Kévin Chalet
|
55cd0e94a8
|
Update all the token type validation delegates to assume that tokens that don't have a "typ" header are generic JSON Web Tokens
|
8 months ago |
|
Kévin Chalet
|
d95b32221c
|
Stop using the token endpoint URI as the client assertion audience and use the new "client-authentication+jwt" JSON Web Token type
|
8 months ago |
|
Kévin Chalet
|
b33dad15f3
|
Implement new audience and presenter validation logic as part of the ValidateToken event
|
8 months ago |
|
Kévin Chalet
|
f8553a9ee7
|
Update the MapNonStandardResponseParameters userinfo handler to avoid using OpenIddictParameter.GetNamedParameters()
|
9 months ago |
|
Kévin Chalet
|
2fc7908f93
|
Attach event identifiers to all the log messages
|
9 months ago |
|
Kévin Chalet
|
fab284f5d5
|
Update GenerateTokenContext to expose SecurityTokenDescriptor and adopt the new URI-style token type identifiers in the client, core, server and validation stacks
|
10 months ago |
|
Kévin Chalet
|
38e84b862d
|
Update OpenIddictParameter to offer ImmutableArray<string> conversions instead of string[] and clone JsonNode objects to guarantee immutability
|
11 months ago |
|
Kévin Chalet
|
e39c635631
|
Decorate the claim extensions with [OverloadResolutionPriority] and collection expressions for ImmutableArray<T>
|
11 months ago |
|
Kévin Chalet
|
b17b3fe235
|
Update the .NET Framework and .NET Standard TFMs to target ASP.NET Core/Entity Framework Core 2.3 and .NET Extensions 8.0
|
11 months ago |
|
Kévin Chalet
|
42d6369910
|
Implement Pushed Authorization Requests (PAR) support and revamp the request caching feature
|
12 months ago |
|
Kévin Chalet
|
ff752efe09
|
Automatically normalize "amr" claims in identity tokens to ensure a JSON array is always returned
|
1 year ago |
|
Kévin Chalet
|
dbcd6d1ad7
|
Remove the members that were obsoleted in OpenIddict 5.x
|
1 year ago |
|
Kévin Chalet
|
84104846c6
|
Unify platform callbacks handling using a new OpenIddictClientSystemIntegrationPlatformCallback type
|
1 year ago |
Jan Trejbal
|
2475ed3c1a
|
Use System.TimeProvider on .NET 8.0+
|
2 years ago |
|
Kévin Chalet
|
b32eb8c0a2
|
Make user codes fully configurable and remove token length assumptions
|
2 years ago |
ToreAad
|
158a5788ea
|
Do not throw an exception when the normalized user code is empty
|
2 years ago |
|
Kévin Chalet
|
26fdb68773
|
Bump the .NET SDK to 8.0.200 and stop using collection expressions with ImmutableArray<T>
|
2 years ago |
|
Kévin Chalet
|
d2a35e844f
|
Update the client console sandbox to support refreshing the user authentication
|
2 years ago |
|
Kévin Chalet
|
507ced105a
|
Update the ValidateExpirationDate handlers to support TokenValidationParameters.ClockSkew
|
2 years ago |
|
Kévin Chalet
|
61f036fd59
|
Introduce a faster way to revoke all the tokens associated with an authorization and use bulk operations when available
|
2 years ago |
|
Kévin Chalet
|
517b1b6324
|
Add Zoom to the list of supported providers
|
2 years ago |
|
Kévin Chalet
|
02cca0a42e
|
Update the entire code base to use collection expressions
|
2 years ago |
|
Kévin Chalet
|
00fa3f3494
|
Allow configuring the supported client authentication methods and use invalid_client for client assertion errors
|
2 years ago |
|
Kévin Chalet
|
d6c9c0b35c
|
Add client assertions support to the server stack
|
2 years ago |
|
Kévin Chalet
|
ca1784faab
|
Update ValidateIdentityModelToken to use TryGetPayloadValue() with Dictionary<TKey, TValue> instead of ImmutableDictionary<TKey, TValue>
|
2 years ago |
|
Kévin Chalet
|
fa497f01ea
|
Update the ValidateTokenEntry server event handler to buffer tokens before revoking them
|
3 years ago |
|
Kévin Chalet
|
bf8abc6e6e
|
Support OpenIddictClientOptions.ClientUri/OpenIddictServerOptions.Issuer/OpenIddictValidationOptions.Issuer URIs created with DangerousDisablePathAndQueryCanonicalization=true
|
3 years ago |
|
Kévin Chalet
|
bfa95d094a
|
Unify the token entry properties restoration logic and fix an issue affecting device codes and ASP.NET Core Data Protection
|
3 years ago |
|
Kévin Chalet
|
604889b129
|
Update ProcessChallengeContext/ProcessSignOutContext.Nonce's documentation to emphasize that nonces should be generated using a crypto-secure RNG
|
3 years ago |
|
Kévin Chalet
|
21ccfc5e9b
|
Unify the token entry properties restoration logic and fix an issue affecting device codes and ASP.NET Core Data Protection
|
3 years ago |
|
Kévin Chalet
|
3a80a6a4f0
|
Update ProcessChallengeContext/ProcessSignOutContext.Nonce's documentation to emphasize that nonces should be generated using a crypto-secure RNG
|
3 years ago |
|
Kévin Chalet
|
d8a4451603
|
Support OpenIddictClientOptions.ClientUri/OpenIddictServerOptions.Issuer/OpenIddictValidationOptions.Issuer URIs created with DangerousDisablePathAndQueryCanonicalization=true
|
3 years ago |
|
Kévin Chalet
|
2a987bcebe
|
Support relative redirect_uri/post_logout_redirect_uri in the client stack and revisit how OpenIddict handles URIs
|
3 years ago |
|
Kévin Chalet
|
06afece93a
|
Fix the user code generation logic
|
3 years ago |
|
Kévin Chalet
|
51c09bec8a
|
Mark most of the infrastructure types as sealed
|
3 years ago |
|
Kévin Chalet
|
d7fea891f0
|
Unify the instantiation of cryptographic algorithms
|
3 years ago |
|
Kévin Chalet
|
20005d63cc
|
Prevent adding multiple client registrations using the same issuer
|
3 years ago |
|
Kévin Chalet
|
7bb02a43bd
|
Allow determining the token format dynamically and automatically add a jti claim to JWT access tokens
|
4 years ago |
|
Kévin Chalet
|
e1436f7f59
|
Add native support for private_key_jwt in the client
|
4 years ago |
|
Kévin Chalet
|
7222d95025
|
React to the removal of the !! operator in C# 11
|
4 years ago |
|
Kévin Chalet
|
255fc64caf
|
Fix incorrect error messages in the client stack and use ?? for null checks where appropriate
|
4 years ago |
|
Kévin Chalet
|
823e05fc50
|
Remove unwanted empty lines and fix typos
|
4 years ago |
|
Kévin Chalet
|
62f3e6ff85
|
Bump the .NET SDK to 7.0.100-preview.2.22153.17 and modernize the code base
|
4 years ago |
|
Kévin Chalet
|
3bf51e1600
|
Introduce the first bits of the OpenIddict client
|
6 years ago |
|
Kévin Chalet
|
26b8414114
|
Remove unnecessary usings
|
4 years ago |
|
Kévin Chalet
|
540194f3f3
|
Add a new filter to allow excluding handlers when token lifetime validation is disabled
|
4 years ago |
|
Kévin Chalet
|
deee5e5b92
|
Update the code base to use implicit global usings
|
4 years ago |
|
Kévin Chalet
|
148a987a23
|
Update the code base to use file-scoped namespaces
|
4 years ago |
|
Kévin Chalet
|
87c99d6bc7
|
Validate the expiration date of a token before validating its database entry
|
5 years ago |
|
Kévin Chalet
|
49dc526476
|
Introduce the RequireTokenEntryCreated/RequireTokenPayloadPersisted filters
|
5 years ago |
