Kévin Chalet
|
5c1cda0ac5
|
Implement native mTLS client authentication support in the server stack
|
4 days ago |
|
Kévin Chalet
|
a0f39b4b5c
|
Polyfill ValueTask.CompletedTask and ValueTask<TResult>.CompletedTask
|
3 months ago |
|
Kévin Chalet
|
78ba0a3dec
|
Implement built-in audiences and resources indicators validation
|
8 months ago |
|
Kévin Chalet
|
8c94cb7c13
|
Implement OAuth 2.0 Token Exchange support
|
8 months ago |
|
Kévin Chalet
|
fab284f5d5
|
Update GenerateTokenContext to expose SecurityTokenDescriptor and adopt the new URI-style token type identifiers in the client, core, server and validation stacks
|
10 months ago |
|
Kévin Chalet
|
38e84b862d
|
Update OpenIddictParameter to offer ImmutableArray<string> conversions instead of string[] and clone JsonNode objects to guarantee immutability
|
11 months ago |
|
Kévin Chalet
|
e39c635631
|
Decorate the claim extensions with [OverloadResolutionPriority] and collection expressions for ImmutableArray<T>
|
11 months ago |
|
Kévin Chalet
|
b17b3fe235
|
Update the .NET Framework and .NET Standard TFMs to target ASP.NET Core/Entity Framework Core 2.3 and .NET Extensions 8.0
|
11 months ago |
|
Kévin Chalet
|
fbad1d0727
|
Bump .NET Arcade to 9.0.0-beta.25058.5
|
11 months ago |
|
Kévin Chalet
|
d4c05e2e23
|
Rename the device, cryptography, logout and verification endpoints and the associated events/event handlers
|
1 year ago |
|
Kévin Chalet
|
26fdb68773
|
Bump the .NET SDK to 8.0.200 and stop using collection expressions with ImmutableArray<T>
|
2 years ago |
|
Kévin Chalet
|
61f036fd59
|
Introduce a faster way to revoke all the tokens associated with an authorization and use bulk operations when available
|
2 years ago |
|
Kévin Chalet
|
02cca0a42e
|
Update the entire code base to use collection expressions
|
2 years ago |
|
Kévin Chalet
|
00fa3f3494
|
Allow configuring the supported client authentication methods and use invalid_client for client assertion errors
|
2 years ago |
|
Kévin Chalet
|
d6c9c0b35c
|
Add client assertions support to the server stack
|
2 years ago |
|
Kévin Chalet
|
a941660a41
|
Move the client authentication logic to the ProcessAuthentication event
|
2 years ago |
|
Kévin Chalet
|
1c382d90ba
|
Introduce application settings and support configuring token lifetimes per client
|
2 years ago |
|
Kévin Chalet
|
ef4b0f3417
|
Add explicit System.Net.Http usings
|
3 years ago |
|
Kévin Chalet
|
773594231e
|
Prevent enabling the device authorization flow when token storage is disabled (unless the degraded mode is used)
|
3 years ago |
|
Kévin Chalet
|
bfa95d094a
|
Unify the token entry properties restoration logic and fix an issue affecting device codes and ASP.NET Core Data Protection
|
3 years ago |
|
Kévin Chalet
|
bf839d8923
|
Prevent enabling the device authorization flow when token storage is disabled (unless the degraded mode is used)
|
3 years ago |
|
Kévin Chalet
|
21ccfc5e9b
|
Unify the token entry properties restoration logic and fix an issue affecting device codes and ASP.NET Core Data Protection
|
3 years ago |
|
Kévin Chalet
|
ffd47678fc
|
Reject authorization code/device authorization code grant requests containing a "scope" parameter
|
3 years ago |
|
Kévin Chalet
|
e1d7817825
|
Update the client and server stacks to redeem tokens earlier
|
4 years ago |
|
Kévin Chalet
|
ddc5c9a69c
|
Revamp the claims extensions and update the client and server hosts to preserve the authentication properties using a special private claim
|
4 years ago |
|
Kévin Chalet
|
deee5e5b92
|
Update the code base to use implicit global usings
|
4 years ago |
|
Kévin Chalet
|
148a987a23
|
Update the code base to use file-scoped namespaces
|
4 years ago |
|
Kévin Chalet
|
e0c748f046
|
Introduce a simpler way to return additional parameters from the Handle*Request events that trigger a sign-in response
|
4 years ago |
|
Kévin Chalet
|
87c99d6bc7
|
Validate the expiration date of a token before validating its database entry
|
5 years ago |
|
Kévin Chalet
|
81273ec362
|
Decouple the token validation/generation event handlers from the request processing logic
|
5 years ago |
|
Kévin Chalet
|
8004a82c1d
|
Revamp the token authentication/generation mechanism and introduce new events
|
5 years ago |
|
Kévin Chalet
|
dfc57bff56
|
Add an error_uri to all the errors returned by OpenIddict
|
5 years ago |
|
Kévin Chalet
|
a6dd8cf031
|
Revamp refresh tokens
|
5 years ago |
|
Kévin Chalet
|
5293257e6e
|
Add a new option allowing to make PKCE mandatory
|
5 years ago |
|
Kévin Chalet
|
84facf0895
|
Introduce response type permissions, remove hybrid clients support and bring back none flow support
|
5 years ago |
Johann
|
ff0958ea67
|
Enable nullable reference types support in the unit/integration tests projects
|
5 years ago |
|
Kévin Chalet
|
29f88f4b43
|
Change the resource identifiers naming scheme
|
5 years ago |
|
Kévin Chalet
|
f54ba7f6dd
|
Allow built-in scope validation to be partially executed when the degraded mode is enabled
|
5 years ago |
|
Kévin Chalet
|
8085ca176b
|
Translate all the error messages into French and remove the duplicate .resx entries
|
6 years ago |
|
Kévin Chalet
|
4e309929b5
|
Don't revoke the authorization when detecting an authorization code/refresh token replay
|
6 years ago |
|
Kévin Chalet
|
c8215868cf
|
Rename the FunctionalTests namespace suffix to IntegrationTests
|
6 years ago |
|
Kévin Chalet
|
5da84ff95a
|
Move OpenIddictResources to the OpenIddict.Abstractions root namespace
|
6 years ago |
|
Kévin Chalet
|
66f6d80298
|
Move all the assertions and log messages to OpenIddictResources
|
6 years ago |
|
Kévin Chalet
|
8feeb8698d
|
Update the entire codebase to use IStringLocalizer/ResourceManager
|
6 years ago |
|
Kévin Chalet
|
dda225a328
|
Rename OpenIddictServerOptions.UseSlidingExpiration to DisableSlidingRefreshTokenExpiration and fix the XML documentation
|
6 years ago |
|
Kévin Chalet
|
8021c15328
|
Use the generic host builder on .NET Core 3.1
|
6 years ago |
|
Kévin Chalet
|
77ca35a53f
|
Use private claims for the token creation/expiration dates and introduce new Data Protection authentication properties
|
6 years ago |
|
Kévin Chalet
|
414e05eed4
|
Create a DB entry for all types of tokens, rework reference tokens support and add token entry validation to the validation handler
|
6 years ago |
|
Kévin Chalet
|
fb92acbdaf
|
Replace OpenIddictApplicationManager.IsConfidentialAsync()/IsPublicAsync()/IsHybridAsync() by HasClientTypeAsync()
|
6 years ago |
|
Kévin Chalet
|
8b097321c3
|
Update the ValidatePrincipal handler to ensure the token type of the claims principal matches the expected type
|
6 years ago |
