Kévin Chalet
|
38e84b862d
|
Update OpenIddictParameter to offer ImmutableArray<string> conversions instead of string[] and clone JsonNode objects to guarantee immutability
|
11 months ago |
|
Kévin Chalet
|
e39c635631
|
Decorate the claim extensions with [OverloadResolutionPriority] and collection expressions for ImmutableArray<T>
|
11 months ago |
|
Kévin Chalet
|
fbad1d0727
|
Bump .NET Arcade to 9.0.0-beta.25058.5
|
11 months ago |
|
Kévin Chalet
|
42d6369910
|
Implement Pushed Authorization Requests (PAR) support and revamp the request caching feature
|
12 months ago |
|
Kévin Chalet
|
e1f729ba0b
|
Validate prompt values specified in authorization requests and update the configuration endpoint to return "prompt_values_supported"
|
1 year ago |
|
Kévin Chalet
|
d4c05e2e23
|
Rename the device, cryptography, logout and verification endpoints and the associated events/event handlers
|
1 year ago |
|
Kévin Chalet
|
02fb4414f7
|
Allow using response_type=token with PKCE when response type permissions are enforced
|
2 years ago |
|
Kévin Chalet
|
26fdb68773
|
Bump the .NET SDK to 8.0.200 and stop using collection expressions with ImmutableArray<T>
|
2 years ago |
|
Kévin Chalet
|
02cca0a42e
|
Update the entire code base to use collection expressions
|
2 years ago |
|
Kévin Chalet
|
1c382d90ba
|
Introduce application settings and support configuring token lifetimes per client
|
2 years ago |
|
Kévin Chalet
|
e53a723766
|
Enable the "plain" code challenge method by default to increase interoperability
|
3 years ago |
|
Kévin Chalet
|
ef4b0f3417
|
Add explicit System.Net.Http usings
|
3 years ago |
|
Kévin Chalet
|
eb1fcc82bd
|
Introduce new properties to disable token rejection and don't reject authentication demands for invalid identity token hints
|
3 years ago |
|
Kévin Chalet
|
773594231e
|
Prevent enabling the device authorization flow when token storage is disabled (unless the degraded mode is used)
|
3 years ago |
|
Kévin Chalet
|
bf839d8923
|
Prevent enabling the device authorization flow when token storage is disabled (unless the degraded mode is used)
|
3 years ago |
|
Kévin Chalet
|
8c14d4e3e9
|
Replace references to "URL" by "URI" when resource identifiers are not required to be resource locators
|
3 years ago |
|
Kévin Chalet
|
2a987bcebe
|
Support relative redirect_uri/post_logout_redirect_uri in the client stack and revisit how OpenIddict handles URIs
|
3 years ago |
|
Kévin Chalet
|
1f2809c879
|
Add response_type=none support in the client stack and revamp the grant_type/response_type negotiation logic
|
3 years ago |
|
Kévin Chalet
|
4ef3c51a01
|
Implement client_id support for logout requests and native id_token_hint validation for both authorization and logout requests
|
4 years ago |
|
Kévin Chalet
|
a1215728db
|
Implement "iss" support in the server stack and update the token validation logic to support issuers that don't end with a trailing slash
|
4 years ago |
|
Kévin Chalet
|
deee5e5b92
|
Update the code base to use implicit global usings
|
4 years ago |
|
Kévin Chalet
|
148a987a23
|
Update the code base to use file-scoped namespaces
|
4 years ago |
|
Kévin Chalet
|
e0c748f046
|
Introduce a simpler way to return additional parameters from the Handle*Request events that trigger a sign-in response
|
4 years ago |
|
Kévin Chalet
|
970ce43ca7
|
Allow authorization requests that don't specify response_type=code when PKCE is enforced
|
5 years ago |
|
Kévin Chalet
|
dfc57bff56
|
Add an error_uri to all the errors returned by OpenIddict
|
5 years ago |
|
Kévin Chalet
|
5293257e6e
|
Add a new option allowing to make PKCE mandatory
|
5 years ago |
|
Kévin Chalet
|
84facf0895
|
Introduce response type permissions, remove hybrid clients support and bring back none flow support
|
5 years ago |
Johann
|
ff0958ea67
|
Enable nullable reference types support in the unit/integration tests projects
|
5 years ago |
|
Kévin Chalet
|
29f88f4b43
|
Change the resource identifiers naming scheme
|
5 years ago |
|
Kévin Chalet
|
f54ba7f6dd
|
Allow built-in scope validation to be partially executed when the degraded mode is enabled
|
5 years ago |
|
Kévin Chalet
|
8085ca176b
|
Translate all the error messages into French and remove the duplicate .resx entries
|
6 years ago |
|
Kévin Chalet
|
c8215868cf
|
Rename the FunctionalTests namespace suffix to IntegrationTests
|
6 years ago |
|
Kévin Chalet
|
5da84ff95a
|
Move OpenIddictResources to the OpenIddict.Abstractions root namespace
|
6 years ago |
|
Kévin Chalet
|
66f6d80298
|
Move all the assertions and log messages to OpenIddictResources
|
6 years ago |
|
Kévin Chalet
|
8feeb8698d
|
Update the entire codebase to use IStringLocalizer/ResourceManager
|
6 years ago |
|
Kévin Chalet
|
dda225a328
|
Rename OpenIddictServerOptions.UseSlidingExpiration to DisableSlidingRefreshTokenExpiration and fix the XML documentation
|
6 years ago |
|
Kévin Chalet
|
8021c15328
|
Use the generic host builder on .NET Core 3.1
|
6 years ago |
|
Kévin Chalet
|
414e05eed4
|
Create a DB entry for all types of tokens, rework reference tokens support and add token entry validation to the validation handler
|
6 years ago |
|
Kévin Chalet
|
fb92acbdaf
|
Replace OpenIddictApplicationManager.IsConfidentialAsync()/IsPublicAsync()/IsHybridAsync() by HasClientTypeAsync()
|
6 years ago |
|
Kévin Chalet
|
dae66ef974
|
Add integration tests for the PKCE enforcement feature
|
6 years ago |
|
Kévin Chalet
|
76a432e045
|
Port the challenge integration tests
|
6 years ago |
|
Kévin Chalet
|
0214951ffc
|
Port the revocation endpoint tests and disable GET support
|
6 years ago |
|
Kévin Chalet
|
6a3afb52c4
|
Make the supported code_challenge_methods configurable via advanced options and disable plain by default
|
6 years ago |
|
Kévin Chalet
|
eb35cbefb7
|
Port the token endpoint integration tests
|
6 years ago |
|
Kévin Chalet
|
5361c66be1
|
Add integration tests for the authorization endpoint
|
6 years ago |
