tsai/abp - abp - Gitea: Git with a cup of tea

Commit Graph

Author	SHA1	Message	Date
maliming	53a9a0c94b	Ignore `OpenIddictAuthorization` navigation changes when creating tokens	3 days ago
voloagent	ab8d46d1a0	Update_NPM_Packages	3 days ago
maliming	71da95e1d9	Use a per-connection in-memory SQLite database in unit tests	6 days ago
voloagent	884d57d4f2	Update_NPM_Packages	2 weeks ago
voloagent	998e26710f	Update_NPM_Packages	3 weeks ago
maliming	30119d7d90	Refactor client_id cookie cleanup into an options extension - move OnRefreshingPrincipal logic to AbpOpenIddictSecurityStampValidatorOptionsExtensions - add unit tests for removal and callback composition order	3 weeks ago
gdlcf88	f9493d6dec	Prevent OpenIddict client_id from leaking into the interactive auth cookie When the cookie security stamp is refreshed during a /connect/authorize request, OpenIddictClaimsPrincipalContributor stamps the ambient request's client_id onto the principal that is written back to the interactive authentication cookie. From then on ICurrentClient.Id resolves to that client for every later cookie-authenticated request, corrupting audit-log client attribution. The contributor cannot tell whether the principal it contributes to is destined for a token (correct) or for the cookie being refreshed (wrong), so strip client_id at the only point where the cookie is actually re-written: the security-stamp OnRefreshingPrincipal callback. This never runs for token issuance, so the token path is untouched, and chaining the removal after the existing AbpSecurityStampValidatorCallback.UpdatePrincipal lets already-corrupted cookies self-heal on their next refresh. Adds Volo.Abp.OpenIddict.AspNetCore.Tests covering the removal and the callback composition order. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	3 weeks ago
voloagent	4fc5a83718	Update_NPM_Packages	4 weeks ago
maliming	ca6fc51af9	Resolve shared users from Host in password and token-exchange grants	1 month ago
voloagent	f8f67e11e2	Update_NPM_Packages	1 month ago
voloagent	669c2c94d4	Update_NPM_Packages	1 month ago
voloagent	2b93727c88	Update_NPM_Packages	2 months ago
voloagent	2f5a2a2b6b	Update_NPM_Packages	2 months ago
voloagent	bc0d363eae	Update_NPM_Packages	2 months ago
voloagent	dbc83ad0a5	Update_NPM_Packages	2 months ago
maliming	10b5ed1977	Refine XML doc for password/token_exchange default scopes options	3 months ago
Ma Liming	bd91cdccc2	Potential fix for pull request finding Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>	3 months ago
maliming	ac4855773d	Use ToListAsync extension for ListResourcesAsync result	3 months ago
maliming	ec38960f0a	Add default scopes fallback for client_credentials/password/token_exchange grants	3 months ago
voloagent	65e68dc83f	Update_NPM_Packages	3 months ago
voloagent	27a5583fa0	Update_NPM_Packages	3 months ago
voloagent	1bd111d307	Update_NPM_Packages	3 months ago
voloagent	a61e76c456	Update_NPM_Packages	3 months ago
voloagent	a81f360ae4	Update_NPM_Packages	4 months ago
voloagent	91e99c9a63	Update_NPM_Packages	4 months ago
voloagent	9e8e83d34a	Update_NPM_Packages	4 months ago
voloagent	203668ec6c	Update_NPM_Packages	4 months ago
maliming	3786ddf3d5	fix: copy jwks.json to client output and use ILogger in ServerDataSeedContributor	4 months ago
maliming	a682d811f3	fix: address Copilot review issues in OpenIddict JWKS demo app and CLI command	4 months ago
maliming	38d9073b85	Add JWKS private key and public key set for OpenIddict integration	4 months ago
voloagent	fcff022e56	Update_NPM_Packages	4 months ago
voloagent	703ab42729	Update_NPM_Packages	5 months ago
maliming	fddf02774a	feat: Add `IsAvailableAsync` to resource permission management providers Introduces `IsAvailableAsync()` to `IResourcePermissionManagementProvider` and `IResourcePermissionProviderKeyLookupService`, allowing providers to opt out in certain contexts. `ResourcePermissionManager` respects this flag in permission checks, writes, and UI lookup service listing. OpenIddict and IdentityServer client providers override `IsAvailableAsync()` to return `false` when the current context is a tenant (host-only concept).	5 months ago
voloagent	5a8e8e4597	Update_NPM_Packages	5 months ago
voloagent	c5f483849b	Update_NPM_Packages	5 months ago
voloagent	f3127747a8	Update_NPM_Packages	5 months ago
voloagent	118c2deb00	Update_NPM_Packages	6 months ago
voloagent	d5805c5f5a	Update_NPM_Packages	6 months ago
voloagent	7e6ed8c8e4	Update_NPM_Packages	6 months ago
voloagent	ea4bbb8b51	Update_NPM_Packages	7 months ago
maliming	af584e422a	Update localization for ApplicationResourcePermissionProviderKeyLookupService to use "Client" across multiple languages	7 months ago
maliming	5e4228b994	Add distributed event handling for OpenIddict app changes	7 months ago
maliming	562914fc69	Refactor resource permission key lookup to use names/ClientIds	7 months ago
maliming	31ff63c762	Add ClientResourcePermissionManagerExtensions classes	7 months ago
maliming	bdd7607975	Fix parameter order and minor code cleanups	7 months ago
maliming	202109a4ef	Add resource management providers for IdentityServer and OpenIddict	7 months ago
maliming	a7d0391bd2	Fix spacing in RevokeAsync method parameters	7 months ago
maliming	4a671e4e01	Fix spacing in SetAsync method parameters	7 months ago
maliming	e1b7487c05	Refactor permission value provider methods for consistency and clarity	7 months ago
maliming	fdff0133e3	Remove post-configuration for resource management providers	7 months ago

1 2 3 4 5 ...

652 Commits (b86ef96606a00ef533ecbf9d3680ca1be4f736b6)