yusing 95ac659b1f feat(oidc): restrict OIDC middleware to GET requests ...

Block non-GET and WebSocket requests through the OIDC middleware with a 403 Forbidden response.
This avoids API clients receiving unexpected redirect and HTML response.

Added a log to hint user to add bypass rule if needed.

Also fix logout handler to not short-circuit middleware chain.

2026-02-13 23:48:18 +08:00

3.3 KiB

Raw Blame History

View Raw