163 Commits (dev)

Author SHA1 Message Date
Kévin Chalet 9780dd2e6b Enable additional Meziantou.Analyzer analyzers 3 weeks ago
Kévin Chalet d663eced46 Reference Meziantou.Analyzer globally and address the existing warnings 3 weeks ago
Kévin Chalet ee3bfb76c0 Normalize collection empty checks in the Entity Framework/Entity Framework Core/MongoDB stores 4 weeks ago
Kévin Chalet eeb8deddbf Introduce a new resource entity and support dynamic resources 1 month ago
Kévin Chalet d41aeb28fc Reference Microsoft.Bcl.Memory on .NET Framework and use Base64Url instead of Base64UrlEncoder 2 months ago
Kévin Chalet 8f349edbff Implement ML-DSA support in the client, core, server and validation stacks 2 months ago
Kévin Chalet 83f0bb5c8f Move the options validation logic to IValidateOptions<TOptions> implementations 3 months ago
Kévin Chalet 7404f1438c Add the ability to re-hash client secrets dynamically and make the PBKDF2 options configurable 3 months ago
Kévin Chalet 8b847421d6 Replace the SUPPORTS_* constants by the built-in target/platform constants 4 months ago
Kévin Chalet 4636bc6848 Stop supporting ASP.NET Core 2.3 and remove the .NET Framework 4.6.2/4.7.2, .NET Standard 2.0/2.1 and UAP TFMs 4 months ago
Kévin Chalet 59a137cd63 Allow using mTLS client authentication with the client credentials grant and support mTLS token binding for anonymous clients 5 months ago
Kévin Chalet 63b56ccc82 Detect and reject reference token payloads directly used as regular tokens 6 months ago
Kévin Chalet 7b9fd7677f Revamp the client authentication method negotiation logic and support mTLS token binding in the client, server and validation stacks 6 months ago
Kévin Chalet 8dbf493469 Add a new OpenIddictMessage constructor accepting non-nullable immutable arrays 6 months ago
Kévin Chalet 5c1cda0ac5 Implement native mTLS client authentication support in the server stack 7 months ago
Kévin Chalet 9797f86194 Replace PolySharp by the Polyfill source package and adopt ArgumentNullException.ThrowIfNull()/ArgumentException.ThrowIfNullOrEmpty() 8 months ago
Kévin Chalet 1ef7be587f Bump .NET Arcade to 10.0.0-beta.25562.108 8 months ago
Kévin Chalet a0f39b4b5c Polyfill ValueTask.CompletedTask and ValueTask<TResult>.CompletedTask 10 months ago
Kévin Chalet 13f352af6d Bump the .NET SDK to 10.0.100-rc.2.25502.107 and add .NET 10 TFMs 10 months ago
Kévin Chalet 91a68c161a Implement client authentication support for the PAR endpoint 1 year ago
Kévin Chalet 78ba0a3dec Implement built-in audiences and resources indicators validation 1 year ago
Kévin Chalet 8c94cb7c13 Implement OAuth 2.0 Token Exchange support 1 year ago
Kévin Chalet b33dad15f3 Implement new audience and presenter validation logic as part of the ValidateToken event 1 year ago
Kévin Chalet 36424f84b3 Improve the WWW-Authenticate parsing logic 1 year ago
Kévin Chalet fab284f5d5 Update GenerateTokenContext to expose SecurityTokenDescriptor and adopt the new URI-style token type identifiers in the client, core, server and validation stacks 1 year ago
Kévin Chalet 5b56eddc0c Remove all the store resolvers and mark all the assemblies as trimming/Native AOT-compatible 1 year ago
Kévin Chalet 38e84b862d Update OpenIddictParameter to offer ImmutableArray<string> conversions instead of string[] and clone JsonNode objects to guarantee immutability 1 year ago
Kévin Chalet e39c635631 Decorate the claim extensions with [OverloadResolutionPriority] and collection expressions for ImmutableArray<T> 1 year ago
Kévin Chalet b17b3fe235 Update the .NET Framework and .NET Standard TFMs to target ASP.NET Core/Entity Framework Core 2.3 and .NET Extensions 8.0 1 year ago
Kévin Chalet fbad1d0727 Bump .NET Arcade to 9.0.0-beta.25058.5 1 year ago
Kévin Chalet bdf3b56db8 Do not reject end session requests that don't include an explicit client_id when request caching is used 2 years ago
Kévin Chalet feedeacae7 Do not reject end session requests that don't include an explicit client_id when request caching is used 2 years ago
Kévin Chalet 42d6369910 Implement Pushed Authorization Requests (PAR) support and revamp the request caching feature 2 years ago
Kévin Chalet e1f729ba0b Validate prompt values specified in authorization requests and update the configuration endpoint to return "prompt_values_supported" 2 years ago
Kévin Chalet ef2e02ee23 Introduce a new .NET 9.0 TFM and use the new X509CertificateLoader API 2 years ago
Kévin Chalet d4c05e2e23 Rename the device, cryptography, logout and verification endpoints and the associated events/event handlers 2 years ago
Kévin Chalet 02fb4414f7 Allow using response_type=token with PKCE when response type permissions are enforced 2 years ago
Kévin Chalet 38d87b2945 Allow using unique JSON_ARRAY claims to represent arrays of strings 2 years ago
Kévin Chalet 26fdb68773 Bump the .NET SDK to 8.0.200 and stop using collection expressions with ImmutableArray<T> 3 years ago
Kévin Chalet cf3e960055 Abort sign-in demands whose principal contains a standard claim with an invalid claim value type 3 years ago
Kévin Chalet 61f036fd59
Introduce a faster way to revoke all the tokens associated with an authorization and use bulk operations when available 3 years ago
Kévin Chalet 0bf4a433bd Add Zoom to the list of supported providers 3 years ago
Kévin Chalet 517b1b6324 Add Zoom to the list of supported providers 3 years ago
Kévin Chalet f36d9b5471 Remove unnecessary usings 3 years ago
Kévin Chalet 02cca0a42e Update the entire code base to use collection expressions 3 years ago
Kévin Chalet 746f38432c Make the supported subject types configurable via OpenIddictServerOptions.SubjectTypes 3 years ago
Kévin Chalet 00fa3f3494 Allow configuring the supported client authentication methods and use invalid_client for client assertion errors 3 years ago
Kévin Chalet d6c9c0b35c Add client assertions support to the server stack 3 years ago
Kévin Chalet a941660a41 Move the client authentication logic to the ProcessAuthentication event 3 years ago
Kévin Chalet 1c382d90ba Introduce application settings and support configuring token lifetimes per client 3 years ago