153 Commits (23dc5daafe78f05deedf0ea87a6041866600ddce)

Author SHA1 Message Date
Kévin Chalet 29f88f4b43 Change the resource identifiers naming scheme 6 years ago
Kévin Chalet 0b629b3dbd Replace JsonSerializer.Serialize() by Utf8JsonWriter and JsonSerializer.Deserialize() by JsonDocument 6 years ago
Kévin Chalet 3841f32f17 Update the entire codebase to use is null/is not null 6 years ago
Kévin Chalet f54ba7f6dd Allow built-in scope validation to be partially executed when the degraded mode is enabled 6 years ago
Kévin Chalet f84a10270e Revamp the authorizations/tokens pruning mechanism 6 years ago
Kévin Chalet 22f5632afe Remove authorization code/identity token introspection/revocation support 6 years ago
Kévin Chalet 8085ca176b Translate all the error messages into French and remove the duplicate .resx entries 6 years ago
Kévin Chalet 4e309929b5 Don't revoke the authorization when detecting an authorization code/refresh token replay 6 years ago
Kévin Chalet 5f164309cd Automatically disable the incompatible options when enabling the degraded mode 6 years ago
Kévin Chalet c8215868cf Rename the FunctionalTests namespace suffix to IntegrationTests 6 years ago
Kévin Chalet 5da84ff95a Move OpenIddictResources to the OpenIddict.Abstractions root namespace 6 years ago
Kévin Chalet 66f6d80298 Move all the assertions and log messages to OpenIddictResources 6 years ago
Kévin Chalet 8feeb8698d Update the entire codebase to use IStringLocalizer/ResourceManager 6 years ago
Kévin Chalet dda225a328 Rename OpenIddictServerOptions.UseSlidingExpiration to DisableSlidingRefreshTokenExpiration and fix the XML documentation 6 years ago
Kévin Chalet 8276843268
Move the feature constants from Directory.Build.props to Directory.Build.targets to be able to use TargetFrameworkIdentifier-based conditions 6 years ago
Kévin Chalet e0909c87a8 Update the logout endpoint logic to not trigger a sign-out response by default and reword some of the exception messages 6 years ago
Martin Costello a92f48dd1c
Send integration test logs to xUnit output 6 years ago
Kévin Chalet 767dfe61e9 Cross-compile more projects for .NET Framework 4.6.1 to reduce the dependencies graph 6 years ago
Kévin Chalet beb6b3e92b
Make authorization codes reference tokens by default, split UseReferenceTokens into two settings and allow the Data Protection to fall back to JWT for specific token types 6 years ago
Kévin Chalet 5169c28d97 Bump Wilson to 6.7.0 and use the new SecurityKey.IsSupportedAlgorithm() API 6 years ago
Kévin Chalet 2be6d808cf Enable central package versions management 6 years ago
Kévin Chalet 4a2dedfd8c Remove the System.Linq.Async dependency from OpenIddict.Core 6 years ago
Kévin Chalet 45d90453c8 Fix the ProcessHostRedirectionResponse handler to be invoked after ProcessRedirectionResponse 6 years ago
Kévin Chalet 39a75284cc Enable FxCop code analysis 6 years ago
Kévin Chalet fb406560c6 Normalize multiple public scope claims to a single spare-separated claim 6 years ago
Kévin Chalet 8021c15328
Use the generic host builder on .NET Core 3.1 6 years ago
Kévin Chalet 77ca35a53f
Use private claims for the token creation/expiration dates and introduce new Data Protection authentication properties 6 years ago
Kévin Chalet 2ac5b4b884 Update the validation OWIN integration to support active authentication and rework how errors are returned for API requests 6 years ago
Kévin Chalet f81f8fc7dd Introduce introspection support and revamp the events model used by the validation handler 6 years ago
Kévin Chalet be23e18023 Leverage IdentityModel's new TypeValidator mechanism to allow validating JWT tokens issued by OpenIddict 1.x/2.x 6 years ago
Kévin Chalet 414e05eed4 Create a DB entry for all types of tokens, rework reference tokens support and add token entry validation to the validation handler 6 years ago
Kévin Chalet c0bdb5ef56 Update Arcade and replace the netcoreapp3.0 TFMs by netcoreapp3.1 6 years ago
Kévin Chalet fb92acbdaf Replace OpenIddictApplicationManager.IsConfidentialAsync()/IsPublicAsync()/IsHybridAsync() by HasClientTypeAsync() 6 years ago
Kévin Chalet ccaf982aeb Update OpenIddictMessage.AddParameter() to throw an exception when the parameter already exists and introduce new APIs 6 years ago
Kévin Chalet fd63da76df Allow returning custom challenge/sign-in/sign-out parameters via AuthenticationProperties.Parameters 6 years ago
Kévin Chalet 700dc69c2e Update the userinfo endpoint/validation handler to return a 401 error when the access token is missing 6 years ago
Kévin Chalet 8b097321c3 Update the ValidatePrincipal handler to ensure the token type of the claims principal matches the expected type 6 years ago
Kévin Chalet ac5f302b01 Add MapInternalClaims and handle multiple public "scope" claims for backward compatibility 6 years ago
Kévin Chalet 276a9b8a7d Update OpenIddict.Validation.SystemNetHttp to use ReadAsStringAsync() and rework the samples 6 years ago
Drew Fleming 78d14adb33 Reject token requests containing a code_verifier when no code_challenge is attached to the authorization code 6 years ago
Kévin Chalet 97dffed124 Implement complete WWW-Authenticate response header support 6 years ago
Kévin Chalet dae66ef974 Add integration tests for the PKCE enforcement feature 6 years ago
Kévin Chalet a8f9e53f9d Relax the relative URLs constraints and fix the Uri construction logic to correctly compute absolute URLs 6 years ago
Kévin Chalet d276af1742 Update the OpenIddict server ASP.NET Core/OWIN integration tests to run on .NET Framework 4.6.1 6 years ago
Kévin Chalet 76a432e045 Port the challenge integration tests 6 years ago
Kévin Chalet 3cbe3936bd Port the sign-out integration tests and add validation to prevent sign-out from being triggered from unsupported endpoints 6 years ago
Kévin Chalet b2e631ccf7 Port the discovery endpoints integration tests 6 years ago
Kévin Chalet 831a5b988a Port the sign-in integration tests 6 years ago
Kévin Chalet 43beb64877 Port the end session endpoint integration tests 6 years ago
Kévin Chalet a2c65979f8 Port the userinfo integration tests and re-enable POST support 6 years ago