Skip to content

Commit e5a2deb

Browse files
committed
Allow non-default https port
1 parent ccdbf69 commit e5a2deb

File tree

2 files changed

+6
-3
lines changed

2 files changed

+6
-3
lines changed

policies/client_registration/client_registration.rego

Lines changed: 0 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -31,9 +31,6 @@ secure_url(x) if {
3131
url.host != "127.0.0.1"
3232
url.host != "0.0.0.0"
3333
url.host != "[::1]"
34-
35-
# Must be standard port for HTTPS
36-
url.port == ""
3734
}
3835

3936
host_matches_client_uri(_) if {

policies/client_registration/client_registration_test.rego

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -189,6 +189,12 @@ test_redirect_uris if {
189189
"redirect_uris": [],
190190
}
191191

192+
# HTTPS redirect_uri with non-standard port
193+
client_registration.allow with input.client_metadata as {
194+
"client_uri": "https://example.com/",
195+
"redirect_uris": ["https://example.com:8443/callback"],
196+
}
197+
192198
# Not required for the client_credentials grant
193199
client_registration.allow with input.client_metadata as {
194200
"grant_types": ["client_credentials"],

0 commit comments

Comments
 (0)