Pushed Authorization Requests (Par) in Asp.net Core 9

Re:Pushed Authorization Requests (Par) in Asp.net Core 9 by tndata on Wednesday November 06, 2024 @02:59AM (#42057965)

ASP.NET Core 9 introduces support for Pushed Authorization Requests (PAR) in its OpenIdConnect authentication handler. But what exactly is PAR, and why does it matter? In this post, I’ll explain what PAR is, how it works, how to use it.

[ Parent | on HN ]

Re:Pushed Authorization Requests (Par) in Asp.net Core 9 by djantje on Sunday November 10, 2024 @04:41AM (#42099316)

It looks nice. Are there plans to (try to) remove all the GET request parameters from the authentication flow? The Authorization request maybe seems one (the browser would need to support that, or use Javascript, or maybe a shortlived cookie) And also "8" GET tokens using the code, is potentially one?

[ Parent | on HN ]

Re:Pushed Authorization Requests (Par) in Asp.net Core 9 by nesarkvechnep on Sunday November 10, 2024 @05:33AM (#42099476)

I think you didn’t reply to what you intended.

[ Parent | on HN ]