Kévin Chalet
|
e1d7817825
|
Update the client and server stacks to redeem tokens earlier
|
4 years ago |
|
Kévin Chalet
|
ddc5c9a69c
|
Revamp the claims extensions and update the client and server hosts to preserve the authentication properties using a special private claim
|
4 years ago |
|
Kévin Chalet
|
deee5e5b92
|
Update the code base to use implicit global usings
|
5 years ago |
|
Kévin Chalet
|
148a987a23
|
Update the code base to use file-scoped namespaces
|
5 years ago |
|
Kévin Chalet
|
e0c748f046
|
Introduce a simpler way to return additional parameters from the Handle*Request events that trigger a sign-in response
|
5 years ago |
|
Kévin Chalet
|
87c99d6bc7
|
Validate the expiration date of a token before validating its database entry
|
5 years ago |
|
Kévin Chalet
|
81273ec362
|
Decouple the token validation/generation event handlers from the request processing logic
|
5 years ago |
|
Kévin Chalet
|
8004a82c1d
|
Revamp the token authentication/generation mechanism and introduce new events
|
5 years ago |
|
Kévin Chalet
|
dfc57bff56
|
Add an error_uri to all the errors returned by OpenIddict
|
5 years ago |
|
Kévin Chalet
|
a6dd8cf031
|
Revamp refresh tokens
|
5 years ago |
|
Kévin Chalet
|
5293257e6e
|
Add a new option allowing to make PKCE mandatory
|
5 years ago |
|
Kévin Chalet
|
84facf0895
|
Introduce response type permissions, remove hybrid clients support and bring back none flow support
|
6 years ago |
Johann
|
ff0958ea67
|
Enable nullable reference types support in the unit/integration tests projects
|
6 years ago |
|
Kévin Chalet
|
29f88f4b43
|
Change the resource identifiers naming scheme
|
6 years ago |
|
Kévin Chalet
|
f54ba7f6dd
|
Allow built-in scope validation to be partially executed when the degraded mode is enabled
|
6 years ago |
|
Kévin Chalet
|
8085ca176b
|
Translate all the error messages into French and remove the duplicate .resx entries
|
6 years ago |
|
Kévin Chalet
|
4e309929b5
|
Don't revoke the authorization when detecting an authorization code/refresh token replay
|
6 years ago |
|
Kévin Chalet
|
c8215868cf
|
Rename the FunctionalTests namespace suffix to IntegrationTests
|
6 years ago |
|
Kévin Chalet
|
5da84ff95a
|
Move OpenIddictResources to the OpenIddict.Abstractions root namespace
|
6 years ago |
|
Kévin Chalet
|
66f6d80298
|
Move all the assertions and log messages to OpenIddictResources
|
6 years ago |
|
Kévin Chalet
|
8feeb8698d
|
Update the entire codebase to use IStringLocalizer/ResourceManager
|
6 years ago |
|
Kévin Chalet
|
dda225a328
|
Rename OpenIddictServerOptions.UseSlidingExpiration to DisableSlidingRefreshTokenExpiration and fix the XML documentation
|
6 years ago |
|
Kévin Chalet
|
8021c15328
|
Use the generic host builder on .NET Core 3.1
|
6 years ago |
|
Kévin Chalet
|
77ca35a53f
|
Use private claims for the token creation/expiration dates and introduce new Data Protection authentication properties
|
6 years ago |
|
Kévin Chalet
|
414e05eed4
|
Create a DB entry for all types of tokens, rework reference tokens support and add token entry validation to the validation handler
|
6 years ago |
|
Kévin Chalet
|
fb92acbdaf
|
Replace OpenIddictApplicationManager.IsConfidentialAsync()/IsPublicAsync()/IsHybridAsync() by HasClientTypeAsync()
|
6 years ago |
|
Kévin Chalet
|
8b097321c3
|
Update the ValidatePrincipal handler to ensure the token type of the claims principal matches the expected type
|
6 years ago |
Drew Fleming
|
78d14adb33
|
Reject token requests containing a code_verifier when no code_challenge is attached to the authorization code
|
6 years ago |
|
Kévin Chalet
|
97dffed124
|
Implement complete WWW-Authenticate response header support
|
6 years ago |
|
Kévin Chalet
|
dae66ef974
|
Add integration tests for the PKCE enforcement feature
|
6 years ago |
|
Kévin Chalet
|
76a432e045
|
Port the challenge integration tests
|
6 years ago |
|
Kévin Chalet
|
831a5b988a
|
Port the sign-in integration tests
|
6 years ago |
|
Kévin Chalet
|
0214951ffc
|
Port the revocation endpoint tests and disable GET support
|
6 years ago |
|
Kévin Chalet
|
6a3afb52c4
|
Make the supported code_challenge_methods configurable via advanced options and disable plain by default
|
6 years ago |
|
Kévin Chalet
|
a25907cd52
|
Automatically map the scope/azp access token claims to their OpenIddict private claims equivalents
|
6 years ago |
|
Kévin Chalet
|
eb35cbefb7
|
Port the token endpoint integration tests
|
6 years ago |
