Kévin Chalet
|
55f358689c
|
Introduce built-in entity caching support in the managers and allow disabling the additional checks
|
8 years ago |
|
Kévin Chalet
|
978c398d7d
|
Introduce new constants
|
8 years ago |
|
Kévin Chalet
|
bbf4c42057
|
Move the server and validation components to an .Internal namespace
|
8 years ago |
|
Kévin Chalet
|
62ea117682
|
Store the token/authorization identifiers in new internal authentication properties
|
8 years ago |
|
Kévin Chalet
|
e7abdab60d
|
Update the token endpoint validation logic to reject scope=offline_access requests if the client application is not allowed to use the refresh token flow
|
8 years ago |
|
Kévin Chalet
|
7e10bedb73
|
Remove implicit permissions and introduce OpenIddictServerBuilder.IgnoreEndpointPermissions()/IgnoreGrantTypePermissions()/IgnoreScopePermissions()
|
8 years ago |
|
Kévin Chalet
|
8f9c6f109d
|
Enable scope validation and reject unidentified token/revocation requests by default
|
8 years ago |
|
Kévin Chalet
|
aa89d0c215
|
Automatically validate the authorization associated with authorization codes/refresh tokens
|
8 years ago |
|
Kévin Chalet
|
91d5592d55
|
Migrate to the latest aspnet-contrib packages
|
8 years ago |
|
Kévin Chalet
|
32fe4b0ae7
|
Remove OpenIddict.Models/OpenIddict.Stores and move to per-provider models
|
8 years ago |
|
Kévin Chalet
|
943e9578f3
|
Introduce OpenIddictServerBuilder.RegisterProvider() to allow registering a custom OpenID Connect server provider
|
8 years ago |
|
Kévin Chalet
|
92524d4371
|
Introduce OpenIddictServerDefaults and OpenIddictValidationDefaults
|
8 years ago |
|
Kévin Chalet
|
7bca2c06ed
|
Revamp the OpenIddict services registration process and introduce new builders to separate the server APIs from the core APIs
|
8 years ago |
|
Kévin Chalet
|
ef139e23d1
|
Move the default stores to OpenIddict.Stores and the server components to OpenIddict.Server
|
8 years ago |
|
Kévin Chalet
|
8592dce45b
|
Update the Get*Async() managers/stores methods to return ValueTask instead of Task
|
8 years ago |
|
Kévin Chalet
|
b3de8b998e
|
Introduce OpenIddictScope.Resources and OpenIddictScopeManager.ListResourcesAsync()
|
8 years ago |
|
Kévin Chalet
|
cb05ebc769
|
Introduce scope permissions, add opt-in scope validation support and rework existing permissions
|
8 years ago |
|
Kévin Chalet
|
c079027ca7
|
Introduce full support for application permissions
|
8 years ago |
|
Kévin Chalet
|
9bae6740db
|
Cache the TApplication/TToken entities in the request properties to avoid multiple stores calls
|
9 years ago |
|
Kévin Chalet
|
0a409a3013
|
Correctly restore the authentication properties of non-reference authorization codes/refresh tokens
|
9 years ago |
|
Kévin Chalet
|
1118e77977
|
Update the managers/stores methods to accept and return ImmutableArray instead of raw arrays
|
9 years ago |
|
Kévin Chalet
|
cf3e649b0f
|
Add automatic revocation of old tokens when redeeming refresh tokens with rolling tokens enabled
|
9 years ago |
|
Kévin Chalet
|
38e69a7034
|
Reword the error messages returned by the OpenIddict endpoints
|
9 years ago |
|
Kévin Chalet
|
df6bafb723
|
Add missing license headers
|
9 years ago |
|
Kévin Chalet
|
a4284c188f
|
Move OpenIddictExtensions to the Microsoft.Extensions.DependencyInjection namespace
|
9 years ago |
|
Kévin Chalet
|
f95a17acae
|
Introduce a new hybrid client type and prevent confidential clients from retrieving an identity token from the authorization endpoint
|
9 years ago |
|
Kévin Chalet
|
eb6588576e
|
Introduce a new rolling tokens option and disable it by default
|
9 years ago |
|
Kévin Chalet
|
3280e09c1d
|
Introduce built-in reference tokens support and automatic compromised tokens revocation
|
9 years ago |
|
Kévin Chalet
|
5e7a5c103b
|
Port OpenIddict to the new ASP.NET Core 2.0 authentication stack
|
9 years ago |
|
Kévin Chalet
|
0ac6071afd
|
React to API changes in aspnet-contrib/AspNet.Security.OpenIdConnect.Server
db9900175b
|
9 years ago |
|
Kévin Chalet
|
93c3dec683
|
Migrate to Moq 4.7.8
|
9 years ago |
|
Kévin Chalet
|
214c429fc4
|
Optimization: reject grant_type=authorization_code requests that don't specify a redirect_uri directly from ValidateTokenRequest
|
9 years ago |
|
Kévin Chalet
|
55a87bf989
|
React to behavior changes in aspnet-contrib/AspNet.Security.OpenIdConnect.Server
067531583a
|
9 years ago |
|
Kévin Chalet
|
e36a80bc14
|
Adhere to the ASP.NET team coding style guidelines
|
9 years ago |
|
Kévin Chalet
|
7c65c83a04
|
Introduce new IOpenIddictApplicationStore/OpenIddictApplicationManager APIs
|
9 years ago |
|
Kévin Chalet
|
1478905dc9
|
Introduce a new DisableTokenRevocation option
|
9 years ago |
|
Kévin Chalet
|
69e83a5019
|
Align the authorization code handling with refresh tokens
|
10 years ago |
|
Kévin Chalet
|
bb1d2e07be
|
Remove OpenIddictDbContext and revamp OpenIddict/OpenIddict.Core
|
10 years ago |
|
Kévin Chalet
|
39fd5763a9
|
Update OpenIddictProvider to make refresh token requests pass-through
|
10 years ago |
|
Kévin Chalet
|
cc79326fb4
|
React to API/namespace changes in aspnet-contrib/AspNet.Security.OpenIdConnect.Server
146759e15e
7f0760bbc7
|
10 years ago |
|
Kévin Chalet
|
53b38c93f3
|
Add the OpenIddict endpoints tests
|
10 years ago |
