Kévin Chalet
|
5c1cda0ac5
|
Implement native mTLS client authentication support in the server stack
|
5 days ago |
|
Kévin Chalet
|
9797f86194
|
Replace PolySharp by the Polyfill source package and adopt ArgumentNullException.ThrowIfNull()/ArgumentException.ThrowIfNullOrEmpty()
|
1 month ago |
|
Kévin Chalet
|
1ef7be587f
|
Bump .NET Arcade to 10.0.0-beta.25562.108
|
1 month ago |
|
Kévin Chalet
|
a0f39b4b5c
|
Polyfill ValueTask.CompletedTask and ValueTask<TResult>.CompletedTask
|
3 months ago |
|
Kévin Chalet
|
13f352af6d
|
Bump the .NET SDK to 10.0.100-rc.2.25502.107 and add .NET 10 TFMs
|
3 months ago |
|
Kévin Chalet
|
91a68c161a
|
Implement client authentication support for the PAR endpoint
|
8 months ago |
|
Kévin Chalet
|
78ba0a3dec
|
Implement built-in audiences and resources indicators validation
|
8 months ago |
|
Kévin Chalet
|
8c94cb7c13
|
Implement OAuth 2.0 Token Exchange support
|
8 months ago |
|
Kévin Chalet
|
b33dad15f3
|
Implement new audience and presenter validation logic as part of the ValidateToken event
|
8 months ago |
|
Kévin Chalet
|
36424f84b3
|
Improve the WWW-Authenticate parsing logic
|
8 months ago |
|
Kévin Chalet
|
fab284f5d5
|
Update GenerateTokenContext to expose SecurityTokenDescriptor and adopt the new URI-style token type identifiers in the client, core, server and validation stacks
|
10 months ago |
|
Kévin Chalet
|
5b56eddc0c
|
Remove all the store resolvers and mark all the assemblies as trimming/Native AOT-compatible
|
11 months ago |
|
Kévin Chalet
|
38e84b862d
|
Update OpenIddictParameter to offer ImmutableArray<string> conversions instead of string[] and clone JsonNode objects to guarantee immutability
|
11 months ago |
|
Kévin Chalet
|
e39c635631
|
Decorate the claim extensions with [OverloadResolutionPriority] and collection expressions for ImmutableArray<T>
|
11 months ago |
|
Kévin Chalet
|
b17b3fe235
|
Update the .NET Framework and .NET Standard TFMs to target ASP.NET Core/Entity Framework Core 2.3 and .NET Extensions 8.0
|
11 months ago |
|
Kévin Chalet
|
fbad1d0727
|
Bump .NET Arcade to 9.0.0-beta.25058.5
|
11 months ago |
|
Kévin Chalet
|
bdf3b56db8
|
Do not reject end session requests that don't include an explicit client_id when request caching is used
|
12 months ago |
|
Kévin Chalet
|
feedeacae7
|
Do not reject end session requests that don't include an explicit client_id when request caching is used
|
12 months ago |
|
Kévin Chalet
|
42d6369910
|
Implement Pushed Authorization Requests (PAR) support and revamp the request caching feature
|
1 year ago |
|
Kévin Chalet
|
e1f729ba0b
|
Validate prompt values specified in authorization requests and update the configuration endpoint to return "prompt_values_supported"
|
1 year ago |
|
Kévin Chalet
|
ef2e02ee23
|
Introduce a new .NET 9.0 TFM and use the new X509CertificateLoader API
|
1 year ago |
|
Kévin Chalet
|
d4c05e2e23
|
Rename the device, cryptography, logout and verification endpoints and the associated events/event handlers
|
1 year ago |
|
Kévin Chalet
|
02fb4414f7
|
Allow using response_type=token with PKCE when response type permissions are enforced
|
2 years ago |
|
Kévin Chalet
|
38d87b2945
|
Allow using unique JSON_ARRAY claims to represent arrays of strings
|
2 years ago |
|
Kévin Chalet
|
26fdb68773
|
Bump the .NET SDK to 8.0.200 and stop using collection expressions with ImmutableArray<T>
|
2 years ago |
|
Kévin Chalet
|
cf3e960055
|
Abort sign-in demands whose principal contains a standard claim with an invalid claim value type
|
2 years ago |
|
Kévin Chalet
|
61f036fd59
|
Introduce a faster way to revoke all the tokens associated with an authorization and use bulk operations when available
|
2 years ago |
|
Kévin Chalet
|
0bf4a433bd
|
Add Zoom to the list of supported providers
|
2 years ago |
|
Kévin Chalet
|
517b1b6324
|
Add Zoom to the list of supported providers
|
2 years ago |
|
Kévin Chalet
|
f36d9b5471
|
Remove unnecessary usings
|
2 years ago |
|
Kévin Chalet
|
02cca0a42e
|
Update the entire code base to use collection expressions
|
2 years ago |
|
Kévin Chalet
|
746f38432c
|
Make the supported subject types configurable via OpenIddictServerOptions.SubjectTypes
|
2 years ago |
|
Kévin Chalet
|
00fa3f3494
|
Allow configuring the supported client authentication methods and use invalid_client for client assertion errors
|
2 years ago |
|
Kévin Chalet
|
d6c9c0b35c
|
Add client assertions support to the server stack
|
2 years ago |
|
Kévin Chalet
|
a941660a41
|
Move the client authentication logic to the ProcessAuthentication event
|
2 years ago |
|
Kévin Chalet
|
1c382d90ba
|
Introduce application settings and support configuring token lifetimes per client
|
2 years ago |
|
Kévin Chalet
|
4af3f8dc6f
|
Introduce support for application types
|
2 years ago |
|
Kévin Chalet
|
61e6fd95c3
|
Centralize the target frameworks in Directory.Build.props
|
3 years ago |
|
Kévin Chalet
|
e53a723766
|
Enable the "plain" code challenge method by default to increase interoperability
|
3 years ago |
|
Kévin Chalet
|
ef4b0f3417
|
Add explicit System.Net.Http usings
|
3 years ago |
|
Kévin Chalet
|
4685332df5
|
Add device authorization grant support in the OpenIddict client
|
3 years ago |
|
Kévin Chalet
|
eb1fcc82bd
|
Introduce new properties to disable token rejection and don't reject authentication demands for invalid identity token hints
|
3 years ago |
|
Kévin Chalet
|
6cfe43b3e9
|
Add native support for Windows Runtime
|
3 years ago |
|
Kévin Chalet
|
773594231e
|
Prevent enabling the device authorization flow when token storage is disabled (unless the degraded mode is used)
|
3 years ago |
|
Kévin Chalet
|
bfa95d094a
|
Unify the token entry properties restoration logic and fix an issue affecting device codes and ASP.NET Core Data Protection
|
3 years ago |
|
Kévin Chalet
|
bf839d8923
|
Prevent enabling the device authorization flow when token storage is disabled (unless the degraded mode is used)
|
3 years ago |
|
Kévin Chalet
|
21ccfc5e9b
|
Unify the token entry properties restoration logic and fix an issue affecting device codes and ASP.NET Core Data Protection
|
3 years ago |
|
Kévin Chalet
|
8c14d4e3e9
|
Replace references to "URL" by "URI" when resource identifiers are not required to be resource locators
|
3 years ago |
|
Kévin Chalet
|
2a987bcebe
|
Support relative redirect_uri/post_logout_redirect_uri in the client stack and revisit how OpenIddict handles URIs
|
3 years ago |
|
Kévin Chalet
|
1f2809c879
|
Add response_type=none support in the client stack and revamp the grant_type/response_type negotiation logic
|
3 years ago |
