feat: Implement support for prompt=create in the authorization code flow

This commit is contained in:
Ginger committed 2026-06-29 09:35:50 -04:00
1 parent c7e5c8df22
commit 138ec05cf2
11 files changed
+112 -40

No files matched your search

+1 -1
View File
@@ -58,7 +58,7 @@ pub(super) async fn template_context_middleware(
response.headers_mut().insert(
header::CONTENT_SECURITY_POLICY,
HeaderValue::from_str(&format!(
"default-src 'none'; style-src 'self'; img-src 'self' 'https' data:; script-src \
"default-src 'none'; style-src 'self'; img-src 'self' https: data:; script-src \
'nonce-{csp_nonce}'; child-src {child_src};"
))
.expect("should be able to build CSP header"),