tsai/abp - abp - Gitea: Git with a cup of tea

Commit Graph

Author	SHA1	Message	Date
voloagent	653de5a8c8	Update_NPM_Packages	2 months ago
voloagent	6addd7e146	Update_NPM_Packages	2 months ago
voloagent	d9ae95d2de	Update_NPM_Packages	2 months ago
maliming	cb7667557b	Update user's last sign-in time in a separate unit of work	3 months ago
voloagent	58d7243319	Update_NPM_Packages	3 months ago
voloagent	aa20636352	Update_NPM_Packages	3 months ago
maliming	53a9a0c94b	Ignore `OpenIddictAuthorization` navigation changes when creating tokens	3 months ago
voloagent	ab8d46d1a0	Update_NPM_Packages	3 months ago
maliming	71da95e1d9	Use a per-connection in-memory SQLite database in unit tests	3 months ago
voloagent	884d57d4f2	Update_NPM_Packages	3 months ago
voloagent	998e26710f	Update_NPM_Packages	4 months ago
maliming	30119d7d90	Refactor client_id cookie cleanup into an options extension - move OnRefreshingPrincipal logic to AbpOpenIddictSecurityStampValidatorOptionsExtensions - add unit tests for removal and callback composition order	4 months ago
gdlcf88	f9493d6dec	Prevent OpenIddict client_id from leaking into the interactive auth cookie When the cookie security stamp is refreshed during a /connect/authorize request, OpenIddictClaimsPrincipalContributor stamps the ambient request's client_id onto the principal that is written back to the interactive authentication cookie. From then on ICurrentClient.Id resolves to that client for every later cookie-authenticated request, corrupting audit-log client attribution. The contributor cannot tell whether the principal it contributes to is destined for a token (correct) or for the cookie being refreshed (wrong), so strip client_id at the only point where the cookie is actually re-written: the security-stamp OnRefreshingPrincipal callback. This never runs for token issuance, so the token path is untouched, and chaining the removal after the existing AbpSecurityStampValidatorCallback.UpdatePrincipal lets already-corrupted cookies self-heal on their next refresh. Adds Volo.Abp.OpenIddict.AspNetCore.Tests covering the removal and the callback composition order. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	4 months ago
voloagent	4fc5a83718	Update_NPM_Packages	4 months ago
maliming	ca6fc51af9	Resolve shared users from Host in password and token-exchange grants	4 months ago
voloagent	f8f67e11e2	Update_NPM_Packages	4 months ago
voloagent	669c2c94d4	Update_NPM_Packages	4 months ago
voloagent	2b93727c88	Update_NPM_Packages	4 months ago
voloagent	2f5a2a2b6b	Update_NPM_Packages	5 months ago
voloagent	bc0d363eae	Update_NPM_Packages	5 months ago
voloagent	dbc83ad0a5	Update_NPM_Packages	5 months ago
maliming	10b5ed1977	Refine XML doc for password/token_exchange default scopes options	6 months ago
Ma Liming	bd91cdccc2	Potential fix for pull request finding Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>	6 months ago
maliming	ac4855773d	Use ToListAsync extension for ListResourcesAsync result	6 months ago
maliming	ec38960f0a	Add default scopes fallback for client_credentials/password/token_exchange grants	6 months ago
voloagent	65e68dc83f	Update_NPM_Packages	6 months ago
voloagent	27a5583fa0	Update_NPM_Packages	6 months ago
voloagent	1bd111d307	Update_NPM_Packages	6 months ago
voloagent	a61e76c456	Update_NPM_Packages	6 months ago
voloagent	a81f360ae4	Update_NPM_Packages	7 months ago
voloagent	91e99c9a63	Update_NPM_Packages	7 months ago
voloagent	9e8e83d34a	Update_NPM_Packages	7 months ago
voloagent	203668ec6c	Update_NPM_Packages	7 months ago
maliming	3786ddf3d5	fix: copy jwks.json to client output and use ILogger in ServerDataSeedContributor	7 months ago
maliming	a682d811f3	fix: address Copilot review issues in OpenIddict JWKS demo app and CLI command	7 months ago
maliming	38d9073b85	Add JWKS private key and public key set for OpenIddict integration	7 months ago
voloagent	fcff022e56	Update_NPM_Packages	7 months ago
voloagent	703ab42729	Update_NPM_Packages	8 months ago
maliming	fddf02774a	feat: Add `IsAvailableAsync` to resource permission management providers Introduces `IsAvailableAsync()` to `IResourcePermissionManagementProvider` and `IResourcePermissionProviderKeyLookupService`, allowing providers to opt out in certain contexts. `ResourcePermissionManager` respects this flag in permission checks, writes, and UI lookup service listing. OpenIddict and IdentityServer client providers override `IsAvailableAsync()` to return `false` when the current context is a tenant (host-only concept).	8 months ago
voloagent	5a8e8e4597	Update_NPM_Packages	8 months ago
voloagent	c5f483849b	Update_NPM_Packages	8 months ago
voloagent	f3127747a8	Update_NPM_Packages	8 months ago
voloagent	118c2deb00	Update_NPM_Packages	8 months ago
voloagent	d5805c5f5a	Update_NPM_Packages	9 months ago
voloagent	7e6ed8c8e4	Update_NPM_Packages	9 months ago
voloagent	ea4bbb8b51	Update_NPM_Packages	9 months ago
maliming	af584e422a	Update localization for ApplicationResourcePermissionProviderKeyLookupService to use "Client" across multiple languages	10 months ago
maliming	5e4228b994	Add distributed event handling for OpenIddict app changes	10 months ago
maliming	562914fc69	Refactor resource permission key lookup to use names/ClientIds	10 months ago
maliming	31ff63c762	Add ClientResourcePermissionManagerExtensions classes	10 months ago

1 2 3 4 5 ...

658 Commits (9dcf1aaadf3048f1fc8bbffb488f1d0f56e2bc76)