147 Commits (1ef7be587f21005539c80484a46e77b0f710eb7d)

Author SHA1 Message Date
Kévin Chalet 1ef7be587f Bump .NET Arcade to 10.0.0-beta.25562.108 1 month ago
Kévin Chalet a0f39b4b5c Polyfill ValueTask.CompletedTask and ValueTask<TResult>.CompletedTask 3 months ago
Kévin Chalet 13f352af6d Bump the .NET SDK to 10.0.100-rc.2.25502.107 and add .NET 10 TFMs 3 months ago
Kévin Chalet 91a68c161a Implement client authentication support for the PAR endpoint 8 months ago
Kévin Chalet 78ba0a3dec Implement built-in audiences and resources indicators validation 8 months ago
Kévin Chalet 8c94cb7c13 Implement OAuth 2.0 Token Exchange support 8 months ago
Kévin Chalet b33dad15f3 Implement new audience and presenter validation logic as part of the ValidateToken event 8 months ago
Kévin Chalet 36424f84b3 Improve the WWW-Authenticate parsing logic 8 months ago
Kévin Chalet fab284f5d5 Update GenerateTokenContext to expose SecurityTokenDescriptor and adopt the new URI-style token type identifiers in the client, core, server and validation stacks 10 months ago
Kévin Chalet 5b56eddc0c Remove all the store resolvers and mark all the assemblies as trimming/Native AOT-compatible 11 months ago
Kévin Chalet 38e84b862d Update OpenIddictParameter to offer ImmutableArray<string> conversions instead of string[] and clone JsonNode objects to guarantee immutability 11 months ago
Kévin Chalet e39c635631 Decorate the claim extensions with [OverloadResolutionPriority] and collection expressions for ImmutableArray<T> 11 months ago
Kévin Chalet b17b3fe235 Update the .NET Framework and .NET Standard TFMs to target ASP.NET Core/Entity Framework Core 2.3 and .NET Extensions 8.0 11 months ago
Kévin Chalet fbad1d0727 Bump .NET Arcade to 9.0.0-beta.25058.5 11 months ago
Kévin Chalet bdf3b56db8 Do not reject end session requests that don't include an explicit client_id when request caching is used 12 months ago
Kévin Chalet feedeacae7 Do not reject end session requests that don't include an explicit client_id when request caching is used 12 months ago
Kévin Chalet 42d6369910 Implement Pushed Authorization Requests (PAR) support and revamp the request caching feature 12 months ago
Kévin Chalet e1f729ba0b Validate prompt values specified in authorization requests and update the configuration endpoint to return "prompt_values_supported" 1 year ago
Kévin Chalet ef2e02ee23 Introduce a new .NET 9.0 TFM and use the new X509CertificateLoader API 1 year ago
Kévin Chalet d4c05e2e23 Rename the device, cryptography, logout and verification endpoints and the associated events/event handlers 1 year ago
Kévin Chalet 02fb4414f7 Allow using response_type=token with PKCE when response type permissions are enforced 2 years ago
Kévin Chalet 38d87b2945 Allow using unique JSON_ARRAY claims to represent arrays of strings 2 years ago
Kévin Chalet 26fdb68773 Bump the .NET SDK to 8.0.200 and stop using collection expressions with ImmutableArray<T> 2 years ago
Kévin Chalet cf3e960055 Abort sign-in demands whose principal contains a standard claim with an invalid claim value type 2 years ago
Kévin Chalet 61f036fd59
Introduce a faster way to revoke all the tokens associated with an authorization and use bulk operations when available 2 years ago
Kévin Chalet 0bf4a433bd Add Zoom to the list of supported providers 2 years ago
Kévin Chalet 517b1b6324 Add Zoom to the list of supported providers 2 years ago
Kévin Chalet f36d9b5471 Remove unnecessary usings 2 years ago
Kévin Chalet 02cca0a42e Update the entire code base to use collection expressions 2 years ago
Kévin Chalet 746f38432c Make the supported subject types configurable via OpenIddictServerOptions.SubjectTypes 2 years ago
Kévin Chalet 00fa3f3494 Allow configuring the supported client authentication methods and use invalid_client for client assertion errors 2 years ago
Kévin Chalet d6c9c0b35c Add client assertions support to the server stack 2 years ago
Kévin Chalet a941660a41 Move the client authentication logic to the ProcessAuthentication event 2 years ago
Kévin Chalet 1c382d90ba Introduce application settings and support configuring token lifetimes per client 2 years ago
Kévin Chalet 4af3f8dc6f Introduce support for application types 2 years ago
Kévin Chalet 61e6fd95c3 Centralize the target frameworks in Directory.Build.props 3 years ago
Kévin Chalet e53a723766 Enable the "plain" code challenge method by default to increase interoperability 3 years ago
Kévin Chalet ef4b0f3417 Add explicit System.Net.Http usings 3 years ago
Kévin Chalet 4685332df5 Add device authorization grant support in the OpenIddict client 3 years ago
Kévin Chalet eb1fcc82bd Introduce new properties to disable token rejection and don't reject authentication demands for invalid identity token hints 3 years ago
Kévin Chalet 6cfe43b3e9 Add native support for Windows Runtime 3 years ago
Kévin Chalet 773594231e Prevent enabling the device authorization flow when token storage is disabled (unless the degraded mode is used) 3 years ago
Kévin Chalet bfa95d094a Unify the token entry properties restoration logic and fix an issue affecting device codes and ASP.NET Core Data Protection 3 years ago
Kévin Chalet bf839d8923 Prevent enabling the device authorization flow when token storage is disabled (unless the degraded mode is used) 3 years ago
Kévin Chalet 21ccfc5e9b Unify the token entry properties restoration logic and fix an issue affecting device codes and ASP.NET Core Data Protection 3 years ago
Kévin Chalet 8c14d4e3e9 Replace references to "URL" by "URI" when resource identifiers are not required to be resource locators 3 years ago
Kévin Chalet 2a987bcebe Support relative redirect_uri/post_logout_redirect_uri in the client stack and revisit how OpenIddict handles URIs 3 years ago
Kévin Chalet 1f2809c879 Add response_type=none support in the client stack and revamp the grant_type/response_type negotiation logic 3 years ago
Kévin Chalet ffd47678fc Reject authorization code/device authorization code grant requests containing a "scope" parameter 3 years ago
Kévin Chalet 779a8524e4 Fix global.json to reference Arcade 7.0.0-beta.22513.4 3 years ago