Dennis Haney
|
327cf8e3f1
|
Update the client authentication results to expose the access token expiration date
|
3 years ago |
Kévin Chalet
|
4b9029e235
|
Revamp the validation handler and add client assertions support
|
3 years ago |
Kévin Chalet
|
d6c9c0b35c
|
Add client assertions support to the server stack
|
3 years ago |
Kévin Chalet
|
3608291542
|
Automatically disable userinfo validation when the openid scope is not requested
|
3 years ago |
Kévin Chalet
|
6adad83968
|
Fix AuthenticateWithDeviceAsync() to flow the scopes attached to the request model
|
3 years ago |
Kévin Chalet
|
4cd4c09509
|
Automatically abort interactive challenge demands when no client identifier could be resolved
|
3 years ago |
Kévin Chalet
|
36b2de9681
|
Remove the obsolete members
|
3 years ago |
Kévin Chalet
|
9deb68d433
|
Add an automatic claims mapping feature to the OpenIddict client stack
|
3 years ago |
Стас
|
5225f766a4
|
Fix AttachCustomSignOutParameters to use the correct OpenIddictMessage instance
|
3 years ago |
Kévin Chalet
|
7915f28d90
|
Store the expiration date of the backchannel/frontchannel access tokens as a token in AuthenticationProperties
|
3 years ago |
Kévin Chalet
|
7d1c704848
|
Add a built-in authentication scheme forwarding feature to the OpenIddict client OWIN and ASP.NET Core hosts
|
3 years ago |
Kévin Chalet
|
61e6fd95c3
|
Centralize the target frameworks in Directory.Build.props
|
3 years ago |
Kévin Chalet
|
1469c8d20f
|
Use [StringSyntax(StringSyntaxAttribute.Uri, UriKind.Absolute)] when absolute URIs are expected
|
3 years ago |
Kévin Chalet
|
e53a723766
|
Enable the "plain" code challenge method by default to increase interoperability
|
3 years ago |
Kévin Chalet
|
1731efb8f0
|
Bring back the code comment indicating why response_type=token is never negotiated
|
3 years ago |
Kévin Chalet
|
fea943370c
|
Add Salesforce to the list of supported providers
|
3 years ago |
Kévin Chalet
|
a37e6c65a1
|
Add Shopify to the list of supported providers and update the generator to generate constants for the authentication properties
|
3 years ago |
Kévin Chalet
|
64ade94294
|
Support multiple registrations with the same issuer/provider name and introduce client record models
|
3 years ago |
Kévin Chalet
|
0cf3b872b5
|
Update the client stack to handle errors returned while processing challenge and sign-out demands
|
3 years ago |
Kévin Chalet
|
28ec4293ef
|
Use file-scoped namespaces in the WinForms/WPF samples
|
3 years ago |
Kévin Chalet
|
453f577590
|
Add "sub" to the list of claims whose type is checked by ValidateFrontchannelIdentityTokenWellknownClaims/ValidateBackchannelIdentityTokenWellknownClaims
|
3 years ago |
Kévin Chalet
|
3bdfc20895
|
Catch exceptions thrown during the retrieval of the remote server configuration and generalize the use of OpenIddictHelpers.IsFatal()
|
3 years ago |
Kévin Chalet
|
4685332df5
|
Add device authorization grant support in the OpenIddict client
|
3 years ago |
Kévin Chalet
|
233c76b08e
|
Update OpenIddictValidationServerIntegrationConfiguration to initialize OpenIddictValidationOptions.Issuer and add new SetClientUri/SetIssuer overloads
=
|
3 years ago |
Kévin Chalet
|
c85fa3f774
|
Add Basecamp to the list of supported providers
|
3 years ago |
Kévin Chalet
|
32bd40cda8
|
Introduce a dynamic option allowing to disable userinfo validation
|
3 years ago |
Kévin Chalet
|
2b8211a8fc
|
Introduce dynamic options to disable nonce validation and add Dropbox to the list of supported providers
|
3 years ago |
Kévin Chalet
|
ff3f5efbc8
|
Allow JSON Web Keys that don't specify an explicit "use" and add Slack to the list of supported providers
|
3 years ago |
Kévin Chalet
|
ec1b122282
|
Allow cooperative cancellation of metadata retrieval and HTTP requests
|
3 years ago |
Kévin Chalet
|
4afc6a8b57
|
Add Stripe to the list of supported providers
|
3 years ago |
Kévin Chalet
|
9b5075e656
|
Replace the client Windows integration by a cross-platform package and add HttpListener and WebAuthenticationBroker support
|
3 years ago |
Kévin Chalet
|
eb1fcc82bd
|
Introduce new properties to disable token rejection and don't reject authentication demands for invalid identity token hints
|
3 years ago |
Kévin Chalet
|
6cfe43b3e9
|
Add native support for Windows Runtime
|
3 years ago |
Kévin Chalet
|
bf366075c2
|
Decorate the new APIs in OpenIddictClientService with [RequiresPreviewFeatures]
|
3 years ago |
Kévin Chalet
|
532a5941ec
|
Introduce Windows support for the client stack
|
3 years ago |
Kévin Chalet
|
62a10af526
|
Store the provider name in the state token as a private claim and update the ASP.NET Core/OWIN hosts to return it as part of the merged principal
|
3 years ago |
Kévin Chalet
|
6ed9eb25e1
|
Infer the redirection/post-logout redirection endpoint URIs from the redirect_uri/post_logout_redirect_uri configured in client registrations
|
3 years ago |
Kévin Chalet
|
3db9a7e9db
|
Require configuring a redirect_uri for interactive flows, even for non-OpenID Connect issuers
|
3 years ago |
Kévin Chalet
|
2a31e22277
|
Throw an exception to abort unhandled redirection/post-logout redirection requests
|
3 years ago |
Kévin Chalet
|
bf8abc6e6e
|
Support OpenIddictClientOptions.ClientUri/OpenIddictServerOptions.Issuer/OpenIddictValidationOptions.Issuer URIs created with DangerousDisablePathAndQueryCanonicalization=true
|
4 years ago |
Kévin Chalet
|
a1a0815cff
|
Add XML documentation to the dispatcher/factory/handler filter classes
|
3 years ago |
Kévin Chalet
|
0baa0e8399
|
Remove the unnecessary ValidateTokenContext.AuthorizationId property
|
3 years ago |
Kévin Chalet
|
bfa95d094a
|
Unify the token entry properties restoration logic and fix an issue affecting device codes and ASP.NET Core Data Protection
|
3 years ago |
Kévin Chalet
|
604889b129
|
Update ProcessChallengeContext/ProcessSignOutContext.Nonce's documentation to emphasize that nonces should be generated using a crypto-secure RNG
|
3 years ago |
Kévin Chalet
|
22e28fc36c
|
Add XML documentation to the dispatcher/factory/handler filter classes
|
3 years ago |
Kévin Chalet
|
6e0c97262d
|
Remove the unnecessary ValidateTokenContext.AuthorizationId property
|
3 years ago |
Kévin Chalet
|
21ccfc5e9b
|
Unify the token entry properties restoration logic and fix an issue affecting device codes and ASP.NET Core Data Protection
|
3 years ago |
Kévin Chalet
|
3a80a6a4f0
|
Update ProcessChallengeContext/ProcessSignOutContext.Nonce's documentation to emphasize that nonces should be generated using a crypto-secure RNG
|
3 years ago |
Kévin Chalet
|
d8a4451603
|
Support OpenIddictClientOptions.ClientUri/OpenIddictServerOptions.Issuer/OpenIddictValidationOptions.Issuer URIs created with DangerousDisablePathAndQueryCanonicalization=true
|
4 years ago |
Kévin Chalet
|
7751afd507
|
Update the order of the ResolveClientRegistrationFromStateToken handler
|
4 years ago |