Kévin Chalet
|
5293257e6e
|
Add a new option allowing to make PKCE mandatory
|
5 years ago |
|
Kévin Chalet
|
84facf0895
|
Introduce response type permissions, remove hybrid clients support and bring back none flow support
|
5 years ago |
|
Kévin Chalet
|
29f88f4b43
|
Change the resource identifiers naming scheme
|
5 years ago |
|
Kévin Chalet
|
3841f32f17
|
Update the entire codebase to use is null/is not null
|
5 years ago |
|
Kévin Chalet
|
e2fe4d9d37
|
Update the XML documentation to use <list type="bullet"> where appropriate
|
6 years ago |
|
Kévin Chalet
|
de5485ceee
|
Add nullable annotations to OpenIddict.Server, OpenIddict.Server.AspNetCore, OpenIddict.Server.Owin and OpenIddict.Server.DataProtection
|
6 years ago |
|
Kévin Chalet
|
5da84ff95a
|
Move OpenIddictResources to the OpenIddict.Abstractions root namespace
|
6 years ago |
|
Kévin Chalet
|
8feeb8698d
|
Update the entire codebase to use IStringLocalizer/ResourceManager
|
6 years ago |
|
Kévin Chalet
|
0f42586959
|
Revamp the encryption/signing credentials registration mechanism
|
6 years ago |
|
Kévin Chalet
|
dda225a328
|
Rename OpenIddictServerOptions.UseSlidingExpiration to DisableSlidingRefreshTokenExpiration and fix the XML documentation
|
6 years ago |
|
Kévin Chalet
|
682af18392
|
Update the TypeValidator custom delegate to avoid throwing when the JWT token has no "typ" header but contains a "token_usage" claim
|
6 years ago |
|
Kévin Chalet
|
dad788a936
|
Support the long application/at+jwt and application/jwt forms
|
6 years ago |
|
Kévin Chalet
|
beb6b3e92b
|
Make authorization codes reference tokens by default, split UseReferenceTokens into two settings and allow the Data Protection to fall back to JWT for specific token types
|
6 years ago |
|
Kévin Chalet
|
ed0dc56487
|
Reunify the custom and built-in handlers collections to avoid computing the collections per-request
|
6 years ago |
|
Kévin Chalet
|
2ac5b4b884
|
Update the validation OWIN integration to support active authentication and rework how errors are returned for API requests
|
6 years ago |
|
Kévin Chalet
|
f81f8fc7dd
|
Introduce introspection support and revamp the events model used by the validation handler
|
6 years ago |
|
Kévin Chalet
|
be23e18023
|
Leverage IdentityModel's new TypeValidator mechanism to allow validating JWT tokens issued by OpenIddict 1.x/2.x
|
6 years ago |
|
Kévin Chalet
|
414e05eed4
|
Create a DB entry for all types of tokens, rework reference tokens support and add token entry validation to the validation handler
|
6 years ago |
|
Kévin Chalet
|
97dffed124
|
Implement complete WWW-Authenticate response header support
|
6 years ago |
|
Kévin Chalet
|
e4b2150f23
|
Enforce JWT access token encryption by default
|
6 years ago |
|
Kévin Chalet
|
6a3afb52c4
|
Make the supported code_challenge_methods configurable via advanced options and disable plain by default
|
6 years ago |
|
Kévin Chalet
|
a6e5cc827b
|
Remove OpenIddictServerJsonWebTokenHandler and OpenIddictValidationJsonWebTokenHandler
|
6 years ago |
|
Kévin Chalet
|
d5e449d065
|
Update the token validation logic to validate JWT tokens only once, independently of their actual type
|
6 years ago |
|
Kévin Chalet
|
225b8ad9f5
|
Add device code flow support
|
6 years ago |
|
Kévin Chalet
|
f44b4cc82b
|
Update OpenIddictServerOptions.AuthorizationCodeLifetime's documentation to include the default lifetime
|
6 years ago |
|
Kévin Chalet
|
5627188737
|
Expose the token validation parameters used by OpenIddict.Server and rework existing handlers
|
6 years ago |
|
Kévin Chalet
|
4a1d15f107
|
Introduce OpenIddictServerOptions.ResponseTypes/ResponseModes to support registering custom response types/modes
|
6 years ago |
|
Kévin Chalet
|
858740818e
|
Reintroduce token storage, reference tokens, non-sliding expiration, rolling tokens and token revocation support
|
6 years ago |
|
Kévin Chalet
|
94e71b530b
|
Reintroduce the introspection endpoint
|
7 years ago |
|
Kévin Chalet
|
9ee38c0efb
|
Introduce the first experimental OpenIddict 3.0 bits and move the build infrastructure to Arcade
|
7 years ago |
|
Kévin Chalet
|
8ff0e97586
|
Add a new option allowing to make PKCE mandatory
|
7 years ago |
|
Kévin Chalet
|
ecd6bab19d
|
Remove the .Internal namespace and make the pubternal types public or internal
|
7 years ago |
|
Kévin Chalet
|
978c398d7d
|
Introduce new constants
|
8 years ago |
|
Kévin Chalet
|
aa79131335
|
Introduce OpenIddictServerBuilder.SetRequestCachingPolicy()
|
8 years ago |
|
Kévin Chalet
|
bbf4c42057
|
Move the server and validation components to an .Internal namespace
|
8 years ago |
|
Kévin Chalet
|
5c40217da4
|
Replace the application provider/events by a new notifications-based system
|
8 years ago |
|
Kévin Chalet
|
7e10bedb73
|
Remove implicit permissions and introduce OpenIddictServerBuilder.IgnoreEndpointPermissions()/IgnoreGrantTypePermissions()/IgnoreScopePermissions()
|
8 years ago |
|
Kévin Chalet
|
8f9c6f109d
|
Enable scope validation and reject unidentified token/revocation requests by default
|
8 years ago |
|
Kévin Chalet
|
aa89d0c215
|
Automatically validate the authorization associated with authorization codes/refresh tokens
|
8 years ago |
|
Kévin Chalet
|
f17db7496d
|
Update HandleConfigurationRequest to use the new HandleConfigurationRequestContext.Claims property
|
8 years ago |
|
Kévin Chalet
|
32fe4b0ae7
|
Remove OpenIddict.Models/OpenIddict.Stores and move to per-provider models
|
8 years ago |
|
Kévin Chalet
|
943e9578f3
|
Introduce OpenIddictServerBuilder.RegisterProvider() to allow registering a custom OpenID Connect server provider
|
8 years ago |
|
Kévin Chalet
|
9515954ac9
|
Introduce non-generic manager interfaces and update the token server/validation services to use them
|
8 years ago |
|
Kévin Chalet
|
7bca2c06ed
|
Revamp the OpenIddict services registration process and introduce new builders to separate the server APIs from the core APIs
|
8 years ago |
|
Kévin Chalet
|
ef139e23d1
|
Move the default stores to OpenIddict.Stores and the server components to OpenIddict.Server
|
8 years ago |
|
Kévin Chalet
|
b3de8b998e
|
Introduce OpenIddictScope.Resources and OpenIddictScopeManager.ListResourcesAsync()
|
8 years ago |
|
Kévin Chalet
|
cb05ebc769
|
Introduce scope permissions, add opt-in scope validation support and rework existing permissions
|
8 years ago |
|
Kévin Chalet
|
cf3e649b0f
|
Add automatic revocation of old tokens when redeeming refresh tokens with rolling tokens enabled
|
8 years ago |
|
Kévin Chalet
|
f03ba6d66e
|
Add aud, exp, iat, iss and sub to the list of default claims exposed by the discovery endpoint
|
8 years ago |
|
Kévin Chalet
|
b3c0d886a7
|
Introduce OpenIddictOptions.Claims/OpenIddictBuilder.RegisterClaims()
|
9 years ago |
