The OAuth2 and OpenID Connect Extension 2.29.0 has been released.
This release brings the following changes:
- Authenticating from several browser tabs at the same time (for example after the session expired) now works in every tab, instead of only in the last one that redirected to the provider
- The requests sent to the OpenID Connect provider now have a connection and a read timeout, configurable with the oidc.http.connectTimeout and oidc.http.readTimeout properties
- When XWiki is used as an OpenID Connect provider, the endpoints meant to be called directly by JavaScript clients (userinfo, token, JWK set and discovery) now support CORS, configurable with the oidc.provider.cors.allowedOrigins property
