Kévin Chalet
|
a7f94c7744
|
Use Uri.TryCreate() to build the base and request URIs used by OpenIddict
|
11 months ago |
Kévin Chalet
|
bdf3b56db8
|
Do not reject end session requests that don't include an explicit client_id when request caching is used
|
12 months ago |
Kévin Chalet
|
42d6369910
|
Implement Pushed Authorization Requests (PAR) support and revamp the request caching feature
|
12 months ago |
Kévin Chalet
|
11666c41bd
|
Update OpenIddictMessage.ToString() to redact custom parameters whose name ends with "_token"
|
1 year ago |
Kévin Chalet
|
878569cd3f
|
Update the ASP.NET Core/OWIN hosts to support returning authentication properties for errored requests
|
1 year ago |
Kévin Chalet
|
6c6c9ed1db
|
Bump MongoDB to 3.0.0 and strong-name the MongoDB packages
|
1 year ago |
Kévin Chalet
|
f5721d0c2c
|
Rename the GetPrompts() and HasPrompt() extensions
|
1 year ago |
Kévin Chalet
|
e1f729ba0b
|
Validate prompt values specified in authorization requests and update the configuration endpoint to return "prompt_values_supported"
|
1 year ago |
Kévin Chalet
|
9f613b1332
|
Implement a new client authentication method negotiation logic and introduce mTLS support in the client stack
|
1 year ago |
Kévin Chalet
|
ef2e02ee23
|
Introduce a new .NET 9.0 TFM and use the new X509CertificateLoader API
|
1 year ago |
Kévin Chalet
|
3662b179dc
|
Rename event handlers and event properties that whose endpoint name has changed
|
1 year ago |
Kévin Chalet
|
d4c05e2e23
|
Rename the device, cryptography, logout and verification endpoints and the associated events/event handlers
|
1 year ago |
Kévin Chalet
|
f6975e6506
|
Update OpenIddictParameter to return "true" and "false" for string/string array conversions
|
2 years ago |
Kévin Chalet
|
02fb4414f7
|
Allow using response_type=token with PKCE when response type permissions are enforced
|
2 years ago |
Jan Trejbal
|
2475ed3c1a
|
Use System.TimeProvider on .NET 8.0+
|
2 years ago |
Kévin Chalet
|
38d87b2945
|
Allow using unique JSON_ARRAY claims to represent arrays of strings
|
2 years ago |
Kévin Chalet
|
b32eb8c0a2
|
Make user codes fully configurable and remove token length assumptions
|
2 years ago |
Kévin Chalet
|
7aac102830
|
Add Dailymotion to the list of supported providers
|
2 years ago |
Kévin Chalet
|
26fdb68773
|
Bump the .NET SDK to 8.0.200 and stop using collection expressions with ImmutableArray<T>
|
2 years ago |
Kévin Chalet
|
cf3e960055
|
Abort sign-in demands whose principal contains a standard claim with an invalid claim value type
|
2 years ago |
Kévin Chalet
|
05ab8b7428
|
Update the ClaimsIdentity/ClaimsPrincipal.GetClaim() extension to throw an exception when multiple claims of the same type exist
|
2 years ago |
Kévin Chalet
|
61f036fd59
|
Introduce a faster way to revoke all the tokens associated with an authorization and use bulk operations when available
|
2 years ago |
Kévin Chalet
|
0bf4a433bd
|
Add Zoom to the list of supported providers
|
2 years ago |
Kévin Chalet
|
517b1b6324
|
Add Zoom to the list of supported providers
|
2 years ago |
Kévin Chalet
|
f36d9b5471
|
Remove unnecessary usings
|
2 years ago |
Kévin Chalet
|
02cca0a42e
|
Update the entire code base to use collection expressions
|
2 years ago |
Kévin Chalet
|
746f38432c
|
Make the supported subject types configurable via OpenIddictServerOptions.SubjectTypes
|
2 years ago |
Kévin Chalet
|
00fa3f3494
|
Allow configuring the supported client authentication methods and use invalid_client for client assertion errors
|
2 years ago |
Kévin Chalet
|
d6c9c0b35c
|
Add client assertions support to the server stack
|
2 years ago |
Kévin Chalet
|
a941660a41
|
Move the client authentication logic to the ProcessAuthentication event
|
2 years ago |
Kévin Chalet
|
1c382d90ba
|
Introduce application settings and support configuring token lifetimes per client
|
2 years ago |
Kévin Chalet
|
4af3f8dc6f
|
Introduce support for application types
|
2 years ago |
Kévin Chalet
|
61e6fd95c3
|
Centralize the target frameworks in Directory.Build.props
|
3 years ago |
Kévin Chalet
|
14c22c83f0
|
Use manually-defined store resolvers instead of mocks in OpenIddictCoreBuilderTests
|
3 years ago |
Kévin Chalet
|
1dc8770fd2
|
Bump MongoDB to 2.20.0 on .NET 6.0 and higher
|
3 years ago |
Kévin Chalet
|
e53a723766
|
Enable the "plain" code challenge method by default to increase interoperability
|
3 years ago |
Kévin Chalet
|
ef4b0f3417
|
Add explicit System.Net.Http usings
|
3 years ago |
Kévin Chalet
|
3bdfc20895
|
Catch exceptions thrown during the retrieval of the remote server configuration and generalize the use of OpenIddictHelpers.IsFatal()
|
3 years ago |
Kévin Chalet
|
4685332df5
|
Add device authorization grant support in the OpenIddict client
|
3 years ago |
Kévin Chalet
|
233c76b08e
|
Update OpenIddictValidationServerIntegrationConfiguration to initialize OpenIddictValidationOptions.Issuer and add new SetClientUri/SetIssuer overloads
=
|
3 years ago |
Kévin Chalet
|
eb1fcc82bd
|
Introduce new properties to disable token rejection and don't reject authentication demands for invalid identity token hints
|
3 years ago |
Kévin Chalet
|
6cfe43b3e9
|
Add native support for Windows Runtime
|
3 years ago |
Kévin Chalet
|
532a5941ec
|
Introduce Windows support for the client stack
|
3 years ago |
Dan Hansen
|
2f1ae5158d
|
Fix OpenIddictExtensions.AddClaims() to use JsonElement.ToString() instead of JsonElement.GetString()
|
3 years ago |
Kévin Chalet
|
773594231e
|
Prevent enabling the device authorization flow when token storage is disabled (unless the degraded mode is used)
|
3 years ago |
Kévin Chalet
|
bfa95d094a
|
Unify the token entry properties restoration logic and fix an issue affecting device codes and ASP.NET Core Data Protection
|
3 years ago |
Dan Hansen
|
35713aff04
|
Fix OpenIddictExtensions.AddClaims() to use JsonElement.ToString() instead of JsonElement.GetString()
|
3 years ago |
Kévin Chalet
|
bf839d8923
|
Prevent enabling the device authorization flow when token storage is disabled (unless the degraded mode is used)
|
3 years ago |
Kévin Chalet
|
21ccfc5e9b
|
Unify the token entry properties restoration logic and fix an issue affecting device codes and ASP.NET Core Data Protection
|
3 years ago |
Kévin Chalet
|
8c14d4e3e9
|
Replace references to "URL" by "URI" when resource identifiers are not required to be resource locators
|
3 years ago |