Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: coder/coder
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: e99c33e
Choose a base ref
...
head repository: coder/coder
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: bdc94d5
Choose a head ref
  • 3 commits
  • 73 files changed
  • 1 contributor

Commits on Aug 12, 2025

  1. feat: standardize OAuth2 endpoints and add token revocation 

      - Change /oauth2/tokens → /oauth2/token per RFC 6749
  - Move token deletion to POST /oauth2/revoke per RFC 7009
  - Update all endpoint URLs and documentation
  - Maintain backward compatibility in client libraries

feat: implement OAuth2 Device Authorization Grant (RFC 8628)

  - Add device authorization endpoint /oauth2/device/authorize
  - Add device verification UI at /oauth2/device
  - Support device_code grant type in token endpoint
  - Add database table for device codes with expiration
  - Implement polling interval and user authorization flow
  - Add comprehensive test coverage for device flow

Change-Id: I7a7eebeb23a4f28718ebed2994d01dc21b49315b
Signed-off-by: Thomas Kosiewski <tk@coder.com>
    @ThomasK33
    ThomasK33 committed Aug 12, 2025
    Configuration menu
    Copy the full SHA
    395f736 View commit details
    Browse the repository at this point in the history

  2. chore: add OAuth2 device flow test scripts 

    Change-Id: Ic232851727e683ab3d8b7ce970c505588da2f827
Signed-off-by: Thomas Kosiewski <tk@coder.com>
    @ThomasK33
    ThomasK33 committed Aug 12, 2025
    Configuration menu
    Copy the full SHA
    aca2f6a View commit details
    Browse the repository at this point in the history

  3. feat: replace callback_url with redirect_uris for OAuth2 RFC 6749 com… 

    …pliance

Change-Id: I4823e475777ebdf75e3a80e47ff6bef1a556cd55
Signed-off-by: Thomas Kosiewski <tk@coder.com>
    @ThomasK33
    ThomasK33 committed Aug 12, 2025
    Configuration menu
    Copy the full SHA
    bdc94d5 View commit details
    Browse the repository at this point in the history
Loading