Allow OAuth discovery to resolve to private (RFC-1918 / loopback) addresses. Off by default as an SSRF guard. Enable for split-DNS deployments where the OAuth issuer's public hostname resolves to an internal IP from this server.
option
Allow OAuth discovery to resolve to private (RFC-1918 / loopback) addresses. Off by default as an SSRF guard. Enable for split-DNS deployments where the OAuth issuer's public hostname resolves to an internal IP from this server.