Add CSRF-safe tenant identity administration

2026-07-28 01:22:55 +02:00 · 2026-07-28 01:22:55 +02:00 · e23674d343
commit e23674d343
parent 7b7fa97ce2
4 changed files with 367 additions and 13 deletions
--- a/tests/test_oidc.py
+++ b/tests/test_oidc.py
@ -26,6 +26,7 @@ class OIDCClientTests(unittest.TestCase):
            claims={"sub": "person"}, expires_at=9999999999
        )
        self.assertEqual("person", self.client.claims("opaque")["sub"])
+        self.assertEqual("", self.client.csrf_token("opaque"))
        self.assertEqual("opaque", cookie_value("x=1; ue_session=opaque", "ue_session"))
        self.client.logout("opaque")
        self.assertIsNone(self.client.claims("opaque"))