mattermost/server
Nick Misasi 5d3a04760b
[MM-67605] Add DCR redirect URI allowlist for OAuth DCR (#35291)
* [MM-67605] Add DCR redirect URI allowlist enforcement

Introduce ServiceSettings.DCRRedirectURIAllowlist with glob-based validation and enforce it during OAuth dynamic client registration to block unapproved redirect URIs. Add System Console wiring and tests for config validation, wildcard matching semantics, API error behavior, and localhost wildcard support.

Co-authored-by: Cursor <cursoragent@cursor.com>

* Fix pre-commit checks: TypeScript type assertion, gofmt, and regenerate CI artifacts

- admin_definition_dcr_allowlist.test.tsx: Add AdminDefinitionSettingInput type assertion for 'multiple' property
- oauth_dcr_test.go: Fix comment spacing (gofmt)
- Regenerate mocks, go.sum, gen-serialized, mmctl-docs per CI requirements

Co-authored-by: Cursor <cursoragent@cursor.com>

* Revert unnecessary pre-commit regenerations

Revert mmctl docs, mocks, go.sum, and gen-serialized to master. Keep only
the TypeScript and gofmt fixes from the previous commit.

Co-authored-by: Cursor <cursoragent@cursor.com>

* Fix import order in admin_definition_dcr_allowlist.test.tsx

Co-authored-by: Cursor <cursoragent@cursor.com>

* Fix i18n

* Update server/public/model/oauth_dcr.go

Co-authored-by: Eva Sarafianou <eva.sarafianou@gmail.com>

* Fix

---------

Co-authored-by: Cursor <cursoragent@cursor.com>
Co-authored-by: Eva Sarafianou <eva.sarafianou@gmail.com>
Co-authored-by: Mattermost Build <build@mattermost.com>
2026-02-19 01:06:08 +00:00
..
bin
build server: ignore tmp mattermost/shared in file (#35316) 2026-02-16 14:45:33 +01:00
channels [MM-67605] Add DCR redirect URI allowlist for OAuth DCR (#35291) 2026-02-19 01:06:08 +00:00
cmd MM-67335 Fix export files having mismatched permissions (#35182) 2026-02-11 11:04:58 -05:00
config MM-66625 - Drop EnableChannelScopeAccessControl; use permission system only (#35232) 2026-02-12 01:07:15 -05:00
einterfaces [MM-65979] Add Prometheus metrics for plugin webapp performance (#35075) 2026-02-13 18:07:54 +05:30
enterprise separate websocket event for translations metrics (#35296) 2026-02-17 23:29:01 -05:00
fips MM-65959: Add FIPS indicator to about dialog (#34463) 2025-12-11 18:37:29 -04:00
fonts
i18n [MM-67605] Add DCR redirect URI allowlist for OAuth DCR (#35291) 2026-02-19 01:06:08 +00:00
platform MM-67099 - Membership Sync fix (#35230) 2026-02-16 16:05:04 +01:00
public [MM-67605] Add DCR redirect URI allowlist for OAuth DCR (#35291) 2026-02-19 01:06:08 +00:00
scripts [MM-67030] Remove newsletter signup and replace with terms/privacy agreement (#34801) 2026-01-23 18:24:27 +00:00
templates MM-59966 - Compliance Export overhaul - feature branch (#29789) 2025-01-10 16:56:02 -05:00
tests [MM-67605] Add DCR redirect URI allowlist for OAuth DCR (#35291) 2026-02-19 01:06:08 +00:00
.gitignore Update .server/gitignore to ignore all JSON files under the directory (#27593) 2024-07-11 09:12:57 +02:00
.go-version bumps go version to 1.24.13 (#35289) 2026-02-13 17:39:39 +01:00
.golangci.yml support for Elastic(Open)search CJK analysis plugins (#34784) 2026-02-12 10:05:23 +01:00
.sass-lint.yml
config.mk Enabling Prometheus, Grafana, Loki and Promtail running as containers by default in local dev environments (#34263) 2025-10-23 14:08:53 +02:00
copyright.txt
docker-compose.makefile.m1.yml support for Elastic(Open)search CJK analysis plugins (#34784) 2026-02-12 10:05:23 +01:00
docker-compose.makefile.yml Explicitly name Postgres container volume (#33954) 2025-10-02 09:29:00 -04:00
docker-compose.pgvector.yml Add support for pgvector in local dev (#33900) 2025-09-15 18:58:43 +00:00
docker-compose.yaml selinux security context fixes in docker compose (#34394) 2025-11-14 17:32:56 +01:00
go.mod bumps go version to 1.24.13 (#35289) 2026-02-13 17:39:39 +01:00
go.sum Add Default Agent Support and promote Agents to be part of suite (#35091) 2026-02-12 02:59:20 +00:00
Makefile Bumped prepackaged MS Calendar version to 1.6.0 (#35328) 2026-02-18 12:56:01 +02:00
path.go Centralize the GetPackagePath (#27004) 2024-05-15 12:05:13 -03:00