350 Commits (3a7d09ecff68c4b68f4d80438686c770557cb8c1)

Author SHA1 Message Date
Kévin Chalet 91a68c161a Implement client authentication support for the PAR endpoint 8 months ago
Kévin Chalet 78ba0a3dec Implement built-in audiences and resources indicators validation 8 months ago
Kévin Chalet 9a74ea5e4f Remove unnecessary view models 8 months ago
Kévin Chalet 8c94cb7c13 Implement OAuth 2.0 Token Exchange support 8 months ago
Kévin Chalet b33dad15f3 Implement new audience and presenter validation logic as part of the ValidateToken event 8 months ago
Kévin Chalet 36424f84b3 Improve the WWW-Authenticate parsing logic 8 months ago
Kévin Chalet bcfe2f05d3 Update OpenIddictParameter to return empty immutable arrays instead of uninitialized instances 9 months ago
Kévin Chalet ff57da7ec0 Add AddClaim(s)/SetClaim(s) extensions accepting JsonNode instances 9 months ago
Kévin Chalet f8553a9ee7 Update the MapNonStandardResponseParameters userinfo handler to avoid using OpenIddictParameter.GetNamedParameters() 9 months ago
Kévin Chalet fab284f5d5 Update GenerateTokenContext to expose SecurityTokenDescriptor and adopt the new URI-style token type identifiers in the client, core, server and validation stacks 10 months ago
Kévin Chalet 1beb7ab4c9 Use Uri.TryCreate() to build the base and request URIs used by OpenIddict 11 months ago
Kévin Chalet 5b56eddc0c Remove all the store resolvers and mark all the assemblies as trimming/Native AOT-compatible 11 months ago
Kévin Chalet 342b7651cf Set NuGetAuditMode to "all" to enable vulnerable transitive dependencies warnings 11 months ago
Kévin Chalet bef75c4f56 Use the CreateAsyncScope() helper to avoid having to manually cast IServiceProvider to IAsyncDisposable 11 months ago
Kévin Chalet 38e84b862d Update OpenIddictParameter to offer ImmutableArray<string> conversions instead of string[] and clone JsonNode objects to guarantee immutability 11 months ago
Kévin Chalet e39c635631 Decorate the claim extensions with [OverloadResolutionPriority] and collection expressions for ImmutableArray<T> 11 months ago
Kévin Chalet b17b3fe235 Update the .NET Framework and .NET Standard TFMs to target ASP.NET Core/Entity Framework Core 2.3 and .NET Extensions 8.0 11 months ago
Kévin Chalet fbad1d0727 Bump .NET Arcade to 9.0.0-beta.25058.5 11 months ago
Kévin Chalet bdf3b56db8 Do not reject end session requests that don't include an explicit client_id when request caching is used 12 months ago
Kévin Chalet feedeacae7 Do not reject end session requests that don't include an explicit client_id when request caching is used 12 months ago
Kévin Chalet 42d6369910 Implement Pushed Authorization Requests (PAR) support and revamp the request caching feature 12 months ago
Kévin Chalet 11666c41bd Update OpenIddictMessage.ToString() to redact custom parameters whose name ends with "_token" 1 year ago
Kévin Chalet 878569cd3f Update the ASP.NET Core/OWIN hosts to support returning authentication properties for errored requests 1 year ago
Kévin Chalet 6c6c9ed1db Bump MongoDB to 3.0.0 and strong-name the MongoDB packages 1 year ago
Kévin Chalet f5721d0c2c Rename the GetPrompts() and HasPrompt() extensions 1 year ago
Kévin Chalet e1f729ba0b Validate prompt values specified in authorization requests and update the configuration endpoint to return "prompt_values_supported" 1 year ago
Kévin Chalet 9f613b1332 Implement a new client authentication method negotiation logic and introduce mTLS support in the client stack 1 year ago
Kévin Chalet ef2e02ee23 Introduce a new .NET 9.0 TFM and use the new X509CertificateLoader API 1 year ago
Kévin Chalet 3662b179dc Rename event handlers and event properties that whose endpoint name has changed 1 year ago
Kévin Chalet d4c05e2e23 Rename the device, cryptography, logout and verification endpoints and the associated events/event handlers 1 year ago
Kévin Chalet f6975e6506 Update OpenIddictParameter to return "true" and "false" for string/string array conversions 2 years ago
Kévin Chalet 02fb4414f7 Allow using response_type=token with PKCE when response type permissions are enforced 2 years ago
Jan Trejbal 2475ed3c1a
Use System.TimeProvider on .NET 8.0+ 2 years ago
Kévin Chalet 38d87b2945 Allow using unique JSON_ARRAY claims to represent arrays of strings 2 years ago
Kévin Chalet b32eb8c0a2 Make user codes fully configurable and remove token length assumptions 2 years ago
Kévin Chalet 7aac102830 Add Dailymotion to the list of supported providers 2 years ago
Kévin Chalet 26fdb68773 Bump the .NET SDK to 8.0.200 and stop using collection expressions with ImmutableArray<T> 2 years ago
Kévin Chalet cf3e960055 Abort sign-in demands whose principal contains a standard claim with an invalid claim value type 2 years ago
Kévin Chalet 05ab8b7428 Update the ClaimsIdentity/ClaimsPrincipal.GetClaim() extension to throw an exception when multiple claims of the same type exist 2 years ago
Kévin Chalet 61f036fd59
Introduce a faster way to revoke all the tokens associated with an authorization and use bulk operations when available 2 years ago
Kévin Chalet 0bf4a433bd Add Zoom to the list of supported providers 2 years ago
Kévin Chalet 517b1b6324 Add Zoom to the list of supported providers 2 years ago
Kévin Chalet f36d9b5471 Remove unnecessary usings 2 years ago
Kévin Chalet 02cca0a42e Update the entire code base to use collection expressions 2 years ago
Kévin Chalet 746f38432c Make the supported subject types configurable via OpenIddictServerOptions.SubjectTypes 2 years ago
Kévin Chalet 00fa3f3494 Allow configuring the supported client authentication methods and use invalid_client for client assertion errors 2 years ago
Kévin Chalet d6c9c0b35c Add client assertions support to the server stack 2 years ago
Kévin Chalet a941660a41 Move the client authentication logic to the ProcessAuthentication event 2 years ago
Kévin Chalet 1c382d90ba Introduce application settings and support configuring token lifetimes per client 2 years ago
Kévin Chalet 4af3f8dc6f Introduce support for application types 2 years ago