Skip to content

Commit fc5249d

Browse files
authored
Update HTTP 303 redirect behavior in documentation
Removed mention of UserInteractionOptions.UseHttp303Redirects and clarified that IdentityServer now always uses HTTP 303 for redirects from POST endpoints. Updated documentation to reflect compliance with FAPI 2.0.
1 parent a019693 commit fc5249d

1 file changed

Lines changed: 2 additions & 6 deletions

File tree

astro/src/content/docs/identityserver/upgrades/v7_4-to-v8_0.md

Lines changed: 2 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -238,12 +238,8 @@ dependency. Use the `CancellationToken` passed directly to interface methods ins
238238

239239
### HTTP 303 Redirects Now Unconditional
240240

241-
`UserInteractionOptions.UseHttp303Redirects` has been removed. IdentityServer now always uses
242-
HTTP 303 (See Other) for redirects from POST endpoints, in compliance with
243-
[FAPI 2.0 Section 5.3.2.2](https://openid.net/specs/fapi-2_0-security-profile.html).
244-
245-
No action is needed unless you explicitly set `UseHttp303Redirects = false` in a previous version.
246-
If so, remove that setting — the redirect behavior can no longer be changed.
241+
IdentityServer now always uses HTTP 303 (See Other) for redirects from POST endpoints,
242+
in compliance with [FAPI 2.0 Section 5.3.2.2](https://openid.net/specs/fapi-2_0-security-profile.html).
247243

248244
### IClientStore.GetAllClientsAsync Now Required
249245

0 commit comments

Comments
 (0)