230 Commits (8c644f2800e1f93abefebe952ee9bb220eb06b44)

Author SHA1 Message Date
Kévin Chalet 548cb2db95 Update OpenIddict.Core's package description 9 years ago
Kévin Chalet d02b57f04f Remove AspNet.Security.OpenIdConnect.Primitives from OpenIddict.Core's dependencies and move OpenIddict.Models to netstandard2.0 9 years ago
Kévin Chalet d7589c229e Allow custom properties marked as public to be returned as authorization/logout/token response parameters 9 years ago
Kévin Chalet 8404db2bec Fix OpenIddictAuthorizationStore.SetApplicationIdAsync() to use the correct navigation property 9 years ago
Kévin Chalet 4f4eb43487 Enable cascade delete for authorizations and tokens 9 years ago
Kévin Chalet 1bddda9cdb Add new GetApplicationIdAsync()/SetApplicationIdAsync() methods in the authorization/token managers/stores 9 years ago
Kévin Chalet 356508005a Introduce new managers/stores methods allowing to list invalid authorizations/tokens 9 years ago
Kévin Chalet 820eedfd44 Ensure that a refresh_token is correctly returned for grant_type=authorization_code requests 9 years ago
Kévin Chalet b3d406609b Update the OpenIddictBuilder methods documentation and reword the exception messages 9 years ago
Kévin Chalet 31abb05f4d Introduce timestamp properties and update the Entity Framework stores to avoid swalling DbUpdateConcurrencyException 9 years ago
Kévin Chalet 1118e77977 Update the managers/stores methods to accept and return ImmutableArray instead of raw arrays 9 years ago
Kévin Chalet cf3e649b0f Add automatic revocation of old tokens when redeeming refresh tokens with rolling tokens enabled 9 years ago
Kévin Chalet acfcef6817 Introduce a new OpenIddictAuthorization.Type property and the corresponding stores methods 9 years ago
Kévin Chalet 4f666a55ec Update the default token manager to treat access_token as a valid token type 9 years ago
Kévin Chalet 995063b60f Introduce new CountAsync()/ListAsync() methods in the stores/managers 9 years ago
Kévin Chalet dbfd9f58ab Use a crypto-secure RNG to generate the request_id parameter 9 years ago
Kévin Chalet 38e69a7034 Reword the error messages returned by the OpenIddict endpoints 9 years ago
Kévin Chalet 013c480fec Update the exception thrown by OpenIddictModelBinder and include the token identifier in the log messages when possible 9 years ago
Kévin Chalet 8488dd4f81 Introduce the ability to specify multiple callback URLs (redirect_uri and post_logout_redirect_uri) 9 years ago
Kévin Chalet 1b63058b6d Update the Entity Framework/Entity Framework Core stores to use FindAsync() instead of SingleOrDefaultAsync() when possible 9 years ago
Kévin Chalet e88a1cb2ba Allow the authorization/token status to be directly set on the descriptor 9 years ago
Kévin Chalet f03ba6d66e Add aud, exp, iat, iss and sub to the list of default claims exposed by the discovery endpoint 9 years ago
Kévin Chalet 3c17571919 Introduce built-in Entity Framework 6.x stores for OpenIddict 9 years ago
Kévin Chalet a4284c188f Move OpenIddictExtensions to the Microsoft.Extensions.DependencyInjection namespace 9 years ago
Kévin Chalet f95a17acae Introduce a new hybrid client type and prevent confidential clients from retrieving an identity token from the authorization endpoint 9 years ago
Kévin Chalet 54c0af96dd Prevent the OpenID Connect server middleware from using its default logic when deserializing reference tokens 9 years ago
Kévin Chalet 4db569e347 Update OpenIddictBuilder.DisableSlidingExpiration()'s XML documentation 9 years ago
Kévin Chalet 936d4988b0 Introduce new base classes to make custom stores easier to implement 9 years ago
Kévin Chalet d8e3986a3d Introduce OpenIddictApplicationDescriptor and add a CreateAsync() overload accepting a OpenIddictApplicationDescriptor parameter 9 years ago
Kévin Chalet bc7b158677 Update OpenIddictAuthorizationStore/OpenIddictTokenStore to avoid throwing exceptions when no application or authorization is specified 9 years ago
Kévin Chalet 4df77f181c Update the discovery endpoint to return the request_parameter_supported/request_uri_parameter_supported parameters 9 years ago
Kévin Chalet b3c0d886a7 Introduce OpenIddictOptions.Claims/OpenIddictBuilder.RegisterClaims() 9 years ago
Kévin Chalet 19633c55c6 Fix the invalid metadata returned by the discovery endpoint 9 years ago
Kévin Chalet eb6588576e Introduce a new rolling tokens option and disable it by default 9 years ago
Kévin Chalet 6b97606d0f Introduce a new option allowing to configure the registered scopes 9 years ago
Kévin Chalet 89be252838 Rename OpenIddictApplicationStore.GetHashedSecretAsync()/SetHashedSecretAsync() 9 years ago
Kévin Chalet b2f37f80f7 Update the OpenIddict managers to expose the queryable sets 9 years ago
vyfster 524fe6f055 Introduce OpenIddictToken.Start/End to expose the token validation validity period as first class properties 9 years ago
Kévin Chalet 3280e09c1d Introduce built-in reference tokens support and automatic compromised tokens revocation 9 years ago
Kévin Chalet f6197994df Add the missing Async suffix to FindByLogoutRedirectUri() and FindByRedirectUri() 9 years ago
Kévin Chalet 4741e031ed Introduce OpenIddictApplicationManager.ValidateLogoutRedirectUriAsync() and allow multiple clients to share the same logout redirect URL 9 years ago
Kévin Chalet 69ca17cb26 Update OpenIddictCustomizer to inherit from RelationalModelCustomizer instead of ModelCustomizer 9 years ago
Kévin Chalet 46dceca939 Introduce OpenIddictBuilder.AddDevelopmentSigningCertificate() 9 years ago
Kévin Chalet d39ebfe27d Introduce OpenIddictBuilder.AddEncryptingKey() 9 years ago
Kévin Chalet 5e7a5c103b Port OpenIddict to the new ASP.NET Core 2.0 authentication stack 9 years ago
Kévin Chalet 0ac6071afd React to API changes in aspnet-contrib/AspNet.Security.OpenIdConnect.Server 9 years ago
Kévin Chalet 5aa4219efe Update common.props to generate symbols packages and use DebugType=full on Windows 9 years ago
Kévin Chalet f44cf04f28 Migrate to the latest ASOS RTM nightly builds 10 years ago
Kévin Chalet 112c46deb6 Migrate to the new .csproj project system 10 years ago
Kévin Chalet 214c429fc4 Optimization: reject grant_type=authorization_code requests that don't specify a redirect_uri directly from ValidateTokenRequest 10 years ago