@W-19861422 - token endpoint hardening#267

Merged

mattcfilbert merged 3 commits intomainfrom

W-19861422/token-endpoint-hardening

Mar 20, 2026

Commits on Mar 17, 2026

Add redirect_uri validation at token exchange (OAuth 2.1 Section 4.1.3)
mattcfilbert
committed
Add conditional client_id validation at token exchange
mattcfilbert
committed
feat: harden OAuth token endpoint against authorization code theft (W-19861422)
mattcfilbert
committed