192 Commits (08d51aaa960a36a0c15f83ee2f9f7330489042ee)

Author SHA1 Message Date
Kévin Chalet 08d51aaa96 Configure the OWIN server integration test server to use ITestOutputHelper 6 years ago
Kévin Chalet e0909c87a8 Update the logout endpoint logic to not trigger a sign-out response by default and reword some of the exception messages 6 years ago
Martin Costello a92f48dd1c
Send integration test logs to xUnit output 6 years ago
Kévin Chalet 767dfe61e9 Cross-compile more projects for .NET Framework 4.6.1 to reduce the dependencies graph 6 years ago
Kévin Chalet beb6b3e92b
Make authorization codes reference tokens by default, split UseReferenceTokens into two settings and allow the Data Protection to fall back to JWT for specific token types 6 years ago
Kévin Chalet 6bec7ad0c9 Remove the initialization logic from the MongoDB stores 6 years ago
Kévin Chalet 5169c28d97 Bump Wilson to 6.7.0 and use the new SecurityKey.IsSupportedAlgorithm() API 6 years ago
Kévin Chalet ed0dc56487 Reunify the custom and built-in handlers collections to avoid computing the collections per-request 6 years ago
Kévin Chalet 2be6d808cf Enable central package versions management 6 years ago
Darthruneis f9d9762a20
Port OpenIddictServerBuilderTests from OpenIddict 2.x 6 years ago
Kévin Chalet 4a2dedfd8c Remove the System.Linq.Async dependency from OpenIddict.Core 6 years ago
Kévin Chalet 45d90453c8 Fix the ProcessHostRedirectionResponse handler to be invoked after ProcessRedirectionResponse 6 years ago
Kévin Chalet 39a75284cc Enable FxCop code analysis 6 years ago
Kévin Chalet fb406560c6 Normalize multiple public scope claims to a single spare-separated claim 6 years ago
Kévin Chalet 8021c15328
Use the generic host builder on .NET Core 3.1 6 years ago
Kévin Chalet 77ca35a53f
Use private claims for the token creation/expiration dates and introduce new Data Protection authentication properties 6 years ago
Kévin Chalet 2ac5b4b884 Update the validation OWIN integration to support active authentication and rework how errors are returned for API requests 6 years ago
Kévin Chalet d87803c4ec Rename the default entities 6 years ago
Kévin Chalet f81f8fc7dd Introduce introspection support and revamp the events model used by the validation handler 6 years ago
Kévin Chalet be23e18023 Leverage IdentityModel's new TypeValidator mechanism to allow validating JWT tokens issued by OpenIddict 1.x/2.x 6 years ago
Kévin Chalet 528723b9b1 Fix OpenIddictParameter.ToString() to always use JsonElement.ToString() 6 years ago
Kévin Chalet 414e05eed4 Create a DB entry for all types of tokens, rework reference tokens support and add token entry validation to the validation handler 6 years ago
Kévin Chalet c0bdb5ef56 Update Arcade and replace the netcoreapp3.0 TFMs by netcoreapp3.1 6 years ago
Kévin Chalet fb92acbdaf Replace OpenIddictApplicationManager.IsConfidentialAsync()/IsPublicAsync()/IsHybridAsync() by HasClientTypeAsync() 6 years ago
Kévin Chalet ccaf982aeb Update OpenIddictMessage.AddParameter() to throw an exception when the parameter already exists and introduce new APIs 6 years ago
Kévin Chalet fd63da76df Allow returning custom challenge/sign-in/sign-out parameters via AuthenticationProperties.Parameters 6 years ago
Kévin Chalet 700dc69c2e Update the userinfo endpoint/validation handler to return a 401 error when the access token is missing 6 years ago
Kévin Chalet 8b097321c3 Update the ValidatePrincipal handler to ensure the token type of the claims principal matches the expected type 6 years ago
Kévin Chalet ac5f302b01 Add MapInternalClaims and handle multiple public "scope" claims for backward compatibility 6 years ago
Kévin Chalet 276a9b8a7d Update OpenIddict.Validation.SystemNetHttp to use ReadAsStringAsync() and rework the samples 6 years ago
Drew Fleming 78d14adb33 Reject token requests containing a code_verifier when no code_challenge is attached to the authorization code 6 years ago
Kévin Chalet 97dffed124 Implement complete WWW-Authenticate response header support 6 years ago
Kévin Chalet 24ebea58f7 Remove the NHibernate stores 6 years ago
Kévin Chalet dae66ef974 Add integration tests for the PKCE enforcement feature 6 years ago
Kévin Chalet a8f9e53f9d Relax the relative URLs constraints and fix the Uri construction logic to correctly compute absolute URLs 6 years ago
Kévin Chalet 2aa4c45794 Update the server sample to use the authorization manager 6 years ago
IgorHrabrov 201daf88ac Refactor the OpenIddict primitives extensions class 6 years ago
Kévin Chalet d276af1742 Update the OpenIddict server ASP.NET Core/OWIN integration tests to run on .NET Framework 4.6.1 6 years ago
Kévin Chalet 76a432e045 Port the challenge integration tests 6 years ago
Kévin Chalet 3cbe3936bd Port the sign-out integration tests and add validation to prevent sign-out from being triggered from unsupported endpoints 6 years ago
Kévin Chalet b2e631ccf7 Port the discovery endpoints integration tests 6 years ago
Kévin Chalet 831a5b988a Port the sign-in integration tests 6 years ago
Kévin Chalet 43beb64877 Port the end session endpoint integration tests 6 years ago
Kévin Chalet a2c65979f8 Port the userinfo integration tests and re-enable POST support 6 years ago
Kévin Chalet 0214951ffc Port the revocation endpoint tests and disable GET support 6 years ago
Kévin Chalet 2e5a44f57a Port the introspection endpoint tests and enable basic authentication support 6 years ago
Kévin Chalet 6a3afb52c4 Make the supported code_challenge_methods configurable via advanced options and disable plain by default 6 years ago
Kévin Chalet a25907cd52 Automatically map the scope/azp access token claims to their OpenIddict private claims equivalents 6 years ago
Kévin Chalet c61f22f589 Port the authentication integration tests 6 years ago
Kévin Chalet eb35cbefb7 Port the token endpoint integration tests 6 years ago