mc/mcdsl
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

0 Releases 11 Tags

RSS Feed
  • v1.5.0 8561b34451
    Compare

    Add mcdsl/sso package for SSO redirect clients

    kyle released this 2026-03-30 22:26:50 +00:00 | 3 commits to master since this release

    New package providing the client side of the MCIAS SSO authorization
    code flow. Web services use this to redirect users to MCIAS for login
    and exchange the returned authorization code for a JWT.

    • Client type with AuthorizeURL() and ExchangeCode() (TLS 1.3 minimum)
    • State cookie helpers (SameSite=Lax for cross-site redirect compat)
    • Return-to cookie for preserving the original URL across the redirect
    • RedirectToLogin() and HandleCallback() high-level helpers
    • Full test suite with mock MCIAS server

    Security:

    • State is 256-bit random, stored in HttpOnly/Secure/Lax cookie
    • Return-to URLs stored client-side only (MCIAS never sees them)
    • Login/callback paths excluded from return-to to prevent loops

    Co-Authored-By: Claude Opus 4.6 (1M context) noreply@anthropic.com

    Downloads