Kévin Chalet
|
8feeb8698d
|
Update the entire codebase to use IStringLocalizer/ResourceManager
|
6 years ago |
|
Kévin Chalet
|
0f42586959
|
Revamp the encryption/signing credentials registration mechanism
|
6 years ago |
|
Kévin Chalet
|
dda225a328
|
Rename OpenIddictServerOptions.UseSlidingExpiration to DisableSlidingRefreshTokenExpiration and fix the XML documentation
|
6 years ago |
|
Kévin Chalet
|
8276843268
|
Move the feature constants from Directory.Build.props to Directory.Build.targets to be able to use TargetFrameworkIdentifier-based conditions
|
6 years ago |
|
Kévin Chalet
|
767dfe61e9
|
Cross-compile more projects for .NET Framework 4.6.1 to reduce the dependencies graph
|
6 years ago |
|
Kévin Chalet
|
beb6b3e92b
|
Make authorization codes reference tokens by default, split UseReferenceTokens into two settings and allow the Data Protection to fall back to JWT for specific token types
|
6 years ago |
|
Kévin Chalet
|
5169c28d97
|
Bump Wilson to 6.7.0 and use the new SecurityKey.IsSupportedAlgorithm() API
|
6 years ago |
|
Kévin Chalet
|
ed0dc56487
|
Reunify the custom and built-in handlers collections to avoid computing the collections per-request
|
6 years ago |
|
Kévin Chalet
|
2be6d808cf
|
Enable central package versions management
|
6 years ago |
Darthruneis
|
f9d9762a20
|
Port OpenIddictServerBuilderTests from OpenIddict 2.x
|
6 years ago |
|
Kévin Chalet
|
9ee38c0efb
|
Introduce the first experimental OpenIddict 3.0 bits and move the build infrastructure to Arcade
|
7 years ago |
|
Kévin Chalet
|
8ff0e97586
|
Add a new option allowing to make PKCE mandatory
|
7 years ago |
|
Kévin Chalet
|
ecd6bab19d
|
Remove the .Internal namespace and make the pubternal types public or internal
|
7 years ago |
Akhan Zhakiyanov
|
002eeb8dd3
|
Update validation log message for applications without logout permission
|
7 years ago |
|
Kévin Chalet
|
d668c82d8b
|
Use SuppressChildValidationMetadataProvider to exclude OpenIdConnectRequest/OpenIdConnectResponse from child validation
|
8 years ago |
|
Kévin Chalet
|
2bbd153f40
|
Update OpenIddictServerConfiguration to validate the default schemes and ensure they don't point to the OpenIddict server handler
|
8 years ago |
|
Kévin Chalet
|
e7c4942777
|
Move the scope permissions validation logic to ensure it also applies to public clients
|
8 years ago |
|
Kévin Chalet
|
041a83847a
|
Introduce AuthenticationTicket extensions and move the EntityFramework/EntityFrameworkCore extensions to a better namespace
|
8 years ago |
|
Kévin Chalet
|
55f358689c
|
Introduce built-in entity caching support in the managers and allow disabling the additional checks
|
8 years ago |
|
Kévin Chalet
|
84055f634c
|
Move the handlers registration logic to OpenIddictServerConfiguration/OpenIddictValidationConfiguration
|
8 years ago |
|
Kévin Chalet
|
978c398d7d
|
Introduce new constants
|
8 years ago |
|
Kévin Chalet
|
9a06891507
|
Tweak the events model to force user-defined handlers to explicitly determine whether other handlers can be invoked
|
8 years ago |
|
Kévin Chalet
|
aa79131335
|
Introduce OpenIddictServerBuilder.SetRequestCachingPolicy()
|
8 years ago |
|
Kévin Chalet
|
bbf4c42057
|
Move the server and validation components to an .Internal namespace
|
8 years ago |
|
Kévin Chalet
|
ab34bdae2e
|
Update AddServer()/AddValidation() to throw an exception when the OpenID Connect server/OAuth validation handler are already registered and to prevent custom providers
|
8 years ago |
|
Kévin Chalet
|
a65deb4463
|
Update OpenIddictServerBuilder to allow calling SetAccessTokenLifetime/SetAuthorizationCodeLifetime/SetIdentityTokenLifetime/SetRefreshTokenLifetime with null values
|
8 years ago |
|
Kévin Chalet
|
b5c9798e17
|
Introduce new unit tests for the core/server/validation builders and extensions
|
8 years ago |
|
Kévin Chalet
|
99cebde3c3
|
Fix ApplyAuthorizationResponse/ApplyLogoutResponse to work with null requests
|
8 years ago |
|
Kévin Chalet
|
62ea117682
|
Store the token/authorization identifiers in new internal authentication properties
|
8 years ago |
|
Kévin Chalet
|
e9c796ca37
|
Throw an InvalidOperationException when SignIn() is called with an unauthenticated ClaimsIdentity
|
8 years ago |
|
Kévin Chalet
|
e7abdab60d
|
Update the token endpoint validation logic to reject scope=offline_access requests if the client application is not allowed to use the refresh token flow
|
8 years ago |
|
Kévin Chalet
|
5c40217da4
|
Replace the application provider/events by a new notifications-based system
|
8 years ago |
|
Kévin Chalet
|
7e10bedb73
|
Remove implicit permissions and introduce OpenIddictServerBuilder.IgnoreEndpointPermissions()/IgnoreGrantTypePermissions()/IgnoreScopePermissions()
|
8 years ago |
|
Kévin Chalet
|
8f9c6f109d
|
Enable scope validation and reject unidentified token/revocation requests by default
|
8 years ago |
|
Kévin Chalet
|
0e5b0cec66
|
Update exception messages to point to the new OpenIddict services APIs
|
8 years ago |
|
Kévin Chalet
|
aa89d0c215
|
Automatically validate the authorization associated with authorization codes/refresh tokens
|
8 years ago |
|
Kévin Chalet
|
d848dc8529
|
Update common.props to build portable debug symbols
|
8 years ago |
|
Kévin Chalet
|
f17db7496d
|
Update HandleConfigurationRequest to use the new HandleConfigurationRequestContext.Claims property
|
8 years ago |
|
Kévin Chalet
|
91d5592d55
|
Migrate to the latest aspnet-contrib packages
|
8 years ago |
|
Kévin Chalet
|
33af961b0c
|
Rename options.AddMvcBinders() to options.UseMvc() and add an option allowing to disable binding exceptions
|
8 years ago |
|
Kévin Chalet
|
32fe4b0ae7
|
Remove OpenIddict.Models/OpenIddict.Stores and move to per-provider models
|
8 years ago |
|
Kévin Chalet
|
267a89a08c
|
Remove the non-standard external_providers_supported node from the discovery document
|
8 years ago |
|
Kévin Chalet
|
943e9578f3
|
Introduce OpenIddictServerBuilder.RegisterProvider() to allow registering a custom OpenID Connect server provider
|
8 years ago |
|
Kévin Chalet
|
92524d4371
|
Introduce OpenIddictServerDefaults and OpenIddictValidationDefaults
|
8 years ago |
|
Kévin Chalet
|
1c040c8279
|
Allow confidential applications to retrieve an identity token from the authorization endpoint for compatibility purposes
|
8 years ago |
|
Kévin Chalet
|
7bca2c06ed
|
Revamp the OpenIddict services registration process and introduce new builders to separate the server APIs from the core APIs
|
8 years ago |
|
Kévin Chalet
|
ef139e23d1
|
Move the default stores to OpenIddict.Stores and the server components to OpenIddict.Server
|
8 years ago |
