Kévin Chalet
|
8d613a5148
|
Simplify some of the client authentication policy checks
|
2 months ago |
|
Kévin Chalet
|
2a6169d4c8
|
Update the XML documentation to discourage using the implicit flow and the resource owner password credentials grant
|
2 months ago |
|
Kévin Chalet
|
7b9fd7677f
|
Revamp the client authentication method negotiation logic and support mTLS token binding in the client, server and validation stacks
|
2 months ago |
|
Kévin Chalet
|
b28f31891f
|
Bump the key size of RSA keys used to generate ephemeral keys and development certificates
|
3 months ago |
|
Kévin Chalet
|
5c1cda0ac5
|
Implement native mTLS client authentication support in the server stack
|
3 months ago |
|
Kévin Chalet
|
9797f86194
|
Replace PolySharp by the Polyfill source package and adopt ArgumentNullException.ThrowIfNull()/ArgumentException.ThrowIfNullOrEmpty()
|
4 months ago |
|
Kévin Chalet
|
a0f39b4b5c
|
Polyfill ValueTask.CompletedTask and ValueTask<TResult>.CompletedTask
|
6 months ago |
|
Kévin Chalet
|
78ba0a3dec
|
Implement built-in audiences and resources indicators validation
|
11 months ago |
|
Kévin Chalet
|
8c94cb7c13
|
Implement OAuth 2.0 Token Exchange support
|
11 months ago |
|
Kévin Chalet
|
f8553a9ee7
|
Update the MapNonStandardResponseParameters userinfo handler to avoid using OpenIddictParameter.GetNamedParameters()
|
12 months ago |
|
Kévin Chalet
|
b17b3fe235
|
Update the .NET Framework and .NET Standard TFMs to target ASP.NET Core/Entity Framework Core 2.3 and .NET Extensions 8.0
|
1 year ago |
|
Kévin Chalet
|
42d6369910
|
Implement Pushed Authorization Requests (PAR) support and revamp the request caching feature
|
1 year ago |
Ionite
|
c479b5cbda
|
Add new builder methods for registering multiple certificates and keys at once
|
1 year ago |
|
Kévin Chalet
|
e1f729ba0b
|
Validate prompt values specified in authorization requests and update the configuration endpoint to return "prompt_values_supported"
|
2 years ago |
|
Kévin Chalet
|
9f613b1332
|
Implement a new client authentication method negotiation logic and introduce mTLS support in the client stack
|
2 years ago |
|
Kévin Chalet
|
ef2e02ee23
|
Introduce a new .NET 9.0 TFM and use the new X509CertificateLoader API
|
2 years ago |
|
Kévin Chalet
|
d4c05e2e23
|
Rename the device, cryptography, logout and verification endpoints and the associated events/event handlers
|
2 years ago |
Jan Trejbal
|
2475ed3c1a
|
Use System.TimeProvider on .NET 8.0+
|
2 years ago |
|
Kévin Chalet
|
fcffb83d8f
|
Remove Uri.IsWellFormedOriginalString()/Uri.IsWellFormedUriString()
|
2 years ago |
|
Kévin Chalet
|
b32eb8c0a2
|
Make user codes fully configurable and remove token length assumptions
|
2 years ago |
|
Kévin Chalet
|
718e894d5d
|
Update the XML documentation to clarify that disabling token storage prevents the device authorization flow from being used
|
2 years ago |
|
Kévin Chalet
|
1469c8d20f
|
Use [StringSyntax(StringSyntaxAttribute.Uri, UriKind.Absolute)] when absolute URIs are expected
|
3 years ago |
|
Kévin Chalet
|
e53a723766
|
Enable the "plain" code challenge method by default to increase interoperability
|
3 years ago |
|
Kévin Chalet
|
233c76b08e
|
Update OpenIddictValidationServerIntegrationConfiguration to initialize OpenIddictValidationOptions.Issuer and add new SetClientUri/SetIssuer overloads
=
|
3 years ago |
|
Kévin Chalet
|
5e54e9be73
|
Replace Enumerable.Any() by Array.Exists()/List<T>.Exists() in OpenIddictServerBuilder
|
3 years ago |
|
Kévin Chalet
|
8c14d4e3e9
|
Replace references to "URL" by "URI" when resource identifiers are not required to be resource locators
|
3 years ago |
|
Kévin Chalet
|
2a987bcebe
|
Support relative redirect_uri/post_logout_redirect_uri in the client stack and revisit how OpenIddict handles URIs
|
3 years ago |
|
Kévin Chalet
|
1f2809c879
|
Add response_type=none support in the client stack and revamp the grant_type/response_type negotiation logic
|
3 years ago |
|
Kévin Chalet
|
51c09bec8a
|
Mark most of the infrastructure types as sealed
|
4 years ago |
|
Kévin Chalet
|
d7fea891f0
|
Unify the instantiation of cryptographic algorithms
|
4 years ago |
|
Kévin Chalet
|
e2e2c84001
|
Bump PolySharp to 1.6.0 and decorate Uri and JSON properties/parameters with [StringSyntax]
|
4 years ago |
|
Kévin Chalet
|
bc7e8cd8e3
|
Introduce new SetSigningKey() overloads in the Apple provider to make importing PEM-encoded keys easier
|
4 years ago |
|
Kévin Chalet
|
421a668948
|
Add a SetProductInformation() overload accepting an assembly from which the product information is derived
|
4 years ago |
|
Kévin Chalet
|
20005d63cc
|
Prevent adding multiple client registrations using the same issuer
|
4 years ago |
|
Kévin Chalet
|
7bb02a43bd
|
Allow determining the token format dynamically and automatically add a jti claim to JWT access tokens
|
4 years ago |
|
Kévin Chalet
|
7222d95025
|
React to the removal of the !! operator in C# 11
|
4 years ago |
|
Kévin Chalet
|
5fb23d5779
|
Use <see langword="*"/> instead of <c>*</c>
|
4 years ago |
|
Kévin Chalet
|
255fc64caf
|
Fix incorrect error messages in the client stack and use ?? for null checks where appropriate
|
4 years ago |
|
Kévin Chalet
|
62f3e6ff85
|
Bump the .NET SDK to 7.0.100-preview.2.22153.17 and modernize the code base
|
4 years ago |
|
Kévin Chalet
|
deee5e5b92
|
Update the code base to use implicit global usings
|
5 years ago |
|
Kévin Chalet
|
148a987a23
|
Update the code base to use file-scoped namespaces
|
5 years ago |
|
Kévin Chalet
|
95ad492100
|
Update OpenIddictServerBuilder.AllowImplicitFlow()/AllowPasswordFlow() to indicate that the implicit and password flows are not recommended for new applications
|
5 years ago |
|
Kévin Chalet
|
b88ba18459
|
Allow null/empty passwords in the AddEncryptionCertificate()/AddSigningCertificate() helpers
|
5 years ago |
|
Kévin Chalet
|
157afeb7f2
|
Rework the encryption/signing development certificates mechanism to support multiple certificates
|
5 years ago |
|
Kévin Chalet
|
ada6f2b292
|
Rework the encryption/signing development certificates mechanism to support multiple certificates
|
5 years ago |
|
Kévin Chalet
|
7e1c9dd130
|
Introduce a new Import method in the handler descriptors
|
6 years ago |
Noah Stahl
|
c27cac977e
|
Add encryption key size validation
|
6 years ago |
|
Kévin Chalet
|
a6dd8cf031
|
Revamp refresh tokens
|
6 years ago |
|
Kévin Chalet
|
5293257e6e
|
Add a new option allowing to make PKCE mandatory
|
6 years ago |
|
Kévin Chalet
|
84facf0895
|
Introduce response type permissions, remove hybrid clients support and bring back none flow support
|
6 years ago |
