+), 7 deletions(-) diff --git a/go.mod b/go.mod index 48b1396d3..1878f104f 100644 --- a/go.mod +++ b/go.mod @@ -5,7 +5,7 @@ go 1.24.0 toolchain go1.25.4 require ( - authelia.com/provider/oauth2 v0.2.17 + authelia.com/provider/oauth2 v0.2.18 github.com/Gurpartap/logrus-stack v0.0.0-20170710170904-89c00d8a28f4 github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2 github.com/authelia/jsonschema v0.1.7 @@ -112,7 +112,7 @@ require ( go.yaml.in/yaml/v3 v3.0.3 // indirect golang.org/x/crypto v0.43.0 // indirect golang.org/x/exp v0.0.0-20250506013437-ce4c2cf36ca6 // indirect - golang.org/x/oauth2 v0.31.0 // indirect + golang.org/x/oauth2 v0.33.0 // indirect golang.org/x/sys v0.38.0 // indirect google.golang.org/genproto/googleapis/api v0.0.0-20250505200425-f936aa4a68b2 // indirect google.golang.org/genproto/googleapis/rpc v0.0.0-20250505200425-f936aa4a68b2 // indirect diff --git a/go.sum b/go.sum index d73ad7f7c..0a8f19ca6 100644 --- a/go.sum +++ b/go.sum @@ -1,5 +1,5 @@ -authelia.com/provider/oauth2 v0.2.17 h1:Ei9Ei1NIOR9qLKeu9ajaU+fpT/zxBIVWawVYwQorv6M= -authelia.com/provider/oauth2 v0.2.17/go.mod h1:5op7EZrAOvIyUWZqaa5oBPc44CRG/qUGb52WB9xPQgw= +authelia.com/provider/oauth2 v0.2.18 h1:IE32g4WdjuzQFtL1Xs6YkULsdk2ChlxS9tBaGYQyaQc= +authelia.com/provider/oauth2 v0.2.18/go.mod h1:ndBKgd4JVcjFcJHA79MJhL5V6BFrNlULmEuHvLKptDw= cel.dev/expr v0.24.0 h1:56OvJKSH3hDGL0ml5uSxZmz3/3Pq4tJ+fb1unVLAFcY= cel.dev/expr v0.24.0/go.mod h1:hLPLo1W4QUmuYdA72RBX06QTs6MXw941piREPl3Yfiw= filippo.io/edwards25519 v1.1.0 h1:FNf4tywRC1HmFuKW5xopWpigGjJKiJSV0Cqo0cJWDaA= @@ -265,8 +265,8 @@ golang.org/x/exp v0.0.0-20250506013437-ce4c2cf36ca6 h1:y5zboxd6LQAqYIhHnB48p0ByQ golang.org/x/exp v0.0.0-20250506013437-ce4c2cf36ca6/go.mod h1:U6Lno4MTRCDY+Ba7aCcauB9T60gsv5s4ralQzP72ZoQ= golang.org/x/net v0.46.0 h1:giFlY12I07fugqwPuWJi68oOnpfqFnJIJzaIIm2JVV4= golang.org/x/net v0.46.0/go.mod h1:Q9BGdFy1y4nkUwiLvT5qtyhAnEHgnQ/zd8PfU6nc210= -golang.org/x/oauth2 v0.31.0 h1:8Fq0yVZLh4j4YA47vHKFTa9Ew5XIrCP8LC6UeNZnLxo= -golang.org/x/oauth2 v0.31.0/go.mod h1:lzm5WQJQwKZ3nwavOZ3IS5Aulzxi68dUSgRHujetwEA= +golang.org/x/oauth2 v0.33.0 h1:4Q+qn+E5z8gPRJfmRy7C2gGG3T4jIprK6aSYgTXGRpo= +golang.org/x/oauth2 v0.33.0/go.mod h1:lzm5WQJQwKZ3nwavOZ3IS5Aulzxi68dUSgRHujetwEA= golang.org/x/sync v0.18.0 h1:kr88TuHDroi+UVf+0hZnirlk8o8T+4MrK6mr60WkH/I= golang.org/x/sync v0.18.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI= golang.org/x/sys v0.0.0-20220715151400-c0bba94af5f8/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= diff --git a/internal/oidc/util.go b/internal/oidc/util.go index 1a1d5dc73..14217b7cf 100644 --- a/internal/oidc/util.go +++ b/internal/oidc/util.go @@ -475,7 +475,7 @@ func ValidateSectorIdentifierURI(ctx ClientContext, cache map[string][]string, s var invalidRedirectURIs []string //nolint:prealloc for _, rawRedirectURI := range redirectURIs { - if _, match := oauthelia2.IsMatchingRedirectURI(rawRedirectURI, sectorRedirectURIs); match { + if _, match := oauthelia2.IsMatchingRedirectURI(rawRedirectURI, sectorRedirectURIs, &oauthelia2.BestPracticeURIComparisonStrategy{}); match { continue }