Kévin Chalet
|
376cbad1e5
|
Bump third-party dependencies
|
6 years ago |
|
Kévin Chalet
|
b6766e480e
|
Remove the parameter-less HasAudience()/HasPresenter()/HasResource()/HasScope() extensions
|
6 years ago |
|
Kévin Chalet
|
2f3004a66b
|
Update ValidateIdentityModelToken to support additional exceptions
|
6 years ago |
|
Kévin Chalet
|
b19fdffea4
|
React to nullable annotations changes in .NET 5.0 and update OpenIddictParameter.ToString() to use the invariant culture
|
6 years ago |
|
Kévin Chalet
|
de1b3b4477
|
Remove localized error descriptions support
|
6 years ago |
|
Kévin Chalet
|
c44a633567
|
Update OpenIddictMessage to ignore parameters with empty names
|
6 years ago |
|
Kévin Chalet
|
127e68c6d1
|
Stop adding a jti claim by default
|
6 years ago |
|
Kévin Chalet
|
a6dd8cf031
|
Revamp refresh tokens
|
6 years ago |
|
Kévin Chalet
|
f9f9c599e9
|
Use the new SecurityTokenDescriptor.TokenType property
|
6 years ago |
|
Kévin Chalet
|
254be824c9
|
Introduce new properties in ProcessSignInContext to allow for more control over the token creation process
|
6 years ago |
|
Kévin Chalet
|
29f88f4b43
|
Change the resource identifiers naming scheme
|
6 years ago |
|
Kévin Chalet
|
3841f32f17
|
Update the entire codebase to use is null/is not null
|
6 years ago |
|
Kévin Chalet
|
7d1664e518
|
Update the ConvertReferenceUserCode handler to generate a new user code when a collision is detected
|
6 years ago |
|
Kévin Chalet
|
f84a10270e
|
Revamp the authorizations/tokens pruning mechanism
|
6 years ago |
|
Kévin Chalet
|
8085ca176b
|
Translate all the error messages into French and remove the duplicate .resx entries
|
6 years ago |
|
Kévin Chalet
|
4e309929b5
|
Don't revoke the authorization when detecting an authorization code/refresh token replay
|
6 years ago |
|
Kévin Chalet
|
de5485ceee
|
Add nullable annotations to OpenIddict.Server, OpenIddict.Server.AspNetCore, OpenIddict.Server.Owin and OpenIddict.Server.DataProtection
|
6 years ago |
|
Kévin Chalet
|
5da84ff95a
|
Move OpenIddictResources to the OpenIddict.Abstractions root namespace
|
6 years ago |
|
Kévin Chalet
|
7ff8826eee
|
Fix RedeemTokenEntry to use SR.ID3019 instead of a hardcoded string
|
6 years ago |
|
Kévin Chalet
|
66f6d80298
|
Move all the assertions and log messages to OpenIddictResources
|
6 years ago |
|
Kévin Chalet
|
8feeb8698d
|
Update the entire codebase to use IStringLocalizer/ResourceManager
|
6 years ago |
|
Kévin Chalet
|
0f42586959
|
Revamp the encryption/signing credentials registration mechanism
|
6 years ago |
|
Kévin Chalet
|
dda225a328
|
Rename OpenIddictServerOptions.UseSlidingExpiration to DisableSlidingRefreshTokenExpiration and fix the XML documentation
|
6 years ago |
|
Kévin Chalet
|
682af18392
|
Update the TypeValidator custom delegate to avoid throwing when the JWT token has no "typ" header but contains a "token_usage" claim
|
6 years ago |
|
Kévin Chalet
|
675037fe6d
|
Revamp the access token extraction logic used in the validation stack
|
6 years ago |
|
Kévin Chalet
|
6dce31567c
|
Update ValidateIdentityModelToken and ValidateDataProtectionToken to immediately return an error when the token can be read but is invalid
|
6 years ago |
|
Kévin Chalet
|
dad788a936
|
Support the long application/at+jwt and application/jwt forms
|
6 years ago |
|
Kévin Chalet
|
beb6b3e92b
|
Make authorization codes reference tokens by default, split UseReferenceTokens into two settings and allow the Data Protection to fall back to JWT for specific token types
|
6 years ago |
|
Kévin Chalet
|
ed0dc56487
|
Reunify the custom and built-in handlers collections to avoid computing the collections per-request
|
6 years ago |
|
Kévin Chalet
|
fb406560c6
|
Normalize multiple public scope claims to a single spare-separated claim
|
6 years ago |
|
Kévin Chalet
|
bbeb29726f
|
Avoid overriding the issuer/signing keys/decryption keys set in the token validation parameters
|
6 years ago |
|
Kévin Chalet
|
77ca35a53f
|
Use private claims for the token creation/expiration dates and introduce new Data Protection authentication properties
|
6 years ago |
|
Kévin Chalet
|
949d5e39d4
|
Fix an issue with the status code pages middleware integration and tweak the ASP.NET Core hosts to use AuthenticateResult.NoResult()
|
6 years ago |
|
Kévin Chalet
|
2ac5b4b884
|
Update the validation OWIN integration to support active authentication and rework how errors are returned for API requests
|
6 years ago |
|
Kévin Chalet
|
f81f8fc7dd
|
Introduce introspection support and revamp the events model used by the validation handler
|
6 years ago |
|
Kévin Chalet
|
be23e18023
|
Leverage IdentityModel's new TypeValidator mechanism to allow validating JWT tokens issued by OpenIddict 1.x/2.x
|
6 years ago |
|
Kévin Chalet
|
414e05eed4
|
Create a DB entry for all types of tokens, rework reference tokens support and add token entry validation to the validation handler
|
6 years ago |
|
Kévin Chalet
|
700dc69c2e
|
Update the userinfo endpoint/validation handler to return a 401 error when the access token is missing
|
6 years ago |
|
Kévin Chalet
|
8b097321c3
|
Update the ValidatePrincipal handler to ensure the token type of the claims principal matches the expected type
|
6 years ago |
|
Kévin Chalet
|
ac5f302b01
|
Add MapInternalClaims and handle multiple public "scope" claims for backward compatibility
|
6 years ago |
|
Kévin Chalet
|
560a44514b
|
Automatically add a client_id claim to access tokens and use "JWT" instead of "jwt" for the identity tokens' typ header
|
6 years ago |
|
Kévin Chalet
|
97dffed124
|
Implement complete WWW-Authenticate response header support
|
6 years ago |
|
Kévin Chalet
|
a8f9e53f9d
|
Relax the relative URLs constraints and fix the Uri construction logic to correctly compute absolute URLs
|
6 years ago |
|
Kévin Chalet
|
e4b2150f23
|
Enforce JWT access token encryption by default
|
6 years ago |
IgorHrabrov
|
201daf88ac
|
Refactor the OpenIddict primitives extensions class
|
6 years ago |
|
Kévin Chalet
|
76a432e045
|
Port the challenge integration tests
|
6 years ago |
|
Kévin Chalet
|
3cbe3936bd
|
Port the sign-out integration tests and add validation to prevent sign-out from being triggered from unsupported endpoints
|
6 years ago |
|
Kévin Chalet
|
831a5b988a
|
Port the sign-in integration tests
|
6 years ago |
|
Kévin Chalet
|
6a3afb52c4
|
Make the supported code_challenge_methods configurable via advanced options and disable plain by default
|
6 years ago |
|
Kévin Chalet
|
a25907cd52
|
Automatically map the scope/azp access token claims to their OpenIddict private claims equivalents
|
6 years ago |
