69 Commits (3c0e8b4e24fc7374ff35fe4d2feb76558330fa8b)

Author SHA1 Message Date
Kévin Chalet eeb8deddbf Introduce a new resource entity and support dynamic resources 2 months ago
Kévin Chalet 8b847421d6 Replace the SUPPORTS_* constants by the built-in target/platform constants 5 months ago
Kévin Chalet 59a137cd63 Allow using mTLS client authentication with the client credentials grant and support mTLS token binding for anonymous clients 7 months ago
Kévin Chalet 7b9fd7677f Revamp the client authentication method negotiation logic and support mTLS token binding in the client, server and validation stacks 7 months ago
Kévin Chalet 5c1cda0ac5 Implement native mTLS client authentication support in the server stack 8 months ago
Kévin Chalet a0f39b4b5c Polyfill ValueTask.CompletedTask and ValueTask<TResult>.CompletedTask 11 months ago
Kévin Chalet 78ba0a3dec Implement built-in audiences and resources indicators validation 1 year ago
Kévin Chalet 8c94cb7c13 Implement OAuth 2.0 Token Exchange support 1 year ago
Kévin Chalet fab284f5d5 Update GenerateTokenContext to expose SecurityTokenDescriptor and adopt the new URI-style token type identifiers in the client, core, server and validation stacks 1 year ago
Kévin Chalet 5b56eddc0c Remove all the store resolvers and mark all the assemblies as trimming/Native AOT-compatible 2 years ago
Kévin Chalet 38e84b862d Update OpenIddictParameter to offer ImmutableArray<string> conversions instead of string[] and clone JsonNode objects to guarantee immutability 2 years ago
Kévin Chalet e39c635631 Decorate the claim extensions with [OverloadResolutionPriority] and collection expressions for ImmutableArray<T> 2 years ago
Kévin Chalet b17b3fe235 Update the .NET Framework and .NET Standard TFMs to target ASP.NET Core/Entity Framework Core 2.3 and .NET Extensions 8.0 2 years ago
Kévin Chalet fbad1d0727 Bump .NET Arcade to 9.0.0-beta.25058.5 2 years ago
Kévin Chalet 42d6369910 Implement Pushed Authorization Requests (PAR) support and revamp the request caching feature 2 years ago
Kévin Chalet d4c05e2e23 Rename the device, cryptography, logout and verification endpoints and the associated events/event handlers 2 years ago
Kévin Chalet 38d87b2945 Allow using unique JSON_ARRAY claims to represent arrays of strings 2 years ago
Kévin Chalet cf3e960055 Abort sign-in demands whose principal contains a standard claim with an invalid claim value type 3 years ago
Kévin Chalet 0bf4a433bd Add Zoom to the list of supported providers 3 years ago
Kévin Chalet 517b1b6324 Add Zoom to the list of supported providers 3 years ago
Kévin Chalet 02cca0a42e Update the entire code base to use collection expressions 3 years ago
Kévin Chalet a941660a41 Move the client authentication logic to the ProcessAuthentication event 3 years ago
Kévin Chalet 1c382d90ba Introduce application settings and support configuring token lifetimes per client 3 years ago
Kévin Chalet bfa95d094a Unify the token entry properties restoration logic and fix an issue affecting device codes and ASP.NET Core Data Protection 4 years ago
Kévin Chalet 21ccfc5e9b Unify the token entry properties restoration logic and fix an issue affecting device codes and ASP.NET Core Data Protection 4 years ago
Kévin Chalet 8c14d4e3e9 Replace references to "URL" by "URI" when resource identifiers are not required to be resource locators 4 years ago
Kévin Chalet 2a987bcebe Support relative redirect_uri/post_logout_redirect_uri in the client stack and revisit how OpenIddict handles URIs 4 years ago
Kévin Chalet 779a8524e4 Fix global.json to reference Arcade 7.0.0-beta.22513.4 4 years ago
Kévin Chalet a1f84d38d0 Add integration tests projects for the client and validation stacks and use a high order for the AttachCustom*Parameters handlers 4 years ago
Kévin Chalet a1215728db Implement "iss" support in the server stack and update the token validation logic to support issuers that don't end with a trailing slash 5 years ago
Kévin Chalet deee5e5b92 Update the code base to use implicit global usings 5 years ago
Kévin Chalet 148a987a23 Update the code base to use file-scoped namespaces 5 years ago
Kévin Chalet f465efda19 Always require that the oi_tkn_typ claim be present if all token types are considered valid 5 years ago
Kévin Chalet 8004a82c1d Revamp the token authentication/generation mechanism and introduce new events 5 years ago
Kévin Chalet dfc57bff56 Add an error_uri to all the errors returned by OpenIddict 6 years ago
Kévin Chalet fdfb2498b0 Add integration tests to ensure device/user codes are returned as part of sign-in operations triggered from the device endpoint 6 years ago
Kévin Chalet 22ff1fc02e Block device requests sent by clients that were not granted the device code grant permission and add integration tests for the device and verification endpoints 6 years ago
Kévin Chalet de1b3b4477 Remove localized error descriptions support 6 years ago
Kévin Chalet a6dd8cf031 Revamp refresh tokens 6 years ago
Kévin Chalet 84facf0895 Introduce response type permissions, remove hybrid clients support and bring back none flow support 6 years ago
Johann ff0958ea67
Enable nullable reference types support in the unit/integration tests projects 6 years ago
Kévin Chalet 254be824c9 Introduce new properties in ProcessSignInContext to allow for more control over the token creation process 6 years ago
Kévin Chalet 29f88f4b43 Change the resource identifiers naming scheme 6 years ago
Kévin Chalet f84a10270e Revamp the authorizations/tokens pruning mechanism 6 years ago
Kévin Chalet 5f164309cd Automatically disable the incompatible options when enabling the degraded mode 6 years ago
Kévin Chalet c8215868cf Rename the FunctionalTests namespace suffix to IntegrationTests 6 years ago
Kévin Chalet 5da84ff95a Move OpenIddictResources to the OpenIddict.Abstractions root namespace 6 years ago
Kévin Chalet 8feeb8698d Update the entire codebase to use IStringLocalizer/ResourceManager 6 years ago
Kévin Chalet dda225a328 Rename OpenIddictServerOptions.UseSlidingExpiration to DisableSlidingRefreshTokenExpiration and fix the XML documentation 6 years ago
Kévin Chalet e0909c87a8 Update the logout endpoint logic to not trigger a sign-out response by default and reword some of the exception messages 6 years ago