Kévin Chalet
|
44eda14ff1
|
Bump the .NET SDK, the .NET packages and the third-party dependencies
|
5 years ago |
Chris Thompson
|
568f13baab
|
Port OpenIddictServerExtensionsTests to OpenIddict 3.0
|
6 years ago |
|
Kévin Chalet
|
bff6ed027b
|
Add .NET 5.0 TFMs and bump the .NET SDK to 5.0.100
|
6 years ago |
Noah Stahl
|
c27cac977e
|
Add encryption key size validation
|
5 years ago |
|
Kévin Chalet
|
a6dd8cf031
|
Revamp refresh tokens
|
5 years ago |
|
Kévin Chalet
|
5293257e6e
|
Add a new option allowing to make PKCE mandatory
|
5 years ago |
Johann
|
ff0958ea67
|
Enable nullable reference types support in the unit/integration tests projects
|
5 years ago |
|
Kévin Chalet
|
1e87e917a6
|
Use static OpenIddict.Abstractions.OpenIddictConstants where appropriate
|
5 years ago |
|
Kévin Chalet
|
29f88f4b43
|
Change the resource identifiers naming scheme
|
5 years ago |
|
Kévin Chalet
|
51bd3c5d72
|
Introduce OpenIddict.Server.Quartz
|
6 years ago |
|
Kévin Chalet
|
f1c09dc454
|
Update the Set*EndpointUris methods to block relative paths starting with ~
|
6 years ago |
|
Kévin Chalet
|
de5485ceee
|
Add nullable annotations to OpenIddict.Server, OpenIddict.Server.AspNetCore, OpenIddict.Server.Owin and OpenIddict.Server.DataProtection
|
6 years ago |
|
Kévin Chalet
|
8feeb8698d
|
Update the entire codebase to use IStringLocalizer/ResourceManager
|
6 years ago |
|
Kévin Chalet
|
0f42586959
|
Revamp the encryption/signing credentials registration mechanism
|
6 years ago |
|
Kévin Chalet
|
dda225a328
|
Rename OpenIddictServerOptions.UseSlidingExpiration to DisableSlidingRefreshTokenExpiration and fix the XML documentation
|
6 years ago |
|
Kévin Chalet
|
8276843268
|
Move the feature constants from Directory.Build.props to Directory.Build.targets to be able to use TargetFrameworkIdentifier-based conditions
|
6 years ago |
|
Kévin Chalet
|
767dfe61e9
|
Cross-compile more projects for .NET Framework 4.6.1 to reduce the dependencies graph
|
6 years ago |
|
Kévin Chalet
|
beb6b3e92b
|
Make authorization codes reference tokens by default, split UseReferenceTokens into two settings and allow the Data Protection to fall back to JWT for specific token types
|
6 years ago |
|
Kévin Chalet
|
5169c28d97
|
Bump Wilson to 6.7.0 and use the new SecurityKey.IsSupportedAlgorithm() API
|
6 years ago |
|
Kévin Chalet
|
ed0dc56487
|
Reunify the custom and built-in handlers collections to avoid computing the collections per-request
|
6 years ago |
|
Kévin Chalet
|
2be6d808cf
|
Enable central package versions management
|
6 years ago |
|
Darthruneis
|
f9d9762a20
|
Port OpenIddictServerBuilderTests from OpenIddict 2.x
|
6 years ago |
|
Kévin Chalet
|
9ee38c0efb
|
Introduce the first experimental OpenIddict 3.0 bits and move the build infrastructure to Arcade
|
7 years ago |
|
Kévin Chalet
|
8ff0e97586
|
Add a new option allowing to make PKCE mandatory
|
7 years ago |
|
Kévin Chalet
|
ecd6bab19d
|
Remove the .Internal namespace and make the pubternal types public or internal
|
7 years ago |
Akhan Zhakiyanov
|
002eeb8dd3
|
Update validation log message for applications without logout permission
|
7 years ago |
|
Kévin Chalet
|
d668c82d8b
|
Use SuppressChildValidationMetadataProvider to exclude OpenIdConnectRequest/OpenIdConnectResponse from child validation
|
7 years ago |
|
Kévin Chalet
|
2bbd153f40
|
Update OpenIddictServerConfiguration to validate the default schemes and ensure they don't point to the OpenIddict server handler
|
7 years ago |
|
Kévin Chalet
|
e7c4942777
|
Move the scope permissions validation logic to ensure it also applies to public clients
|
7 years ago |
|
Kévin Chalet
|
041a83847a
|
Introduce AuthenticationTicket extensions and move the EntityFramework/EntityFrameworkCore extensions to a better namespace
|
8 years ago |
|
Kévin Chalet
|
55f358689c
|
Introduce built-in entity caching support in the managers and allow disabling the additional checks
|
7 years ago |
|
Kévin Chalet
|
84055f634c
|
Move the handlers registration logic to OpenIddictServerConfiguration/OpenIddictValidationConfiguration
|
8 years ago |
|
Kévin Chalet
|
978c398d7d
|
Introduce new constants
|
8 years ago |
|
Kévin Chalet
|
9a06891507
|
Tweak the events model to force user-defined handlers to explicitly determine whether other handlers can be invoked
|
8 years ago |
|
Kévin Chalet
|
aa79131335
|
Introduce OpenIddictServerBuilder.SetRequestCachingPolicy()
|
8 years ago |
|
Kévin Chalet
|
bbf4c42057
|
Move the server and validation components to an .Internal namespace
|
8 years ago |
|
Kévin Chalet
|
ab34bdae2e
|
Update AddServer()/AddValidation() to throw an exception when the OpenID Connect server/OAuth validation handler are already registered and to prevent custom providers
|
8 years ago |
|
Kévin Chalet
|
a65deb4463
|
Update OpenIddictServerBuilder to allow calling SetAccessTokenLifetime/SetAuthorizationCodeLifetime/SetIdentityTokenLifetime/SetRefreshTokenLifetime with null values
|
8 years ago |
|
Kévin Chalet
|
b5c9798e17
|
Introduce new unit tests for the core/server/validation builders and extensions
|
8 years ago |
|
Kévin Chalet
|
99cebde3c3
|
Fix ApplyAuthorizationResponse/ApplyLogoutResponse to work with null requests
|
8 years ago |
|
Kévin Chalet
|
62ea117682
|
Store the token/authorization identifiers in new internal authentication properties
|
8 years ago |
|
Kévin Chalet
|
e9c796ca37
|
Throw an InvalidOperationException when SignIn() is called with an unauthenticated ClaimsIdentity
|
8 years ago |
|
Kévin Chalet
|
e7abdab60d
|
Update the token endpoint validation logic to reject scope=offline_access requests if the client application is not allowed to use the refresh token flow
|
8 years ago |
|
Kévin Chalet
|
5c40217da4
|
Replace the application provider/events by a new notifications-based system
|
8 years ago |
|
Kévin Chalet
|
7e10bedb73
|
Remove implicit permissions and introduce OpenIddictServerBuilder.IgnoreEndpointPermissions()/IgnoreGrantTypePermissions()/IgnoreScopePermissions()
|
8 years ago |
|
Kévin Chalet
|
8f9c6f109d
|
Enable scope validation and reject unidentified token/revocation requests by default
|
8 years ago |
|
Kévin Chalet
|
0e5b0cec66
|
Update exception messages to point to the new OpenIddict services APIs
|
8 years ago |
|
Kévin Chalet
|
aa89d0c215
|
Automatically validate the authorization associated with authorization codes/refresh tokens
|
8 years ago |
|
Kévin Chalet
|
d848dc8529
|
Update common.props to build portable debug symbols
|
8 years ago |
|
Kévin Chalet
|
f17db7496d
|
Update HandleConfigurationRequest to use the new HandleConfigurationRequestContext.Claims property
|
8 years ago |
