Kévin Chalet
|
00fa3f3494
|
Allow configuring the supported client authentication methods and use invalid_client for client assertion errors
|
2 years ago |
|
Kévin Chalet
|
d6c9c0b35c
|
Add client assertions support to the server stack
|
2 years ago |
|
Kévin Chalet
|
1c382d90ba
|
Introduce application settings and support configuring token lifetimes per client
|
2 years ago |
|
Kévin Chalet
|
4af3f8dc6f
|
Introduce support for application types
|
2 years ago |
|
Kévin Chalet
|
64ade94294
|
Support multiple registrations with the same issuer/provider name and introduce client record models
|
3 years ago |
|
Kévin Chalet
|
4685332df5
|
Add device authorization grant support in the OpenIddict client
|
3 years ago |
|
Kévin Chalet
|
532a5941ec
|
Introduce Windows support for the client stack
|
3 years ago |
|
Kévin Chalet
|
62a10af526
|
Store the provider name in the state token as a private claim and update the ASP.NET Core/OWIN hosts to return it as part of the merged principal
|
3 years ago |
|
Kévin Chalet
|
a99a6cdace
|
Implement RP-initiated logout in the client stack
|
4 years ago |
|
Kévin Chalet
|
ddc5c9a69c
|
Revamp the claims extensions and update the client and server hosts to preserve the authentication properties using a special private claim
|
4 years ago |
|
Kévin Chalet
|
7bb02a43bd
|
Allow determining the token format dynamically and automatically add a jti claim to JWT access tokens
|
4 years ago |
|
Kévin Chalet
|
3ff021a3e4
|
Revamp HTTP response extraction to support WWW-Authenticate and enforce Content-Type validation
|
4 years ago |
|
Kévin Chalet
|
e1436f7f59
|
Add native support for private_key_jwt in the client
|
4 years ago |
|
Kévin Chalet
|
a1215728db
|
Implement "iss" support in the server stack and update the token validation logic to support issuers that don't end with a trailing slash
|
4 years ago |
|
Kévin Chalet
|
fdf34448f2
|
Add userinfo support
|
4 years ago |
|
Kévin Chalet
|
3bf51e1600
|
Introduce the first bits of the OpenIddict client
|
6 years ago |
|
Kévin Chalet
|
148a987a23
|
Update the code base to use file-scoped namespaces
|
4 years ago |
|
Kévin Chalet
|
84facf0895
|
Introduce response type permissions, remove hybrid clients support and bring back none flow support
|
5 years ago |
|
Kévin Chalet
|
dad788a936
|
Support the long application/at+jwt and application/jwt forms
|
6 years ago |
|
Kévin Chalet
|
9aae602a64
|
Add a constants class containing the authentication method references defined by RFC8176
|
6 years ago |
|
Kévin Chalet
|
77ca35a53f
|
Use private claims for the token creation/expiration dates and introduce new Data Protection authentication properties
|
6 years ago |
|
Kévin Chalet
|
700dc69c2e
|
Update the userinfo endpoint/validation handler to return a 401 error when the access token is missing
|
6 years ago |
|
Kévin Chalet
|
ac5f302b01
|
Add MapInternalClaims and handle multiple public "scope" claims for backward compatibility
|
6 years ago |
|
Kévin Chalet
|
560a44514b
|
Automatically add a client_id claim to access tokens and use "JWT" instead of "jwt" for the identity tokens' typ header
|
6 years ago |
|
Kévin Chalet
|
97dffed124
|
Implement complete WWW-Authenticate response header support
|
6 years ago |
|
Kévin Chalet
|
2aa4c45794
|
Update the server sample to use the authorization manager
|
6 years ago |
|
Kévin Chalet
|
a25907cd52
|
Automatically map the scope/azp access token claims to their OpenIddict private claims equivalents
|
6 years ago |
|
Kévin Chalet
|
bef913d002
|
Replace JSON.NET by System.Text.Json, store cached requests as JWE/JWS payloads and set the typ header of JWT tokens
|
6 years ago |
|
Kévin Chalet
|
552ac02176
|
Introduce application requirements and add per-application PKCE enforcement support
|
7 years ago |
|
Kévin Chalet
|
225b8ad9f5
|
Add device code flow support
|
6 years ago |
|
Kévin Chalet
|
858740818e
|
Reintroduce token storage, reference tokens, non-sliding expiration, rolling tokens and token revocation support
|
6 years ago |
|
Kévin Chalet
|
9262d5aa3e
|
Bring back automatic authorization validation and ad-hoc authorization creation
|
6 years ago |
|
Kévin Chalet
|
f8280ddf6b
|
Set the access token audiences using the resources stored in the principal
|
6 years ago |
|
Kévin Chalet
|
94e71b530b
|
Reintroduce the introspection endpoint
|
7 years ago |
|
Kévin Chalet
|
9ee38c0efb
|
Introduce the first experimental OpenIddict 3.0 bits and move the build infrastructure to Arcade
|
7 years ago |
|
Kévin Chalet
|
55f358689c
|
Introduce built-in entity caching support in the managers and allow disabling the additional checks
|
7 years ago |
|
Kévin Chalet
|
50375c212d
|
Introduce a custom exception type that allows flowing multiple validation errors
|
7 years ago |
|
Kévin Chalet
|
978c398d7d
|
Introduce new constants
|
8 years ago |
|
Kévin Chalet
|
a20f38a6ce
|
Remove OfflineAccess/OpenId from OpenIddictConstants.Permissions.Scopes
|
8 years ago |
|
Kévin Chalet
|
e8762cd812
|
Introduce new constants
|
8 years ago |
|
Kévin Chalet
|
7bb2cd9522
|
Add common claims/scopes/errors constants to OpenIddictConstants
|
8 years ago |
|
Kévin Chalet
|
62ea117682
|
Store the token/authorization identifiers in new internal authentication properties
|
8 years ago |
|
Kévin Chalet
|
7e10bedb73
|
Remove implicit permissions and introduce OpenIddictServerBuilder.IgnoreEndpointPermissions()/IgnoreGrantTypePermissions()/IgnoreScopePermissions()
|
8 years ago |
|
Kévin Chalet
|
32fe4b0ae7
|
Remove OpenIddict.Models/OpenIddict.Stores and move to per-provider models
|
8 years ago |
|
Kévin Chalet
|
267a89a08c
|
Remove the non-standard external_providers_supported node from the discovery document
|
8 years ago |
Chino Chang
|
03a27051ec
|
Create a validation middleware with reference tokens support
|
8 years ago |
|
Kévin Chalet
|
7bca2c06ed
|
Revamp the OpenIddict services registration process and introduce new builders to separate the server APIs from the core APIs
|
8 years ago |
|
Kévin Chalet
|
efce0af499
|
Introduce OpenIddictApplication.ConsentType and add new authorization helpers
|
8 years ago |
|
Kévin Chalet
|
cb05ebc769
|
Introduce scope permissions, add opt-in scope validation support and rework existing permissions
|
8 years ago |
|
Kévin Chalet
|
c079027ca7
|
Introduce full support for application permissions
|
8 years ago |
