153 Commits (59a137cd6331097e727ae1aa446ed22721ee988a)

Author SHA1 Message Date
Kévin Chalet 21ccfc5e9b Unify the token entry properties restoration logic and fix an issue affecting device codes and ASP.NET Core Data Protection 3 years ago
Kévin Chalet 8c14d4e3e9 Replace references to "URL" by "URI" when resource identifiers are not required to be resource locators 3 years ago
Kévin Chalet 2a987bcebe Support relative redirect_uri/post_logout_redirect_uri in the client stack and revisit how OpenIddict handles URIs 3 years ago
Kévin Chalet 1f2809c879 Add response_type=none support in the client stack and revamp the grant_type/response_type negotiation logic 3 years ago
Kévin Chalet ffd47678fc Reject authorization code/device authorization code grant requests containing a "scope" parameter 3 years ago
Kévin Chalet 779a8524e4 Fix global.json to reference Arcade 7.0.0-beta.22513.4 3 years ago
Kévin Chalet 75b17c94f6 Start testing OpenIddict on .NET 7.0 3 years ago
Kévin Chalet 7ca9be1428 Reference PolySharp and replace Substring() calls by the range syntax 3 years ago
Kévin Chalet ac5e3dd62b Update the System.Net.Http integrations to support sending empty parameters in GET and POST requests 3 years ago
Kévin Chalet 6c963c80d0 Adjust nullable annotations 3 years ago
Kévin Chalet e3b4337b85 Revamp Packages.props and bump .NET and third-party dependencies 3 years ago
Kévin Chalet 20005d63cc Prevent adding multiple client registrations using the same issuer 4 years ago
Kévin Chalet 5220698c06 Introduce IOpenIddictApplicationManager.ValidatePostLogoutRedirectUriAsync() to allow tweaking the validation logic for logout requests that include a client_id parameter 4 years ago
Kévin Chalet 4ef3c51a01 Implement client_id support for logout requests and native id_token_hint validation for both authorization and logout requests 4 years ago
Kévin Chalet e1d7817825 Update the client and server stacks to redeem tokens earlier 4 years ago
Kévin Chalet a1f84d38d0 Add integration tests projects for the client and validation stacks and use a high order for the AttachCustom*Parameters handlers 4 years ago
Kévin Chalet ddc5c9a69c Revamp the claims extensions and update the client and server hosts to preserve the authentication properties using a special private claim 4 years ago
Kévin Chalet 32678867ca Remove the .NET 5.0 TFMs 4 years ago
Kévin Chalet 6f9c559682 Update the .NET SDK and bump all dependencies 4 years ago
Kévin Chalet 3ff021a3e4 Revamp HTTP response extraction to support WWW-Authenticate and enforce Content-Type validation 4 years ago
Kévin Chalet 7222d95025 React to the removal of the !! operator in C# 11 4 years ago
Kévin Chalet 255fc64caf Fix incorrect error messages in the client stack and use ?? for null checks where appropriate 4 years ago
Kévin Chalet 62f3e6ff85 Bump the .NET SDK to 7.0.100-preview.2.22153.17 and modernize the code base 4 years ago
Kévin Chalet a1215728db Implement "iss" support in the server stack and update the token validation logic to support issuers that don't end with a trailing slash 4 years ago
Kévin Chalet 0a8b416311 Remove the .NET Core 2.1 TFMs 4 years ago
Kévin Chalet 23fd89e9eb Add .NET 6.0 TFMs and bump the .NET SDK/packages to 6.0 5 years ago
Kévin Chalet deee5e5b92 Update the code base to use implicit global usings 5 years ago
Kévin Chalet 148a987a23 Update the code base to use file-scoped namespaces 5 years ago
Kévin Chalet cda55862bc Update HandleLogoutRequestContext to allow attaching custom sign-out parameters 5 years ago
Kévin Chalet e0c748f046 Introduce a simpler way to return additional parameters from the Handle*Request events that trigger a sign-in response 5 years ago
Kévin Chalet 87c99d6bc7 Validate the expiration date of a token before validating its database entry 5 years ago
Kévin Chalet 81273ec362 Decouple the token validation/generation event handlers from the request processing logic 5 years ago
Kévin Chalet f465efda19 Always require that the oi_tkn_typ claim be present if all token types are considered valid 5 years ago
Kévin Chalet 8004a82c1d Revamp the token authentication/generation mechanism and introduce new events 5 years ago
Kévin Chalet 970ce43ca7 Allow authorization requests that don't specify response_type=code when PKCE is enforced 5 years ago
Kévin Chalet 6cf1f72844 Add log messages to inform users when application claims are not included in introspection responses 5 years ago
Kévin Chalet dfc57bff56 Add an error_uri to all the errors returned by OpenIddict 5 years ago
Kévin Chalet fdfb2498b0 Add integration tests to ensure device/user codes are returned as part of sign-in operations triggered from the device endpoint 5 years ago
Kévin Chalet 22ff1fc02e Block device requests sent by clients that were not granted the device code grant permission and add integration tests for the device and verification endpoints 5 years ago
Kévin Chalet b19fdffea4 React to nullable annotations changes in .NET 5.0 and update OpenIddictParameter.ToString() to use the invariant culture 5 years ago
Kévin Chalet de1b3b4477 Remove localized error descriptions support 5 years ago
Kévin Chalet bff6ed027b Add .NET 5.0 TFMs and bump the .NET SDK to 5.0.100 6 years ago
Kévin Chalet 127e68c6d1 Stop adding a jti claim by default 5 years ago
Kévin Chalet a6dd8cf031 Revamp refresh tokens 5 years ago
Kévin Chalet 5293257e6e Add a new option allowing to make PKCE mandatory 5 years ago
Kévin Chalet 84facf0895 Introduce response type permissions, remove hybrid clients support and bring back none flow support 6 years ago
Kévin Chalet 49b30b1b97 Use ECCurve.Oid.Value when comparing EC curves 6 years ago
Johann ff0958ea67
Enable nullable reference types support in the unit/integration tests projects 6 years ago
Kévin Chalet 1e87e917a6 Use static OpenIddict.Abstractions.OpenIddictConstants where appropriate 6 years ago
Kévin Chalet 254be824c9 Introduce new properties in ProcessSignInContext to allow for more control over the token creation process 6 years ago