Kévin Chalet
|
61f036fd59
|
Introduce a faster way to revoke all the tokens associated with an authorization and use bulk operations when available
|
2 years ago |
|
Kévin Chalet
|
517b1b6324
|
Add Zoom to the list of supported providers
|
2 years ago |
|
Kévin Chalet
|
f36d9b5471
|
Remove unnecessary usings
|
2 years ago |
|
Kévin Chalet
|
02cca0a42e
|
Update the entire code base to use collection expressions
|
2 years ago |
|
Kévin Chalet
|
746f38432c
|
Make the supported subject types configurable via OpenIddictServerOptions.SubjectTypes
|
2 years ago |
|
Kévin Chalet
|
00fa3f3494
|
Allow configuring the supported client authentication methods and use invalid_client for client assertion errors
|
2 years ago |
|
Kévin Chalet
|
d6c9c0b35c
|
Add client assertions support to the server stack
|
2 years ago |
|
Kévin Chalet
|
a941660a41
|
Move the client authentication logic to the ProcessAuthentication event
|
2 years ago |
|
Kévin Chalet
|
1c382d90ba
|
Introduce application settings and support configuring token lifetimes per client
|
2 years ago |
|
Kévin Chalet
|
4af3f8dc6f
|
Introduce support for application types
|
2 years ago |
|
Kévin Chalet
|
61e6fd95c3
|
Centralize the target frameworks in Directory.Build.props
|
3 years ago |
|
Kévin Chalet
|
e53a723766
|
Enable the "plain" code challenge method by default to increase interoperability
|
3 years ago |
|
Kévin Chalet
|
ef4b0f3417
|
Add explicit System.Net.Http usings
|
3 years ago |
|
Kévin Chalet
|
4685332df5
|
Add device authorization grant support in the OpenIddict client
|
3 years ago |
|
Kévin Chalet
|
eb1fcc82bd
|
Introduce new properties to disable token rejection and don't reject authentication demands for invalid identity token hints
|
3 years ago |
|
Kévin Chalet
|
6cfe43b3e9
|
Add native support for Windows Runtime
|
3 years ago |
|
Kévin Chalet
|
773594231e
|
Prevent enabling the device authorization flow when token storage is disabled (unless the degraded mode is used)
|
3 years ago |
|
Kévin Chalet
|
bfa95d094a
|
Unify the token entry properties restoration logic and fix an issue affecting device codes and ASP.NET Core Data Protection
|
3 years ago |
|
Kévin Chalet
|
bf839d8923
|
Prevent enabling the device authorization flow when token storage is disabled (unless the degraded mode is used)
|
3 years ago |
|
Kévin Chalet
|
21ccfc5e9b
|
Unify the token entry properties restoration logic and fix an issue affecting device codes and ASP.NET Core Data Protection
|
3 years ago |
|
Kévin Chalet
|
8c14d4e3e9
|
Replace references to "URL" by "URI" when resource identifiers are not required to be resource locators
|
3 years ago |
|
Kévin Chalet
|
2a987bcebe
|
Support relative redirect_uri/post_logout_redirect_uri in the client stack and revisit how OpenIddict handles URIs
|
3 years ago |
|
Kévin Chalet
|
1f2809c879
|
Add response_type=none support in the client stack and revamp the grant_type/response_type negotiation logic
|
3 years ago |
|
Kévin Chalet
|
ffd47678fc
|
Reject authorization code/device authorization code grant requests containing a "scope" parameter
|
3 years ago |
|
Kévin Chalet
|
779a8524e4
|
Fix global.json to reference Arcade 7.0.0-beta.22513.4
|
3 years ago |
|
Kévin Chalet
|
75b17c94f6
|
Start testing OpenIddict on .NET 7.0
|
3 years ago |
|
Kévin Chalet
|
7ca9be1428
|
Reference PolySharp and replace Substring() calls by the range syntax
|
3 years ago |
|
Kévin Chalet
|
ac5e3dd62b
|
Update the System.Net.Http integrations to support sending empty parameters in GET and POST requests
|
3 years ago |
|
Kévin Chalet
|
6c963c80d0
|
Adjust nullable annotations
|
3 years ago |
|
Kévin Chalet
|
e3b4337b85
|
Revamp Packages.props and bump .NET and third-party dependencies
|
3 years ago |
|
Kévin Chalet
|
20005d63cc
|
Prevent adding multiple client registrations using the same issuer
|
3 years ago |
|
Kévin Chalet
|
5220698c06
|
Introduce IOpenIddictApplicationManager.ValidatePostLogoutRedirectUriAsync() to allow tweaking the validation logic for logout requests that include a client_id parameter
|
4 years ago |
|
Kévin Chalet
|
4ef3c51a01
|
Implement client_id support for logout requests and native id_token_hint validation for both authorization and logout requests
|
4 years ago |
|
Kévin Chalet
|
e1d7817825
|
Update the client and server stacks to redeem tokens earlier
|
4 years ago |
|
Kévin Chalet
|
a1f84d38d0
|
Add integration tests projects for the client and validation stacks and use a high order for the AttachCustom*Parameters handlers
|
4 years ago |
|
Kévin Chalet
|
ddc5c9a69c
|
Revamp the claims extensions and update the client and server hosts to preserve the authentication properties using a special private claim
|
4 years ago |
|
Kévin Chalet
|
32678867ca
|
Remove the .NET 5.0 TFMs
|
4 years ago |
|
Kévin Chalet
|
6f9c559682
|
Update the .NET SDK and bump all dependencies
|
4 years ago |
|
Kévin Chalet
|
3ff021a3e4
|
Revamp HTTP response extraction to support WWW-Authenticate and enforce Content-Type validation
|
4 years ago |
|
Kévin Chalet
|
7222d95025
|
React to the removal of the !! operator in C# 11
|
4 years ago |
|
Kévin Chalet
|
255fc64caf
|
Fix incorrect error messages in the client stack and use ?? for null checks where appropriate
|
4 years ago |
|
Kévin Chalet
|
62f3e6ff85
|
Bump the .NET SDK to 7.0.100-preview.2.22153.17 and modernize the code base
|
4 years ago |
|
Kévin Chalet
|
a1215728db
|
Implement "iss" support in the server stack and update the token validation logic to support issuers that don't end with a trailing slash
|
4 years ago |
|
Kévin Chalet
|
0a8b416311
|
Remove the .NET Core 2.1 TFMs
|
4 years ago |
|
Kévin Chalet
|
23fd89e9eb
|
Add .NET 6.0 TFMs and bump the .NET SDK/packages to 6.0
|
5 years ago |
|
Kévin Chalet
|
deee5e5b92
|
Update the code base to use implicit global usings
|
4 years ago |
|
Kévin Chalet
|
148a987a23
|
Update the code base to use file-scoped namespaces
|
4 years ago |
|
Kévin Chalet
|
cda55862bc
|
Update HandleLogoutRequestContext to allow attaching custom sign-out parameters
|
4 years ago |
|
Kévin Chalet
|
e0c748f046
|
Introduce a simpler way to return additional parameters from the Handle*Request events that trigger a sign-in response
|
4 years ago |
|
Kévin Chalet
|
87c99d6bc7
|
Validate the expiration date of a token before validating its database entry
|
5 years ago |
