Kévin Chalet
|
21ccfc5e9b
|
Unify the token entry properties restoration logic and fix an issue affecting device codes and ASP.NET Core Data Protection
|
3 years ago |
Kévin Chalet
|
8c14d4e3e9
|
Replace references to "URL" by "URI" when resource identifiers are not required to be resource locators
|
3 years ago |
Kévin Chalet
|
2a987bcebe
|
Support relative redirect_uri/post_logout_redirect_uri in the client stack and revisit how OpenIddict handles URIs
|
3 years ago |
Kévin Chalet
|
1f2809c879
|
Add response_type=none support in the client stack and revamp the grant_type/response_type negotiation logic
|
3 years ago |
Kévin Chalet
|
ffd47678fc
|
Reject authorization code/device authorization code grant requests containing a "scope" parameter
|
3 years ago |
Kévin Chalet
|
779a8524e4
|
Fix global.json to reference Arcade 7.0.0-beta.22513.4
|
3 years ago |
Kévin Chalet
|
75b17c94f6
|
Start testing OpenIddict on .NET 7.0
|
3 years ago |
Kévin Chalet
|
7ca9be1428
|
Reference PolySharp and replace Substring() calls by the range syntax
|
3 years ago |
Kévin Chalet
|
ac5e3dd62b
|
Update the System.Net.Http integrations to support sending empty parameters in GET and POST requests
|
3 years ago |
Kévin Chalet
|
6c963c80d0
|
Adjust nullable annotations
|
3 years ago |
Kévin Chalet
|
e3b4337b85
|
Revamp Packages.props and bump .NET and third-party dependencies
|
3 years ago |
Kévin Chalet
|
20005d63cc
|
Prevent adding multiple client registrations using the same issuer
|
4 years ago |
Kévin Chalet
|
5220698c06
|
Introduce IOpenIddictApplicationManager.ValidatePostLogoutRedirectUriAsync() to allow tweaking the validation logic for logout requests that include a client_id parameter
|
4 years ago |
Kévin Chalet
|
4ef3c51a01
|
Implement client_id support for logout requests and native id_token_hint validation for both authorization and logout requests
|
4 years ago |
Kévin Chalet
|
e1d7817825
|
Update the client and server stacks to redeem tokens earlier
|
4 years ago |
Kévin Chalet
|
a1f84d38d0
|
Add integration tests projects for the client and validation stacks and use a high order for the AttachCustom*Parameters handlers
|
4 years ago |
Kévin Chalet
|
ddc5c9a69c
|
Revamp the claims extensions and update the client and server hosts to preserve the authentication properties using a special private claim
|
4 years ago |
Kévin Chalet
|
32678867ca
|
Remove the .NET 5.0 TFMs
|
4 years ago |
Kévin Chalet
|
6f9c559682
|
Update the .NET SDK and bump all dependencies
|
4 years ago |
Kévin Chalet
|
3ff021a3e4
|
Revamp HTTP response extraction to support WWW-Authenticate and enforce Content-Type validation
|
4 years ago |
Kévin Chalet
|
7222d95025
|
React to the removal of the !! operator in C# 11
|
4 years ago |
Kévin Chalet
|
255fc64caf
|
Fix incorrect error messages in the client stack and use ?? for null checks where appropriate
|
4 years ago |
Kévin Chalet
|
62f3e6ff85
|
Bump the .NET SDK to 7.0.100-preview.2.22153.17 and modernize the code base
|
4 years ago |
Kévin Chalet
|
a1215728db
|
Implement "iss" support in the server stack and update the token validation logic to support issuers that don't end with a trailing slash
|
4 years ago |
Kévin Chalet
|
0a8b416311
|
Remove the .NET Core 2.1 TFMs
|
4 years ago |
Kévin Chalet
|
23fd89e9eb
|
Add .NET 6.0 TFMs and bump the .NET SDK/packages to 6.0
|
5 years ago |
Kévin Chalet
|
deee5e5b92
|
Update the code base to use implicit global usings
|
5 years ago |
Kévin Chalet
|
148a987a23
|
Update the code base to use file-scoped namespaces
|
5 years ago |
Kévin Chalet
|
cda55862bc
|
Update HandleLogoutRequestContext to allow attaching custom sign-out parameters
|
5 years ago |
Kévin Chalet
|
e0c748f046
|
Introduce a simpler way to return additional parameters from the Handle*Request events that trigger a sign-in response
|
5 years ago |
Kévin Chalet
|
87c99d6bc7
|
Validate the expiration date of a token before validating its database entry
|
5 years ago |
Kévin Chalet
|
81273ec362
|
Decouple the token validation/generation event handlers from the request processing logic
|
5 years ago |
Kévin Chalet
|
f465efda19
|
Always require that the oi_tkn_typ claim be present if all token types are considered valid
|
5 years ago |
Kévin Chalet
|
8004a82c1d
|
Revamp the token authentication/generation mechanism and introduce new events
|
5 years ago |
Kévin Chalet
|
970ce43ca7
|
Allow authorization requests that don't specify response_type=code when PKCE is enforced
|
5 years ago |
Kévin Chalet
|
6cf1f72844
|
Add log messages to inform users when application claims are not included in introspection responses
|
5 years ago |
Kévin Chalet
|
dfc57bff56
|
Add an error_uri to all the errors returned by OpenIddict
|
5 years ago |
Kévin Chalet
|
fdfb2498b0
|
Add integration tests to ensure device/user codes are returned as part of sign-in operations triggered from the device endpoint
|
5 years ago |
Kévin Chalet
|
22ff1fc02e
|
Block device requests sent by clients that were not granted the device code grant permission and add integration tests for the device and verification endpoints
|
5 years ago |
Kévin Chalet
|
b19fdffea4
|
React to nullable annotations changes in .NET 5.0 and update OpenIddictParameter.ToString() to use the invariant culture
|
5 years ago |
Kévin Chalet
|
de1b3b4477
|
Remove localized error descriptions support
|
5 years ago |
Kévin Chalet
|
bff6ed027b
|
Add .NET 5.0 TFMs and bump the .NET SDK to 5.0.100
|
6 years ago |
Kévin Chalet
|
127e68c6d1
|
Stop adding a jti claim by default
|
5 years ago |
Kévin Chalet
|
a6dd8cf031
|
Revamp refresh tokens
|
5 years ago |
Kévin Chalet
|
5293257e6e
|
Add a new option allowing to make PKCE mandatory
|
5 years ago |
Kévin Chalet
|
84facf0895
|
Introduce response type permissions, remove hybrid clients support and bring back none flow support
|
6 years ago |
Kévin Chalet
|
49b30b1b97
|
Use ECCurve.Oid.Value when comparing EC curves
|
6 years ago |
Johann
|
ff0958ea67
|
Enable nullable reference types support in the unit/integration tests projects
|
6 years ago |
Kévin Chalet
|
1e87e917a6
|
Use static OpenIddict.Abstractions.OpenIddictConstants where appropriate
|
6 years ago |
Kévin Chalet
|
254be824c9
|
Introduce new properties in ProcessSignInContext to allow for more control over the token creation process
|
6 years ago |