Kévin Chalet
|
6e1c123dd8
|
Normalize introspection handling in the client and validation stacks
|
2 years ago |
|
Kévin Chalet
|
4f09c587ab
|
Update the client stack to support standard token revocation
|
2 years ago |
|
Kévin Chalet
|
372eceab62
|
Add introspection support in the client stack
|
2 years ago |
|
Kévin Chalet
|
e08bdbed04
|
Tweak the order of the response processing event handlers to be invoked later in the pipeline
|
2 years ago |
|
Kévin Chalet
|
be31bc2fd5
|
Update OpenIddict.Client.SystemNetHttp and OpenIddict.Validation.SystemNetHttp to support Microsoft.Extensions.Http.Resilience
|
2 years ago |
|
Kévin Chalet
|
253b1b56b6
|
Fix the ASP.NET Core Data Protection formatters to use the correct value type for the token lifetime claims
|
2 years ago |
|
Kévin Chalet
|
b0371ae00e
|
Update the EF 6/EF Core stores to retrieve the entities from the change tracker when available
|
2 years ago |
|
Kévin Chalet
|
9ee5fe53ab
|
Update the EF Core stores to resolve the navigation properties via the change tracker when possible
|
2 years ago |
|
Kévin Chalet
|
718e894d5d
|
Update the XML documentation to clarify that disabling token storage prevents the device authorization flow from being used
|
2 years ago |
|
Kévin Chalet
|
c149ed6b7c
|
Update the web providers generator to support assigning default values to URI settings and add Exact Online to the list of supported providers
|
2 years ago |
|
Kévin Chalet
|
885e21493f
|
Map the "user_id" claim returned by Amazon to ClaimTypes.NameIdentifier
|
2 years ago |
|
Kévin Chalet
|
d2a35e844f
|
Update the client console sandbox to support refreshing the user authentication
|
2 years ago |
|
Kévin Chalet
|
fb2565e298
|
Update PopulateMergedPrincipal to create a non-empty principal for all authentication demands
|
2 years ago |
|
Kévin Chalet
|
3a0d074326
|
Add Amazon to the list of supported providers
|
2 years ago |
|
Kévin Chalet
|
b386b7844c
|
Stop using the ClaimsIdentity constructor accepting a single string parameter and use explicit claim types
|
2 years ago |
|
Kévin Chalet
|
e9eff303ef
|
Update MapStandardWebServicesFederationClaims to fall back to "name" when no "preferred_username" claim was found
|
2 years ago |
|
Kévin Chalet
|
24e242e7b3
|
Fix the client assertion validation logic to avoid rejecting assertions that don't specify an "iat" claim
|
2 years ago |
|
Kévin Chalet
|
cf3e960055
|
Abort sign-in demands whose principal contains a standard claim with an invalid claim value type
|
2 years ago |
|
Kévin Chalet
|
05ab8b7428
|
Update the ClaimsIdentity/ClaimsPrincipal.GetClaim() extension to throw an exception when multiple claims of the same type exist
|
2 years ago |
|
Kévin Chalet
|
7af133f98c
|
Introduce a new DisableUserinfo option in RefreshTokenAuthenticationRequest to allow refreshing tokens acquired during a client credentials flow
|
2 years ago |
|
Kévin Chalet
|
b1005dad22
|
Add Orange France to the list of supported providers
|
2 years ago |
|
Kévin Chalet
|
ef71f21543
|
Decorate OpenIddictClientWebIntegrationConfiguration.ConfigureProvider() with [EditorBrowsable(EditorBrowsableState.Never)]
|
2 years ago |
|
Kévin Chalet
|
b918c1a2aa
|
Update the Twitter integration to map "name" to ClaimTypes.Name
|
2 years ago |
|
Kévin Chalet
|
8b590c67cd
|
Add Okta to the list of supported providers
|
2 years ago |
|
Kévin Chalet
|
0658668e24
|
Remove invalid references to Windows in code comments present in the system integration package
|
2 years ago |
|
Kévin Chalet
|
3753229267
|
Update the client and server stacks to automatically restore the authentication properties and attach them to the authentication context
|
2 years ago |
|
Kévin Chalet
|
29d7197161
|
Add World ID to the list of supported providers
|
2 years ago |
|
Kévin Chalet
|
7b2867d907
|
Make OpenIddictClientWebIntegrationConfiguration.ConfigureProvider() public to support advanced scenarios
|
2 years ago |
|
Kévin Chalet
|
05ba317070
|
Introduce a new API returning the client registrations and update the samples to build the list of providers dynamically
|
2 years ago |
|
Kévin Chalet
|
b7024f2e82
|
Replace references to Azure Active Directory by Microsoft Entra ID
|
3 years ago |
|
Kévin Chalet
|
bed3d9ebed
|
Fix the ResolveTokenValidationParameters handler to run when using introspection
|
2 years ago |
|
Kévin Chalet
|
1f91321033
|
Rename the OpenIddictClientService.GetClientRegistrationAsync()/GetServerConfigurationAsync() APIs to be more specific and allow them to be overridden
|
2 years ago |
|
Kévin Chalet
|
c8f7c2c5bb
|
Declare OpenIddictClientRegistration.ConfigurationManager as a nullable property
|
2 years ago |
|
Kévin Chalet
|
b94674eb7f
|
Fix the credentials sorting algorithm to correctly sort X509SecurityKey instances
|
2 years ago |
|
Kévin Chalet
|
507ced105a
|
Update the ValidateExpirationDate handlers to support TokenValidationParameters.ClockSkew
|
2 years ago |
|
Kévin Chalet
|
7585ebfbed
|
Update the client service to attach the additional parameters to the correct request instances
|
2 years ago |
|
Kévin Chalet
|
61f036fd59
|
Introduce a faster way to revoke all the tokens associated with an authorization and use bulk operations when available
|
2 years ago |
Dennis Haney
|
3e6e10a55f
|
Expose new constants for claim request members
|
2 years ago |
|
Kévin Chalet
|
6636784754
|
Add a .NET 8.0 TFM
|
3 years ago |
|
Kévin Chalet
|
7391a3e178
|
Update the ASP.NET Core/OWIN integrations to allow returning authentication tickets with a null or empty principal
|
3 years ago |
|
Kévin Chalet
|
517b1b6324
|
Add Zoom to the list of supported providers
|
3 years ago |
|
Kévin Chalet
|
f36d9b5471
|
Remove unnecessary usings
|
3 years ago |
|
Kévin Chalet
|
02cca0a42e
|
Update the entire code base to use collection expressions
|
3 years ago |
|
Kévin Chalet
|
9ac9375d54
|
Bump the .NET SDK to 8.0.100-rc.2.23502.2
|
3 years ago |
Dennis Haney
|
327cf8e3f1
|
Update the client authentication results to expose the access token expiration date
|
3 years ago |
|
Kévin Chalet
|
4b9029e235
|
Revamp the validation handler and add client assertions support
|
3 years ago |
|
Kévin Chalet
|
746f38432c
|
Make the supported subject types configurable via OpenIddictServerOptions.SubjectTypes
|
3 years ago |
|
Kévin Chalet
|
00fa3f3494
|
Allow configuring the supported client authentication methods and use invalid_client for client assertion errors
|
3 years ago |
|
Kévin Chalet
|
d6c9c0b35c
|
Add client assertions support to the server stack
|
3 years ago |
|
Kévin Chalet
|
3608291542
|
Automatically disable userinfo validation when the openid scope is not requested
|
3 years ago |
