[
https://issues.apache.org/jira/browse/GUACAMOLE-1434?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
kathiresh updated GUACAMOLE-1434:
---------------------------------
Description:
Hi Team,
When we authenticate the Guacamole application using the openID auth,
*Id_token* is clearly appearing in web URI. I feel it's security risk.
was:
Hi Team,
When we authenticate the Guacamole application using the openID auth,
*Id_token* is clearly appearing to all. I feel it's security risk.
> OpenId - ID_token is visible in web URL
> ----------------------------------------
>
> Key: GUACAMOLE-1434
> URL: https://issues.apache.org/jira/browse/GUACAMOLE-1434
> Project: Guacamole
> Issue Type: Bug
> Components: guacamole-auth-openid
> Affects Versions: 1.3.0
> Reporter: kathiresh
> Priority: Critical
> Labels: security
> Attachments: Guacamole_id_token.png
>
>
> Hi Team,
>
> When we authenticate the Guacamole application using the openID auth,
> *Id_token* is clearly appearing in web URI. I feel it's security risk.
>
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
