366 Commits (dev)

Author SHA1 Message Date
Kévin Chalet 83f0bb5c8f Move the options validation logic to IValidateOptions<TOptions> implementations 3 weeks ago
Kévin Chalet 7404f1438c Add the ability to re-hash client secrets dynamically and make the PBKDF2 options configurable 1 month ago
Kévin Chalet 8b847421d6 Replace the SUPPORTS_* constants by the built-in target/platform constants 2 months ago
Kévin Chalet 4636bc6848 Stop supporting ASP.NET Core 2.3 and remove the .NET Framework 4.6.2/4.7.2, .NET Standard 2.0/2.1 and UAP TFMs 2 months ago
Kévin Chalet 0506df7733 Update OpenIddictServerBuilder.AllowCustomFlow() to throw an exception when using a standard grant type 2 months ago
Kévin Chalet 59a137cd63 Allow using mTLS client authentication with the client credentials grant and support mTLS token binding for anonymous clients 3 months ago
Kévin Chalet 63b56ccc82 Detect and reject reference token payloads directly used as regular tokens 4 months ago
Kévin Chalet 7b9fd7677f Revamp the client authentication method negotiation logic and support mTLS token binding in the client, server and validation stacks 4 months ago
Kévin Chalet 8dbf493469 Add a new OpenIddictMessage constructor accepting non-nullable immutable arrays 4 months ago
Kévin Chalet 5c1cda0ac5 Implement native mTLS client authentication support in the server stack 5 months ago
Kévin Chalet 9797f86194 Replace PolySharp by the Polyfill source package and adopt ArgumentNullException.ThrowIfNull()/ArgumentException.ThrowIfNullOrEmpty() 6 months ago
Kévin Chalet 1ef7be587f Bump .NET Arcade to 10.0.0-beta.25562.108 6 months ago
Kévin Chalet a0f39b4b5c Polyfill ValueTask.CompletedTask and ValueTask<TResult>.CompletedTask 8 months ago
Kévin Chalet 13f352af6d Bump the .NET SDK to 10.0.100-rc.2.25502.107 and add .NET 10 TFMs 8 months ago
Kévin Chalet f5d6a18764 Add new AddGrantTypePermissions()/RemoveGrantTypePermissions() APIs in OpenIddictApplicationDescriptor 10 months ago
Kévin Chalet 7267fa03b6 Introduce new methods in OpenIddictApplicationDescriptor to make working with permissions and settings easier 1 year ago
Kévin Chalet 91a68c161a Implement client authentication support for the PAR endpoint 1 year ago
Kévin Chalet 78ba0a3dec Implement built-in audiences and resources indicators validation 1 year ago
Kévin Chalet 9a74ea5e4f Remove unnecessary view models 1 year ago
Kévin Chalet 8c94cb7c13 Implement OAuth 2.0 Token Exchange support 1 year ago
Kévin Chalet b33dad15f3 Implement new audience and presenter validation logic as part of the ValidateToken event 1 year ago
Kévin Chalet 36424f84b3 Improve the WWW-Authenticate parsing logic 1 year ago
Kévin Chalet bcfe2f05d3 Update OpenIddictParameter to return empty immutable arrays instead of uninitialized instances 1 year ago
Kévin Chalet ff57da7ec0 Add AddClaim(s)/SetClaim(s) extensions accepting JsonNode instances 1 year ago
Kévin Chalet f8553a9ee7 Update the MapNonStandardResponseParameters userinfo handler to avoid using OpenIddictParameter.GetNamedParameters() 1 year ago
Kévin Chalet fab284f5d5 Update GenerateTokenContext to expose SecurityTokenDescriptor and adopt the new URI-style token type identifiers in the client, core, server and validation stacks 1 year ago
Kévin Chalet 1beb7ab4c9 Use Uri.TryCreate() to build the base and request URIs used by OpenIddict 1 year ago
Kévin Chalet 5b56eddc0c Remove all the store resolvers and mark all the assemblies as trimming/Native AOT-compatible 1 year ago
Kévin Chalet 342b7651cf Set NuGetAuditMode to "all" to enable vulnerable transitive dependencies warnings 1 year ago
Kévin Chalet bef75c4f56 Use the CreateAsyncScope() helper to avoid having to manually cast IServiceProvider to IAsyncDisposable 1 year ago
Kévin Chalet 38e84b862d Update OpenIddictParameter to offer ImmutableArray<string> conversions instead of string[] and clone JsonNode objects to guarantee immutability 1 year ago
Kévin Chalet e39c635631 Decorate the claim extensions with [OverloadResolutionPriority] and collection expressions for ImmutableArray<T> 1 year ago
Kévin Chalet b17b3fe235 Update the .NET Framework and .NET Standard TFMs to target ASP.NET Core/Entity Framework Core 2.3 and .NET Extensions 8.0 1 year ago
Kévin Chalet fbad1d0727 Bump .NET Arcade to 9.0.0-beta.25058.5 1 year ago
Kévin Chalet bdf3b56db8 Do not reject end session requests that don't include an explicit client_id when request caching is used 1 year ago
Kévin Chalet feedeacae7 Do not reject end session requests that don't include an explicit client_id when request caching is used 1 year ago
Kévin Chalet 42d6369910 Implement Pushed Authorization Requests (PAR) support and revamp the request caching feature 1 year ago
Kévin Chalet 11666c41bd Update OpenIddictMessage.ToString() to redact custom parameters whose name ends with "_token" 2 years ago
Kévin Chalet 878569cd3f Update the ASP.NET Core/OWIN hosts to support returning authentication properties for errored requests 2 years ago
Kévin Chalet 6c6c9ed1db Bump MongoDB to 3.0.0 and strong-name the MongoDB packages 2 years ago
Kévin Chalet f5721d0c2c Rename the GetPrompts() and HasPrompt() extensions 2 years ago
Kévin Chalet e1f729ba0b Validate prompt values specified in authorization requests and update the configuration endpoint to return "prompt_values_supported" 2 years ago
Kévin Chalet 9f613b1332 Implement a new client authentication method negotiation logic and introduce mTLS support in the client stack 2 years ago
Kévin Chalet ef2e02ee23 Introduce a new .NET 9.0 TFM and use the new X509CertificateLoader API 2 years ago
Kévin Chalet 3662b179dc Rename event handlers and event properties that whose endpoint name has changed 2 years ago
Kévin Chalet d4c05e2e23 Rename the device, cryptography, logout and verification endpoints and the associated events/event handlers 2 years ago
Kévin Chalet f6975e6506 Update OpenIddictParameter to return "true" and "false" for string/string array conversions 2 years ago
Kévin Chalet 02fb4414f7 Allow using response_type=token with PKCE when response type permissions are enforced 2 years ago
Jan Trejbal 2475ed3c1a
Use System.TimeProvider on .NET 8.0+ 2 years ago
Kévin Chalet 38d87b2945 Allow using unique JSON_ARRAY claims to represent arrays of strings 2 years ago