tsai/abp - abp - Gitea: Git with a cup of tea

Commit Graph

Author	SHA1	Message	Date
maliming	30119d7d90	Refactor client_id cookie cleanup into an options extension - move OnRefreshingPrincipal logic to AbpOpenIddictSecurityStampValidatorOptionsExtensions - add unit tests for removal and callback composition order	4 days ago
gdlcf88	f9493d6dec	Prevent OpenIddict client_id from leaking into the interactive auth cookie When the cookie security stamp is refreshed during a /connect/authorize request, OpenIddictClaimsPrincipalContributor stamps the ambient request's client_id onto the principal that is written back to the interactive authentication cookie. From then on ICurrentClient.Id resolves to that client for every later cookie-authenticated request, corrupting audit-log client attribution. The contributor cannot tell whether the principal it contributes to is destined for a token (correct) or for the cookie being refreshed (wrong), so strip client_id at the only point where the cookie is actually re-written: the security-stamp OnRefreshingPrincipal callback. This never runs for token issuance, so the token path is untouched, and chaining the removal after the existing AbpSecurityStampValidatorCallback.UpdatePrincipal lets already-corrupted cookies self-heal on their next refresh. Adds Volo.Abp.OpenIddict.AspNetCore.Tests covering the removal and the callback composition order. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	4 days ago
maliming	ca6fc51af9	Resolve shared users from Host in password and token-exchange grants	2 weeks ago
maliming	10b5ed1977	Refine XML doc for password/token_exchange default scopes options	2 months ago
Ma Liming	bd91cdccc2	Potential fix for pull request finding Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>	2 months ago
maliming	ac4855773d	Use ToListAsync extension for ListResourcesAsync result	2 months ago
maliming	ec38960f0a	Add default scopes fallback for client_credentials/password/token_exchange grants	2 months ago
maliming	fddf02774a	feat: Add `IsAvailableAsync` to resource permission management providers Introduces `IsAvailableAsync()` to `IResourcePermissionManagementProvider` and `IResourcePermissionProviderKeyLookupService`, allowing providers to opt out in certain contexts. `ResourcePermissionManager` respects this flag in permission checks, writes, and UI lookup service listing. OpenIddict and IdentityServer client providers override `IsAvailableAsync()` to return `false` when the current context is a tenant (host-only concept).	4 months ago
voloagent	7e6ed8c8e4	Update_NPM_Packages	6 months ago
maliming	af584e422a	Update localization for ApplicationResourcePermissionProviderKeyLookupService to use "Client" across multiple languages	6 months ago
maliming	5e4228b994	Add distributed event handling for OpenIddict app changes	6 months ago
maliming	562914fc69	Refactor resource permission key lookup to use names/ClientIds	6 months ago
maliming	31ff63c762	Add ClientResourcePermissionManagerExtensions classes	6 months ago
maliming	bdd7607975	Fix parameter order and minor code cleanups	6 months ago
maliming	202109a4ef	Add resource management providers for IdentityServer and OpenIddict	6 months ago
maliming	a7d0391bd2	Fix spacing in RevokeAsync method parameters	6 months ago
maliming	4a671e4e01	Fix spacing in SetAsync method parameters	6 months ago
maliming	e1b7487c05	Refactor permission value provider methods for consistency and clarity	6 months ago
maliming	fdff0133e3	Remove post-configuration for resource management providers	6 months ago
maliming	60ec72e0d3	Add localization for ResourcePermissionProviderKeyLookupService in multiple languages.	6 months ago
maliming	499f12742f	Implement client finder and resource permission management providers	6 months ago
maliming	7050ef95c2	Implement application finder and resource permission management providers	6 months ago
voloagent	a6f894a2b0	Update_NPM_Packages	7 months ago
maliming	6b7bfb1ce6	Track and update user's last sign-in time	7 months ago
maliming	67b3c85858	Add `OpenIddictDataSeedContributorBase` class Introduces an abstract base class for seeding OpenIddict applications and scopes. Provides helper methods for creating or updating OpenIddict applications and scopes, including validation and permission assignment logic.	9 months ago
maliming	5c815136a5	Refactor LINQ queries to use AsEnumerable() for better compatibility with MongoDb Driver. https://learn.microsoft.com/en-us/dotnet/core/compatibility/core-libraries/10.0/csharp-overload-resolution#recommended-action	10 months ago
maliming	3ff8fb6e78	Upgrade to .NET 10.0.	10 months ago
Fahri Gedik	8dbffe9d68	Reapply "Merge branch 'dev' into issue-23231-v2" This reverts commit `a83bce6b7b`.	12 months ago
Fahri Gedik	a83bce6b7b	Revert "Merge branch 'dev' into issue-23231-v2" This reverts commit `7c2582fe3f`, reversing changes made to `7621fc7fcd`.	12 months ago
maliming	aecc051fcb	Add custom error codes for account lock and inactivity	12 months ago
maliming	7c5dc48588	Use PreSignInCheckAsync in token exchange flow	12 months ago
maliming	6ced2e8a34	Implement Token Exchange Grant Type support	12 months ago
maliming	85392e10c7	Update `OpenIddict` to 7.0.0.	12 months ago
maliming	f2a57ee0c3	Update application type checks to use OpenIddictApplicationModel and include FrontChannelLogoutUri in ToModel method	1 year ago
maliming	dd9590f5f2	Refactor FrontChannelLogoutUri property to use Uri.	1 year ago
maliming	5a29733f3d	Add FrontChannelLogoutUri property to OpenIddictApplication	1 year ago
maliming	56bb869955	Add `sid` claim to openiddict's `principal`.	1 year ago
maliming	c70a9bc9f3	Add FrontChannelLogoutUri property and related methods to OpenIddict application classes	1 year ago
maliming	217c722a63	Encode RedirectUri in AuthorizeController.	1 year ago
maliming	fc01a3c587	Add missing using namespces for AuthorizeController	1 year ago
maliming	b8dc81d511	Refactor authentication flow in AuthorizeController to streamline login and select account prompts	1 year ago
voloagent	6e97b6ee12	Update_NPM_Packages	1 year ago
maliming	19bd2ac091	Add support for `prompt=select_account` in `AuthorizeController`.	1 year ago
Muhammed Ali ÖZKAYA	a8ebe0c47f	Remove unnecessary lines	1 year ago
Muhammed Ali ÖZKAYA	ab65d4f94f	Add installation notes for modules	1 year ago
maliming	6c8d37058d	Add `IgnoredNavigationEntitySelectors` to `AbpEntityChangeOptions` to ignore navigation properties.	1 year ago
maliming	c3ede87b53	Remove unnecessary retrieval of application, authorization, scope, and token models.	1 year ago
maliming	6c37edda40	Upgrade OpenIddict to `6.1.0`.	1 year ago
maliming	19470f6228	Check user password if sign in result is `IsNotAllowed`.	1 year ago
voloagent	ac8e482d4f	Update_NPM_Packages	1 year ago

1 2 3 4 5 ...

348 Commits (f33d27febb4bdddb005d4ce1bf2326c8d9ad73c5)