Kévin Chalet
|
700dc69c2e
|
Update the userinfo endpoint/validation handler to return a 401 error when the access token is missing
|
6 years ago |
|
Kévin Chalet
|
3c323740a5
|
Update README.md
|
6 years ago |
|
Kévin Chalet
|
7a4e2e129c
|
Fix ValidateDataProtectionToken to correctly set the security principal
|
6 years ago |
|
Kévin Chalet
|
750ff208a1
|
Remove OpenIddictTokenDescriptor.Properties
|
6 years ago |
|
Kévin Chalet
|
8b097321c3
|
Update the ValidatePrincipal handler to ensure the token type of the claims principal matches the expected type
|
6 years ago |
|
Kévin Chalet
|
ac5f302b01
|
Add MapInternalClaims and handle multiple public "scope" claims for backward compatibility
|
6 years ago |
|
Kévin Chalet
|
3fc9a06e8b
|
Move the entities validation logic from the configuration classes to the EF 6.x builder class
|
6 years ago |
|
Kévin Chalet
|
560a44514b
|
Automatically add a client_id claim to access tokens and use "JWT" instead of "jwt" for the identity tokens' typ header
|
6 years ago |
|
Kévin Chalet
|
0e51de9579
|
Update README.md
|
6 years ago |
|
Kévin Chalet
|
4dcaa37eca
|
Create FUNDING.yml
|
6 years ago |
|
Kévin Chalet
|
276a9b8a7d
|
Update OpenIddict.Validation.SystemNetHttp to use ReadAsStringAsync() and rework the samples
|
6 years ago |
Drew Fleming
|
78d14adb33
|
Reject token requests containing a code_verifier when no code_challenge is attached to the authorization code
|
6 years ago |
|
Kévin Chalet
|
97dffed124
|
Implement complete WWW-Authenticate response header support
|
6 years ago |
|
Kévin Chalet
|
24ebea58f7
|
Remove the NHibernate stores
|
6 years ago |
|
Kévin Chalet
|
dae66ef974
|
Add integration tests for the PKCE enforcement feature
|
6 years ago |
|
Kévin Chalet
|
8d4c0dec68
|
Remove AddDevelopmentEncryptionCertificate()/AddEphemeralEncryptionKey() from OpenIddictValidationBuilder
|
6 years ago |
|
Kévin Chalet
|
a8f9e53f9d
|
Relax the relative URLs constraints and fix the Uri construction logic to correctly compute absolute URLs
|
6 years ago |
|
Kévin Chalet
|
e4b2150f23
|
Enforce JWT access token encryption by default
|
6 years ago |
|
Kévin Chalet
|
2aa4c45794
|
Update the server sample to use the authorization manager
|
6 years ago |
IgorHrabrov
|
201daf88ac
|
Refactor the OpenIddict primitives extensions class
|
7 years ago |
|
Kévin Chalet
|
d276af1742
|
Update the OpenIddict server ASP.NET Core/OWIN integration tests to run on .NET Framework 4.6.1
|
6 years ago |
|
Kévin Chalet
|
76a432e045
|
Port the challenge integration tests
|
6 years ago |
|
Kévin Chalet
|
3cbe3936bd
|
Port the sign-out integration tests and add validation to prevent sign-out from being triggered from unsupported endpoints
|
6 years ago |
|
Kévin Chalet
|
b2e631ccf7
|
Port the discovery endpoints integration tests
|
6 years ago |
|
Kévin Chalet
|
831a5b988a
|
Port the sign-in integration tests
|
6 years ago |
|
Kévin Chalet
|
f0c7a9420a
|
Update the EF Core entity configurations to generate primary keys on add
|
6 years ago |
|
Kévin Chalet
|
43beb64877
|
Port the end session endpoint integration tests
|
6 years ago |
|
Kévin Chalet
|
a2c65979f8
|
Port the userinfo integration tests and re-enable POST support
|
6 years ago |
|
Kévin Chalet
|
0214951ffc
|
Port the revocation endpoint tests and disable GET support
|
6 years ago |
|
Kévin Chalet
|
2e5a44f57a
|
Port the introspection endpoint tests and enable basic authentication support
|
6 years ago |
|
Kévin Chalet
|
6a3afb52c4
|
Make the supported code_challenge_methods configurable via advanced options and disable plain by default
|
6 years ago |
|
Kévin Chalet
|
a25907cd52
|
Automatically map the scope/azp access token claims to their OpenIddict private claims equivalents
|
7 years ago |
|
Kévin Chalet
|
c61f22f589
|
Port the authentication integration tests
|
7 years ago |
|
Kévin Chalet
|
27233289b6
|
Update README.md to include a compatibility matrix
|
7 years ago |
|
Kévin Chalet
|
eb35cbefb7
|
Port the token endpoint integration tests
|
7 years ago |
|
Kévin Chalet
|
d705bf7f01
|
Update .travis.yml and appveyor.yml to run integration tests
|
7 years ago |
|
Kévin Chalet
|
5361c66be1
|
Add integration tests for the authorization endpoint
|
7 years ago |
|
Kévin Chalet
|
7a164b6550
|
Reintroduce relaxed request paths comparisons
|
7 years ago |
|
Kévin Chalet
|
78637a7d77
|
Remove unnecessary IConfigureNamedOptions implementations
|
7 years ago |
|
Kévin Chalet
|
c0dc077f66
|
Update OpenIddict.Validation.DataProtection to support reference access tokens
|
7 years ago |
|
Kévin Chalet
|
a6e5cc827b
|
Remove OpenIddictServerJsonWebTokenHandler and OpenIddictValidationJsonWebTokenHandler
|
7 years ago |
|
Kévin Chalet
|
d5e449d065
|
Update the token validation logic to validate JWT tokens only once, independently of their actual type
|
7 years ago |
|
IgorHrabrov
|
80b7f21a0f
|
Introduce new unit tests in OpenIddictExtensionsTests
|
7 years ago |
|
Kévin Chalet
|
244e8fa254
|
Bump Microsoft.NETFramework.ReferenceAssemblies from 1.0.0-preview.2 to 1.0.0
|
7 years ago |
|
IgorHrabrov
|
311d9ca5a4
|
Port the AspNet.Security.OpenIdConnect.Extensions tests
|
7 years ago |
|
Kévin Chalet
|
c6d3293f2a
|
Cross-compile OpenIddict.Server.DataProtection and OpenIddict.Validation.DataProtection for .NETCoreApp3.0
|
7 years ago |
|
Kévin Chalet
|
09fe3f0955
|
Replace ImmutableDictionary<string, object> by ImmutableDictionary<string, JsonElement>
|
7 years ago |
|
Kévin Chalet
|
bef913d002
|
Replace JSON.NET by System.Text.Json, store cached requests as JWE/JWS payloads and set the typ header of JWT tokens
|
7 years ago |
|
Kévin Chalet
|
ac96bbcf09
|
Update the OpenIddict extensions to use ImmutableArray instead of ImmutableHashSet
|
7 years ago |
|
IgorHrabrov
|
ee2e139ae5
|
Port the AspNet.Security.OpenIdConnect.Primitives tests
|
7 years ago |
