Kévin Chalet
|
29f88f4b43
|
Change the resource identifiers naming scheme
|
6 years ago |
|
Kévin Chalet
|
3841f32f17
|
Update the entire codebase to use is null/is not null
|
6 years ago |
|
Kévin Chalet
|
a993f8273d
|
Use T? on unconstrained type parameters
|
6 years ago |
|
Kévin Chalet
|
f84a10270e
|
Revamp the authorizations/tokens pruning mechanism
|
6 years ago |
|
Kévin Chalet
|
f1c09dc454
|
Update the Set*EndpointUris methods to block relative paths starting with ~
|
6 years ago |
|
Kévin Chalet
|
de5485ceee
|
Add nullable annotations to OpenIddict.Server, OpenIddict.Server.AspNetCore, OpenIddict.Server.Owin and OpenIddict.Server.DataProtection
|
6 years ago |
|
Kévin Chalet
|
5da84ff95a
|
Move OpenIddictResources to the OpenIddict.Abstractions root namespace
|
6 years ago |
|
Kévin Chalet
|
8feeb8698d
|
Update the entire codebase to use IStringLocalizer/ResourceManager
|
6 years ago |
|
Kévin Chalet
|
0f42586959
|
Revamp the encryption/signing credentials registration mechanism
|
6 years ago |
|
Kévin Chalet
|
dda225a328
|
Rename OpenIddictServerOptions.UseSlidingExpiration to DisableSlidingRefreshTokenExpiration and fix the XML documentation
|
6 years ago |
|
Kévin Chalet
|
beb6b3e92b
|
Make authorization codes reference tokens by default, split UseReferenceTokens into two settings and allow the Data Protection to fall back to JWT for specific token types
|
6 years ago |
|
Kévin Chalet
|
5169c28d97
|
Bump Wilson to 6.7.0 and use the new SecurityKey.IsSupportedAlgorithm() API
|
6 years ago |
|
Kévin Chalet
|
ed0dc56487
|
Reunify the custom and built-in handlers collections to avoid computing the collections per-request
|
6 years ago |
|
Kévin Chalet
|
39a75284cc
|
Enable FxCop code analysis
|
6 years ago |
|
Kévin Chalet
|
2ac5b4b884
|
Update the validation OWIN integration to support active authentication and rework how errors are returned for API requests
|
6 years ago |
|
Kévin Chalet
|
f81f8fc7dd
|
Introduce introspection support and revamp the events model used by the validation handler
|
6 years ago |
|
Kévin Chalet
|
414e05eed4
|
Create a DB entry for all types of tokens, rework reference tokens support and add token entry validation to the validation handler
|
6 years ago |
|
Kévin Chalet
|
a8f9e53f9d
|
Relax the relative URLs constraints and fix the Uri construction logic to correctly compute absolute URLs
|
6 years ago |
|
Kévin Chalet
|
e4b2150f23
|
Enforce JWT access token encryption by default
|
6 years ago |
|
Kévin Chalet
|
225b8ad9f5
|
Add device code flow support
|
7 years ago |
|
Kévin Chalet
|
5627188737
|
Expose the token validation parameters used by OpenIddict.Server and rework existing handlers
|
7 years ago |
|
Kévin Chalet
|
cb7133699d
|
Add RSA Probabilistic Signature Scheme (PS256/PS384/PS512) support and fix the algorithm names used for id_token_signing_alg_values_supported
|
7 years ago |
|
Kévin Chalet
|
94e71b530b
|
Reintroduce the introspection endpoint
|
7 years ago |
|
Kévin Chalet
|
562b68362a
|
Use X509KeyStorageFlags.EphemeralKeySet on supported platforms
|
7 years ago |
|
Kévin Chalet
|
9ee38c0efb
|
Introduce the first experimental OpenIddict 3.0 bits and move the build infrastructure to Arcade
|
7 years ago |
|
Kévin Chalet
|
8ff0e97586
|
Add a new option allowing to make PKCE mandatory
|
7 years ago |
|
Kévin Chalet
|
313a4a92ec
|
Update OpenIddictValidationConfiguration to validate the default sign-in/out schemes and ensure they don't point to the OpenIddict validation handler
|
8 years ago |
|
Kévin Chalet
|
77ed793859
|
Update the OpenIddict builders to hide System.Object's root members
|
8 years ago |
|
Kévin Chalet
|
978c398d7d
|
Introduce new constants
|
8 years ago |
|
Kévin Chalet
|
9a06891507
|
Tweak the events model to force user-defined handlers to explicitly determine whether other handlers can be invoked
|
8 years ago |
|
Kévin Chalet
|
aa79131335
|
Introduce OpenIddictServerBuilder.SetRequestCachingPolicy()
|
8 years ago |
|
Kévin Chalet
|
a65deb4463
|
Update OpenIddictServerBuilder to allow calling SetAccessTokenLifetime/SetAuthorizationCodeLifetime/SetIdentityTokenLifetime/SetRefreshTokenLifetime with null values
|
8 years ago |
|
Kévin Chalet
|
3eebdb21f6
|
Update the aspnet-contrib dependencies and introduce a new OpenIddictServerBuilder.AddSigningCertificate() extension accepting a X509KeyStorageFlags parameter
|
8 years ago |
|
Kévin Chalet
|
5c40217da4
|
Replace the application provider/events by a new notifications-based system
|
8 years ago |
|
Kévin Chalet
|
7e10bedb73
|
Remove implicit permissions and introduce OpenIddictServerBuilder.IgnoreEndpointPermissions()/IgnoreGrantTypePermissions()/IgnoreScopePermissions()
|
8 years ago |
|
Kévin Chalet
|
8f9c6f109d
|
Enable scope validation and reject unidentified token/revocation requests by default
|
8 years ago |
|
Kévin Chalet
|
aa89d0c215
|
Automatically validate the authorization associated with authorization codes/refresh tokens
|
8 years ago |
|
Kévin Chalet
|
321ab58801
|
Rename OpenIddictEntityFrameworkCoreOptions/OpenIddictEntityFrameworkOptions.ContextType to DbContextType
|
8 years ago |
|
Kévin Chalet
|
91d5592d55
|
Migrate to the latest aspnet-contrib packages
|
8 years ago |
|
Kévin Chalet
|
943e9578f3
|
Introduce OpenIddictServerBuilder.RegisterProvider() to allow registering a custom OpenID Connect server provider
|
8 years ago |
|
Kévin Chalet
|
9515954ac9
|
Introduce non-generic manager interfaces and update the token server/validation services to use them
|
8 years ago |
|
Kévin Chalet
|
92524d4371
|
Introduce OpenIddictServerDefaults and OpenIddictValidationDefaults
|
8 years ago |
|
Kévin Chalet
|
7bca2c06ed
|
Revamp the OpenIddict services registration process and introduce new builders to separate the server APIs from the core APIs
|
8 years ago |
