Kévin Chalet
|
29f88f4b43
|
Change the resource identifiers naming scheme
|
6 years ago |
Kévin Chalet
|
0b629b3dbd
|
Replace JsonSerializer.Serialize() by Utf8JsonWriter and JsonSerializer.Deserialize() by JsonDocument
|
6 years ago |
Kévin Chalet
|
3841f32f17
|
Update the entire codebase to use is null/is not null
|
6 years ago |
Kévin Chalet
|
f54ba7f6dd
|
Allow built-in scope validation to be partially executed when the degraded mode is enabled
|
6 years ago |
Kévin Chalet
|
f84a10270e
|
Revamp the authorizations/tokens pruning mechanism
|
6 years ago |
Kévin Chalet
|
22f5632afe
|
Remove authorization code/identity token introspection/revocation support
|
6 years ago |
Kévin Chalet
|
8085ca176b
|
Translate all the error messages into French and remove the duplicate .resx entries
|
6 years ago |
Kévin Chalet
|
4e309929b5
|
Don't revoke the authorization when detecting an authorization code/refresh token replay
|
6 years ago |
Kévin Chalet
|
5f164309cd
|
Automatically disable the incompatible options when enabling the degraded mode
|
6 years ago |
Kévin Chalet
|
c8215868cf
|
Rename the FunctionalTests namespace suffix to IntegrationTests
|
6 years ago |
Kévin Chalet
|
5da84ff95a
|
Move OpenIddictResources to the OpenIddict.Abstractions root namespace
|
6 years ago |
Kévin Chalet
|
66f6d80298
|
Move all the assertions and log messages to OpenIddictResources
|
6 years ago |
Kévin Chalet
|
8feeb8698d
|
Update the entire codebase to use IStringLocalizer/ResourceManager
|
6 years ago |
Kévin Chalet
|
dda225a328
|
Rename OpenIddictServerOptions.UseSlidingExpiration to DisableSlidingRefreshTokenExpiration and fix the XML documentation
|
6 years ago |
Kévin Chalet
|
8276843268
|
Move the feature constants from Directory.Build.props to Directory.Build.targets to be able to use TargetFrameworkIdentifier-based conditions
|
6 years ago |
Kévin Chalet
|
e0909c87a8
|
Update the logout endpoint logic to not trigger a sign-out response by default and reword some of the exception messages
|
6 years ago |
Martin Costello
|
a92f48dd1c
|
Send integration test logs to xUnit output
|
6 years ago |
Kévin Chalet
|
767dfe61e9
|
Cross-compile more projects for .NET Framework 4.6.1 to reduce the dependencies graph
|
6 years ago |
Kévin Chalet
|
beb6b3e92b
|
Make authorization codes reference tokens by default, split UseReferenceTokens into two settings and allow the Data Protection to fall back to JWT for specific token types
|
6 years ago |
Kévin Chalet
|
5169c28d97
|
Bump Wilson to 6.7.0 and use the new SecurityKey.IsSupportedAlgorithm() API
|
6 years ago |
Kévin Chalet
|
2be6d808cf
|
Enable central package versions management
|
6 years ago |
Kévin Chalet
|
4a2dedfd8c
|
Remove the System.Linq.Async dependency from OpenIddict.Core
|
6 years ago |
Kévin Chalet
|
45d90453c8
|
Fix the ProcessHostRedirectionResponse handler to be invoked after ProcessRedirectionResponse
|
6 years ago |
Kévin Chalet
|
39a75284cc
|
Enable FxCop code analysis
|
6 years ago |
Kévin Chalet
|
fb406560c6
|
Normalize multiple public scope claims to a single spare-separated claim
|
6 years ago |
Kévin Chalet
|
8021c15328
|
Use the generic host builder on .NET Core 3.1
|
6 years ago |
Kévin Chalet
|
77ca35a53f
|
Use private claims for the token creation/expiration dates and introduce new Data Protection authentication properties
|
6 years ago |
Kévin Chalet
|
2ac5b4b884
|
Update the validation OWIN integration to support active authentication and rework how errors are returned for API requests
|
6 years ago |
Kévin Chalet
|
f81f8fc7dd
|
Introduce introspection support and revamp the events model used by the validation handler
|
6 years ago |
Kévin Chalet
|
be23e18023
|
Leverage IdentityModel's new TypeValidator mechanism to allow validating JWT tokens issued by OpenIddict 1.x/2.x
|
6 years ago |
Kévin Chalet
|
414e05eed4
|
Create a DB entry for all types of tokens, rework reference tokens support and add token entry validation to the validation handler
|
6 years ago |
Kévin Chalet
|
c0bdb5ef56
|
Update Arcade and replace the netcoreapp3.0 TFMs by netcoreapp3.1
|
6 years ago |
Kévin Chalet
|
fb92acbdaf
|
Replace OpenIddictApplicationManager.IsConfidentialAsync()/IsPublicAsync()/IsHybridAsync() by HasClientTypeAsync()
|
6 years ago |
Kévin Chalet
|
ccaf982aeb
|
Update OpenIddictMessage.AddParameter() to throw an exception when the parameter already exists and introduce new APIs
|
6 years ago |
Kévin Chalet
|
fd63da76df
|
Allow returning custom challenge/sign-in/sign-out parameters via AuthenticationProperties.Parameters
|
6 years ago |
Kévin Chalet
|
700dc69c2e
|
Update the userinfo endpoint/validation handler to return a 401 error when the access token is missing
|
6 years ago |
Kévin Chalet
|
8b097321c3
|
Update the ValidatePrincipal handler to ensure the token type of the claims principal matches the expected type
|
6 years ago |
Kévin Chalet
|
ac5f302b01
|
Add MapInternalClaims and handle multiple public "scope" claims for backward compatibility
|
6 years ago |
Kévin Chalet
|
276a9b8a7d
|
Update OpenIddict.Validation.SystemNetHttp to use ReadAsStringAsync() and rework the samples
|
6 years ago |
Drew Fleming
|
78d14adb33
|
Reject token requests containing a code_verifier when no code_challenge is attached to the authorization code
|
6 years ago |
Kévin Chalet
|
97dffed124
|
Implement complete WWW-Authenticate response header support
|
6 years ago |
Kévin Chalet
|
dae66ef974
|
Add integration tests for the PKCE enforcement feature
|
6 years ago |
Kévin Chalet
|
a8f9e53f9d
|
Relax the relative URLs constraints and fix the Uri construction logic to correctly compute absolute URLs
|
6 years ago |
Kévin Chalet
|
d276af1742
|
Update the OpenIddict server ASP.NET Core/OWIN integration tests to run on .NET Framework 4.6.1
|
6 years ago |
Kévin Chalet
|
76a432e045
|
Port the challenge integration tests
|
6 years ago |
Kévin Chalet
|
3cbe3936bd
|
Port the sign-out integration tests and add validation to prevent sign-out from being triggered from unsupported endpoints
|
6 years ago |
Kévin Chalet
|
b2e631ccf7
|
Port the discovery endpoints integration tests
|
6 years ago |
Kévin Chalet
|
831a5b988a
|
Port the sign-in integration tests
|
6 years ago |
Kévin Chalet
|
43beb64877
|
Port the end session endpoint integration tests
|
6 years ago |
Kévin Chalet
|
a2c65979f8
|
Port the userinfo integration tests and re-enable POST support
|
6 years ago |