Skip to content

Migration guide: legacy auth-oidc → auth-oidc-pkce #5303

Description

@hardl

With pkce reaching 1.0, users on the legacy implicit-flow plugin need a documented migration path. Add a new doc under docs/ (proposed: docs/migrations/legacy-oidc-to-pkce.md), linked
from docs/authorization-configuration.md.

Cover:

  • Runtime dep swap: oidc-client v1 → oidc-client-ts v3
  • Config: response_type: 'id_token token' → 'code' + response_mode
  • Assets folder rename /assets/auth-oidc/ → /assets/auth-oidc-pkce/, updated silent_redirect_uri
  • Renamed oidc-client-ts settings keys (shim warns, still works)
  • Dropped thirdPartyCookiesScriptLocation
  • New logoutUrl vs post_logout_redirect_uri distinction
  • Same-origin state validation; errorDescription URL-encoding
  • Updated copy-plugin snippet; pointer to the e2e demo config as a working reference

Metadata

Metadata

Assignees

No one assigned

    Labels

    authauthorization/authenticationdocumentationdocumentation tasks

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions