Kévin Chalet
|
60c886681c
|
Update the XML documentation to discourage using client secrets when possible
|
2 months ago |
|
Kévin Chalet
|
7b9fd7677f
|
Revamp the client authentication method negotiation logic and support mTLS token binding in the client, server and validation stacks
|
2 months ago |
|
Kévin Chalet
|
55cd0e94a8
|
Update all the token type validation delegates to assume that tokens that don't have a "typ" header are generic JSON Web Tokens
|
11 months ago |
|
Kévin Chalet
|
d95b32221c
|
Stop using the token endpoint URI as the client assertion audience and use the new "client-authentication+jwt" JSON Web Token type
|
11 months ago |
|
Kévin Chalet
|
42d6369910
|
Implement Pushed Authorization Requests (PAR) support and revamp the request caching feature
|
1 year ago |
|
Kévin Chalet
|
e2c3ab9057
|
Introduce a new claims issuer option in the client and validation stacks
|
2 years ago |
|
Kévin Chalet
|
9f613b1332
|
Implement a new client authentication method negotiation logic and introduce mTLS support in the client stack
|
2 years ago |
|
Kévin Chalet
|
ffb83f7878
|
Remove the obsolete comment from OpenIddictClientOptions.CodeChallengeMethods's XML documentation
|
2 years ago |
|
Kévin Chalet
|
c8f7c2c5bb
|
Declare OpenIddictClientRegistration.ConfigurationManager as a nullable property
|
2 years ago |
|
Kévin Chalet
|
02cca0a42e
|
Update the entire code base to use collection expressions
|
3 years ago |
|
Kévin Chalet
|
36b2de9681
|
Remove the obsolete members
|
3 years ago |
|
Kévin Chalet
|
7d1c704848
|
Add a built-in authentication scheme forwarding feature to the OpenIddict client OWIN and ASP.NET Core hosts
|
3 years ago |
|
Kévin Chalet
|
64ade94294
|
Support multiple registrations with the same issuer/provider name and introduce client record models
|
3 years ago |
|
Kévin Chalet
|
4685332df5
|
Add device authorization grant support in the OpenIddict client
|
3 years ago |
|
Kévin Chalet
|
6ed9eb25e1
|
Infer the redirection/post-logout redirection endpoint URIs from the redirect_uri/post_logout_redirect_uri configured in client registrations
|
3 years ago |
|
Kévin Chalet
|
8c14d4e3e9
|
Replace references to "URL" by "URI" when resource identifiers are not required to be resource locators
|
3 years ago |
|
Kévin Chalet
|
d7582544b8
|
Introduce Allow*Flow() methods in the client stack to control what grant types/response types/response modes/code challenge methods are enabled
|
3 years ago |
|
Kévin Chalet
|
dca91a000e
|
Make provider options a first-class property in OpenIddictClientRegistration
|
4 years ago |
|
Kévin Chalet
|
51c09bec8a
|
Mark most of the infrastructure types as sealed
|
4 years ago |
|
Kévin Chalet
|
8342dd20ce
|
Support resolving client registrations based on the provider name
|
4 years ago |
|
Kévin Chalet
|
a99a6cdace
|
Implement RP-initiated logout in the client stack
|
4 years ago |
|
Kévin Chalet
|
68ae22d8b5
|
Introduce a web providers companion package
|
4 years ago |
|
Kévin Chalet
|
e1436f7f59
|
Add native support for private_key_jwt in the client
|
4 years ago |
|
Kévin Chalet
|
fdf34448f2
|
Add userinfo support
|
4 years ago |
|
Kévin Chalet
|
3bf51e1600
|
Introduce the first bits of the OpenIddict client
|
7 years ago |
