Kévin Chalet
|
64ade94294
|
Support multiple registrations with the same issuer/provider name and introduce client record models
|
3 years ago |
|
Kévin Chalet
|
0cf3b872b5
|
Update the client stack to handle errors returned while processing challenge and sign-out demands
|
3 years ago |
|
Kévin Chalet
|
28ec4293ef
|
Use file-scoped namespaces in the WinForms/WPF samples
|
3 years ago |
|
Kévin Chalet
|
453f577590
|
Add "sub" to the list of claims whose type is checked by ValidateFrontchannelIdentityTokenWellknownClaims/ValidateBackchannelIdentityTokenWellknownClaims
|
3 years ago |
|
Kévin Chalet
|
3bdfc20895
|
Catch exceptions thrown during the retrieval of the remote server configuration and generalize the use of OpenIddictHelpers.IsFatal()
|
3 years ago |
|
Kévin Chalet
|
4685332df5
|
Add device authorization grant support in the OpenIddict client
|
3 years ago |
|
Kévin Chalet
|
233c76b08e
|
Update OpenIddictValidationServerIntegrationConfiguration to initialize OpenIddictValidationOptions.Issuer and add new SetClientUri/SetIssuer overloads
=
|
3 years ago |
|
Kévin Chalet
|
c85fa3f774
|
Add Basecamp to the list of supported providers
|
3 years ago |
|
Kévin Chalet
|
32bd40cda8
|
Introduce a dynamic option allowing to disable userinfo validation
|
3 years ago |
|
Kévin Chalet
|
2b8211a8fc
|
Introduce dynamic options to disable nonce validation and add Dropbox to the list of supported providers
|
3 years ago |
|
Kévin Chalet
|
ff3f5efbc8
|
Allow JSON Web Keys that don't specify an explicit "use" and add Slack to the list of supported providers
|
3 years ago |
|
Kévin Chalet
|
ec1b122282
|
Allow cooperative cancellation of metadata retrieval and HTTP requests
|
3 years ago |
|
Kévin Chalet
|
4afc6a8b57
|
Add Stripe to the list of supported providers
|
3 years ago |
|
Kévin Chalet
|
9b5075e656
|
Replace the client Windows integration by a cross-platform package and add HttpListener and WebAuthenticationBroker support
|
3 years ago |
|
Kévin Chalet
|
eb1fcc82bd
|
Introduce new properties to disable token rejection and don't reject authentication demands for invalid identity token hints
|
3 years ago |
|
Kévin Chalet
|
6cfe43b3e9
|
Add native support for Windows Runtime
|
3 years ago |
|
Kévin Chalet
|
bf366075c2
|
Decorate the new APIs in OpenIddictClientService with [RequiresPreviewFeatures]
|
3 years ago |
|
Kévin Chalet
|
532a5941ec
|
Introduce Windows support for the client stack
|
3 years ago |
|
Kévin Chalet
|
62a10af526
|
Store the provider name in the state token as a private claim and update the ASP.NET Core/OWIN hosts to return it as part of the merged principal
|
3 years ago |
|
Kévin Chalet
|
6ed9eb25e1
|
Infer the redirection/post-logout redirection endpoint URIs from the redirect_uri/post_logout_redirect_uri configured in client registrations
|
3 years ago |
|
Kévin Chalet
|
3db9a7e9db
|
Require configuring a redirect_uri for interactive flows, even for non-OpenID Connect issuers
|
3 years ago |
|
Kévin Chalet
|
2a31e22277
|
Throw an exception to abort unhandled redirection/post-logout redirection requests
|
3 years ago |
|
Kévin Chalet
|
bf8abc6e6e
|
Support OpenIddictClientOptions.ClientUri/OpenIddictServerOptions.Issuer/OpenIddictValidationOptions.Issuer URIs created with DangerousDisablePathAndQueryCanonicalization=true
|
3 years ago |
|
Kévin Chalet
|
a1a0815cff
|
Add XML documentation to the dispatcher/factory/handler filter classes
|
3 years ago |
|
Kévin Chalet
|
0baa0e8399
|
Remove the unnecessary ValidateTokenContext.AuthorizationId property
|
3 years ago |
|
Kévin Chalet
|
bfa95d094a
|
Unify the token entry properties restoration logic and fix an issue affecting device codes and ASP.NET Core Data Protection
|
3 years ago |
|
Kévin Chalet
|
604889b129
|
Update ProcessChallengeContext/ProcessSignOutContext.Nonce's documentation to emphasize that nonces should be generated using a crypto-secure RNG
|
3 years ago |
|
Kévin Chalet
|
22e28fc36c
|
Add XML documentation to the dispatcher/factory/handler filter classes
|
3 years ago |
|
Kévin Chalet
|
6e0c97262d
|
Remove the unnecessary ValidateTokenContext.AuthorizationId property
|
3 years ago |
|
Kévin Chalet
|
21ccfc5e9b
|
Unify the token entry properties restoration logic and fix an issue affecting device codes and ASP.NET Core Data Protection
|
3 years ago |
|
Kévin Chalet
|
3a80a6a4f0
|
Update ProcessChallengeContext/ProcessSignOutContext.Nonce's documentation to emphasize that nonces should be generated using a crypto-secure RNG
|
3 years ago |
|
Kévin Chalet
|
d8a4451603
|
Support OpenIddictClientOptions.ClientUri/OpenIddictServerOptions.Issuer/OpenIddictValidationOptions.Issuer URIs created with DangerousDisablePathAndQueryCanonicalization=true
|
3 years ago |
|
Kévin Chalet
|
7751afd507
|
Update the order of the ResolveClientRegistrationFromStateToken handler
|
4 years ago |
|
Kévin Chalet
|
8c14d4e3e9
|
Replace references to "URL" by "URI" when resource identifiers are not required to be resource locators
|
4 years ago |
|
Kévin Chalet
|
2a987bcebe
|
Support relative redirect_uri/post_logout_redirect_uri in the client stack and revisit how OpenIddict handles URIs
|
4 years ago |
|
Kévin Chalet
|
38e52b10f3
|
Add new OpenIddictClientService overloads accepting a provider name instead of an issuer URI
|
4 years ago |
|
Kévin Chalet
|
1f2809c879
|
Add response_type=none support in the client stack and revamp the grant_type/response_type negotiation logic
|
4 years ago |
|
Kévin Chalet
|
fca788914c
|
Abort authentication demands with an explicit grant type if it's not listed as supported in the server configuration
|
4 years ago |
|
Kévin Chalet
|
d7582544b8
|
Introduce Allow*Flow() methods in the client stack to control what grant types/response types/response modes/code challenge methods are enabled
|
4 years ago |
|
Kévin Chalet
|
cc121c061d
|
Replace Portable.BouncyCastle by BouncyCastle.Cryptography
|
4 years ago |
|
Kévin Chalet
|
8717a068ad
|
Decorate advanced infrastructure types with [EditorBrowsable(EditorBrowsableState.Advanced)] or [EditorBrowsable(EditorBrowsableState.Never)]
|
4 years ago |
|
Kévin Chalet
|
828b0dbd08
|
Rework the AuthenticateWithClientCredentialsAsync()/AuthenticateWithPasswordAsync()/AuthenticateWithRefreshTokenAsync() APIs to be easier to use and more flexible
|
4 years ago |
|
Kévin Chalet
|
dca91a000e
|
Make provider options a first-class property in OpenIddictClientRegistration
|
4 years ago |
|
Kévin Chalet
|
51c09bec8a
|
Mark most of the infrastructure types as sealed
|
4 years ago |
|
Kévin Chalet
|
1846acc3da
|
Bump the .NET 7.0 SDK and dependencies to 7.0 RTM
|
4 years ago |
|
Kévin Chalet
|
efc4ff1c72
|
Rework the correlation cookie mechanism to use the nonce as the cookie name and store the request forgery protection in the cookie value
|
4 years ago |
|
Kévin Chalet
|
75b17c94f6
|
Start testing OpenIddict on .NET 7.0
|
4 years ago |
|
Kévin Chalet
|
d7fea891f0
|
Unify the instantiation of cryptographic algorithms
|
4 years ago |
|
Kévin Chalet
|
e2e2c84001
|
Bump PolySharp to 1.6.0 and decorate Uri and JSON properties/parameters with [StringSyntax]
|
4 years ago |
|
Kévin Chalet
|
7ca9be1428
|
Reference PolySharp and replace Substring() calls by the range syntax
|
4 years ago |
