Kévin Chalet
|
91a68c161a
|
Implement client authentication support for the PAR endpoint
|
8 months ago |
Kévin Chalet
|
78ba0a3dec
|
Implement built-in audiences and resources indicators validation
|
8 months ago |
Kévin Chalet
|
8c94cb7c13
|
Implement OAuth 2.0 Token Exchange support
|
8 months ago |
Kévin Chalet
|
b33dad15f3
|
Implement new audience and presenter validation logic as part of the ValidateToken event
|
8 months ago |
Kévin Chalet
|
36424f84b3
|
Improve the WWW-Authenticate parsing logic
|
8 months ago |
Kévin Chalet
|
fab284f5d5
|
Update GenerateTokenContext to expose SecurityTokenDescriptor and adopt the new URI-style token type identifiers in the client, core, server and validation stacks
|
10 months ago |
Kévin Chalet
|
5b56eddc0c
|
Remove all the store resolvers and mark all the assemblies as trimming/Native AOT-compatible
|
11 months ago |
Kévin Chalet
|
38e84b862d
|
Update OpenIddictParameter to offer ImmutableArray<string> conversions instead of string[] and clone JsonNode objects to guarantee immutability
|
11 months ago |
Kévin Chalet
|
e39c635631
|
Decorate the claim extensions with [OverloadResolutionPriority] and collection expressions for ImmutableArray<T>
|
11 months ago |
Kévin Chalet
|
b17b3fe235
|
Update the .NET Framework and .NET Standard TFMs to target ASP.NET Core/Entity Framework Core 2.3 and .NET Extensions 8.0
|
11 months ago |
Kévin Chalet
|
fbad1d0727
|
Bump .NET Arcade to 9.0.0-beta.25058.5
|
11 months ago |
Kévin Chalet
|
bdf3b56db8
|
Do not reject end session requests that don't include an explicit client_id when request caching is used
|
12 months ago |
Kévin Chalet
|
feedeacae7
|
Do not reject end session requests that don't include an explicit client_id when request caching is used
|
12 months ago |
Kévin Chalet
|
42d6369910
|
Implement Pushed Authorization Requests (PAR) support and revamp the request caching feature
|
12 months ago |
Kévin Chalet
|
e1f729ba0b
|
Validate prompt values specified in authorization requests and update the configuration endpoint to return "prompt_values_supported"
|
1 year ago |
Kévin Chalet
|
ef2e02ee23
|
Introduce a new .NET 9.0 TFM and use the new X509CertificateLoader API
|
1 year ago |
Kévin Chalet
|
d4c05e2e23
|
Rename the device, cryptography, logout and verification endpoints and the associated events/event handlers
|
1 year ago |
Kévin Chalet
|
02fb4414f7
|
Allow using response_type=token with PKCE when response type permissions are enforced
|
2 years ago |
Kévin Chalet
|
38d87b2945
|
Allow using unique JSON_ARRAY claims to represent arrays of strings
|
2 years ago |
Kévin Chalet
|
26fdb68773
|
Bump the .NET SDK to 8.0.200 and stop using collection expressions with ImmutableArray<T>
|
2 years ago |
Kévin Chalet
|
cf3e960055
|
Abort sign-in demands whose principal contains a standard claim with an invalid claim value type
|
2 years ago |
Kévin Chalet
|
61f036fd59
|
Introduce a faster way to revoke all the tokens associated with an authorization and use bulk operations when available
|
2 years ago |
Kévin Chalet
|
0bf4a433bd
|
Add Zoom to the list of supported providers
|
2 years ago |
Kévin Chalet
|
517b1b6324
|
Add Zoom to the list of supported providers
|
2 years ago |
Kévin Chalet
|
f36d9b5471
|
Remove unnecessary usings
|
2 years ago |
Kévin Chalet
|
02cca0a42e
|
Update the entire code base to use collection expressions
|
2 years ago |
Kévin Chalet
|
746f38432c
|
Make the supported subject types configurable via OpenIddictServerOptions.SubjectTypes
|
2 years ago |
Kévin Chalet
|
00fa3f3494
|
Allow configuring the supported client authentication methods and use invalid_client for client assertion errors
|
2 years ago |
Kévin Chalet
|
d6c9c0b35c
|
Add client assertions support to the server stack
|
2 years ago |
Kévin Chalet
|
a941660a41
|
Move the client authentication logic to the ProcessAuthentication event
|
2 years ago |
Kévin Chalet
|
1c382d90ba
|
Introduce application settings and support configuring token lifetimes per client
|
2 years ago |
Kévin Chalet
|
4af3f8dc6f
|
Introduce support for application types
|
2 years ago |
Kévin Chalet
|
61e6fd95c3
|
Centralize the target frameworks in Directory.Build.props
|
3 years ago |
Kévin Chalet
|
e53a723766
|
Enable the "plain" code challenge method by default to increase interoperability
|
3 years ago |
Kévin Chalet
|
ef4b0f3417
|
Add explicit System.Net.Http usings
|
3 years ago |
Kévin Chalet
|
4685332df5
|
Add device authorization grant support in the OpenIddict client
|
3 years ago |
Kévin Chalet
|
eb1fcc82bd
|
Introduce new properties to disable token rejection and don't reject authentication demands for invalid identity token hints
|
3 years ago |
Kévin Chalet
|
6cfe43b3e9
|
Add native support for Windows Runtime
|
3 years ago |
Kévin Chalet
|
773594231e
|
Prevent enabling the device authorization flow when token storage is disabled (unless the degraded mode is used)
|
3 years ago |
Kévin Chalet
|
bfa95d094a
|
Unify the token entry properties restoration logic and fix an issue affecting device codes and ASP.NET Core Data Protection
|
3 years ago |
Kévin Chalet
|
bf839d8923
|
Prevent enabling the device authorization flow when token storage is disabled (unless the degraded mode is used)
|
3 years ago |
Kévin Chalet
|
21ccfc5e9b
|
Unify the token entry properties restoration logic and fix an issue affecting device codes and ASP.NET Core Data Protection
|
3 years ago |
Kévin Chalet
|
8c14d4e3e9
|
Replace references to "URL" by "URI" when resource identifiers are not required to be resource locators
|
3 years ago |
Kévin Chalet
|
2a987bcebe
|
Support relative redirect_uri/post_logout_redirect_uri in the client stack and revisit how OpenIddict handles URIs
|
3 years ago |
Kévin Chalet
|
1f2809c879
|
Add response_type=none support in the client stack and revamp the grant_type/response_type negotiation logic
|
3 years ago |
Kévin Chalet
|
ffd47678fc
|
Reject authorization code/device authorization code grant requests containing a "scope" parameter
|
3 years ago |
Kévin Chalet
|
779a8524e4
|
Fix global.json to reference Arcade 7.0.0-beta.22513.4
|
3 years ago |
Kévin Chalet
|
75b17c94f6
|
Start testing OpenIddict on .NET 7.0
|
3 years ago |
Kévin Chalet
|
7ca9be1428
|
Reference PolySharp and replace Substring() calls by the range syntax
|
3 years ago |
Kévin Chalet
|
ac5e3dd62b
|
Update the System.Net.Http integrations to support sending empty parameters in GET and POST requests
|
3 years ago |