86 Commits (3de3d8bbcbeb10d65c90bbf0ffa5f69741ac1cb2)

Author SHA1 Message Date
Kévin Chalet 255fc64caf Fix incorrect error messages in the client stack and use ?? for null checks where appropriate 4 years ago
Kévin Chalet 62f3e6ff85 Bump the .NET SDK to 7.0.100-preview.2.22153.17 and modernize the code base 4 years ago
Kévin Chalet a1215728db Implement "iss" support in the server stack and update the token validation logic to support issuers that don't end with a trailing slash 4 years ago
Kévin Chalet 0a8b416311 Remove the .NET Core 2.1 TFMs 4 years ago
Kévin Chalet 23fd89e9eb Add .NET 6.0 TFMs and bump the .NET SDK/packages to 6.0 5 years ago
Kévin Chalet deee5e5b92 Update the code base to use implicit global usings 5 years ago
Kévin Chalet 148a987a23 Update the code base to use file-scoped namespaces 5 years ago
Kévin Chalet cda55862bc Update HandleLogoutRequestContext to allow attaching custom sign-out parameters 5 years ago
Kévin Chalet e0c748f046 Introduce a simpler way to return additional parameters from the Handle*Request events that trigger a sign-in response 5 years ago
Kévin Chalet 87c99d6bc7 Validate the expiration date of a token before validating its database entry 5 years ago
Kévin Chalet 81273ec362 Decouple the token validation/generation event handlers from the request processing logic 5 years ago
Kévin Chalet f465efda19 Always require that the oi_tkn_typ claim be present if all token types are considered valid 5 years ago
Kévin Chalet 8004a82c1d Revamp the token authentication/generation mechanism and introduce new events 5 years ago
Kévin Chalet 970ce43ca7 Allow authorization requests that don't specify response_type=code when PKCE is enforced 5 years ago
Kévin Chalet 6cf1f72844 Add log messages to inform users when application claims are not included in introspection responses 5 years ago
Kévin Chalet dfc57bff56 Add an error_uri to all the errors returned by OpenIddict 5 years ago
Kévin Chalet fdfb2498b0 Add integration tests to ensure device/user codes are returned as part of sign-in operations triggered from the device endpoint 5 years ago
Kévin Chalet 22ff1fc02e Block device requests sent by clients that were not granted the device code grant permission and add integration tests for the device and verification endpoints 5 years ago
Kévin Chalet b19fdffea4 React to nullable annotations changes in .NET 5.0 and update OpenIddictParameter.ToString() to use the invariant culture 5 years ago
Kévin Chalet de1b3b4477 Remove localized error descriptions support 5 years ago
Kévin Chalet bff6ed027b Add .NET 5.0 TFMs and bump the .NET SDK to 5.0.100 6 years ago
Kévin Chalet 127e68c6d1 Stop adding a jti claim by default 5 years ago
Kévin Chalet a6dd8cf031 Revamp refresh tokens 5 years ago
Kévin Chalet 5293257e6e Add a new option allowing to make PKCE mandatory 6 years ago
Kévin Chalet 84facf0895 Introduce response type permissions, remove hybrid clients support and bring back none flow support 6 years ago
Kévin Chalet 49b30b1b97 Use ECCurve.Oid.Value when comparing EC curves 6 years ago
Johann ff0958ea67
Enable nullable reference types support in the unit/integration tests projects 6 years ago
Kévin Chalet 1e87e917a6 Use static OpenIddict.Abstractions.OpenIddictConstants where appropriate 6 years ago
Kévin Chalet 254be824c9 Introduce new properties in ProcessSignInContext to allow for more control over the token creation process 6 years ago
Kévin Chalet 29f88f4b43 Change the resource identifiers naming scheme 6 years ago
Kévin Chalet 0b629b3dbd Replace JsonSerializer.Serialize() by Utf8JsonWriter and JsonSerializer.Deserialize() by JsonDocument 6 years ago
Kévin Chalet 3841f32f17 Update the entire codebase to use is null/is not null 6 years ago
Kévin Chalet f54ba7f6dd Allow built-in scope validation to be partially executed when the degraded mode is enabled 6 years ago
Kévin Chalet f84a10270e Revamp the authorizations/tokens pruning mechanism 6 years ago
Kévin Chalet 22f5632afe Remove authorization code/identity token introspection/revocation support 6 years ago
Kévin Chalet 8085ca176b Translate all the error messages into French and remove the duplicate .resx entries 6 years ago
Kévin Chalet 4e309929b5 Don't revoke the authorization when detecting an authorization code/refresh token replay 6 years ago
Kévin Chalet 5f164309cd Automatically disable the incompatible options when enabling the degraded mode 6 years ago
Kévin Chalet c8215868cf Rename the FunctionalTests namespace suffix to IntegrationTests 6 years ago
Kévin Chalet 5da84ff95a Move OpenIddictResources to the OpenIddict.Abstractions root namespace 6 years ago
Kévin Chalet 66f6d80298 Move all the assertions and log messages to OpenIddictResources 6 years ago
Kévin Chalet 8feeb8698d Update the entire codebase to use IStringLocalizer/ResourceManager 6 years ago
Kévin Chalet dda225a328 Rename OpenIddictServerOptions.UseSlidingExpiration to DisableSlidingRefreshTokenExpiration and fix the XML documentation 6 years ago
Kévin Chalet 8276843268
Move the feature constants from Directory.Build.props to Directory.Build.targets to be able to use TargetFrameworkIdentifier-based conditions 6 years ago
Kévin Chalet e0909c87a8 Update the logout endpoint logic to not trigger a sign-out response by default and reword some of the exception messages 6 years ago
Martin Costello a92f48dd1c
Send integration test logs to xUnit output 6 years ago
Kévin Chalet 767dfe61e9 Cross-compile more projects for .NET Framework 4.6.1 to reduce the dependencies graph 6 years ago
Kévin Chalet beb6b3e92b
Make authorization codes reference tokens by default, split UseReferenceTokens into two settings and allow the Data Protection to fall back to JWT for specific token types 6 years ago
Kévin Chalet 5169c28d97 Bump Wilson to 6.7.0 and use the new SecurityKey.IsSupportedAlgorithm() API 6 years ago
Kévin Chalet 2be6d808cf Enable central package versions management 6 years ago