108 Commits (9ac9375d54bdcb50252cec2572a26163d49af656)

Author SHA1 Message Date
Dennis Haney 327cf8e3f1
Update the client authentication results to expose the access token expiration date 3 years ago
Kévin Chalet 4b9029e235 Revamp the validation handler and add client assertions support 3 years ago
Kévin Chalet d6c9c0b35c Add client assertions support to the server stack 3 years ago
Kévin Chalet 3608291542 Automatically disable userinfo validation when the openid scope is not requested 3 years ago
Kévin Chalet 6adad83968 Fix AuthenticateWithDeviceAsync() to flow the scopes attached to the request model 3 years ago
Kévin Chalet 4cd4c09509 Automatically abort interactive challenge demands when no client identifier could be resolved 3 years ago
Kévin Chalet 36b2de9681 Remove the obsolete members 3 years ago
Kévin Chalet 9deb68d433 Add an automatic claims mapping feature to the OpenIddict client stack 3 years ago
Стас 5225f766a4
Fix AttachCustomSignOutParameters to use the correct OpenIddictMessage instance 3 years ago
Kévin Chalet 7915f28d90 Store the expiration date of the backchannel/frontchannel access tokens as a token in AuthenticationProperties 3 years ago
Kévin Chalet 7d1c704848 Add a built-in authentication scheme forwarding feature to the OpenIddict client OWIN and ASP.NET Core hosts 3 years ago
Kévin Chalet 61e6fd95c3 Centralize the target frameworks in Directory.Build.props 3 years ago
Kévin Chalet 1469c8d20f Use [StringSyntax(StringSyntaxAttribute.Uri, UriKind.Absolute)] when absolute URIs are expected 3 years ago
Kévin Chalet e53a723766 Enable the "plain" code challenge method by default to increase interoperability 3 years ago
Kévin Chalet 1731efb8f0 Bring back the code comment indicating why response_type=token is never negotiated 3 years ago
Kévin Chalet fea943370c Add Salesforce to the list of supported providers 3 years ago
Kévin Chalet a37e6c65a1 Add Shopify to the list of supported providers and update the generator to generate constants for the authentication properties 3 years ago
Kévin Chalet 64ade94294 Support multiple registrations with the same issuer/provider name and introduce client record models 3 years ago
Kévin Chalet 0cf3b872b5 Update the client stack to handle errors returned while processing challenge and sign-out demands 3 years ago
Kévin Chalet 28ec4293ef Use file-scoped namespaces in the WinForms/WPF samples 3 years ago
Kévin Chalet 453f577590 Add "sub" to the list of claims whose type is checked by ValidateFrontchannelIdentityTokenWellknownClaims/ValidateBackchannelIdentityTokenWellknownClaims 3 years ago
Kévin Chalet 3bdfc20895 Catch exceptions thrown during the retrieval of the remote server configuration and generalize the use of OpenIddictHelpers.IsFatal() 3 years ago
Kévin Chalet 4685332df5 Add device authorization grant support in the OpenIddict client 3 years ago
Kévin Chalet 233c76b08e Update OpenIddictValidationServerIntegrationConfiguration to initialize OpenIddictValidationOptions.Issuer and add new SetClientUri/SetIssuer overloads 3 years ago
Kévin Chalet c85fa3f774 Add Basecamp to the list of supported providers 3 years ago
Kévin Chalet 32bd40cda8 Introduce a dynamic option allowing to disable userinfo validation 3 years ago
Kévin Chalet 2b8211a8fc Introduce dynamic options to disable nonce validation and add Dropbox to the list of supported providers 3 years ago
Kévin Chalet ff3f5efbc8 Allow JSON Web Keys that don't specify an explicit "use" and add Slack to the list of supported providers 3 years ago
Kévin Chalet ec1b122282 Allow cooperative cancellation of metadata retrieval and HTTP requests 3 years ago
Kévin Chalet 4afc6a8b57 Add Stripe to the list of supported providers 3 years ago
Kévin Chalet 9b5075e656 Replace the client Windows integration by a cross-platform package and add HttpListener and WebAuthenticationBroker support 3 years ago
Kévin Chalet eb1fcc82bd Introduce new properties to disable token rejection and don't reject authentication demands for invalid identity token hints 3 years ago
Kévin Chalet 6cfe43b3e9 Add native support for Windows Runtime 3 years ago
Kévin Chalet bf366075c2 Decorate the new APIs in OpenIddictClientService with [RequiresPreviewFeatures] 3 years ago
Kévin Chalet 532a5941ec Introduce Windows support for the client stack 3 years ago
Kévin Chalet 62a10af526 Store the provider name in the state token as a private claim and update the ASP.NET Core/OWIN hosts to return it as part of the merged principal 3 years ago
Kévin Chalet 6ed9eb25e1 Infer the redirection/post-logout redirection endpoint URIs from the redirect_uri/post_logout_redirect_uri configured in client registrations 3 years ago
Kévin Chalet 3db9a7e9db Require configuring a redirect_uri for interactive flows, even for non-OpenID Connect issuers 3 years ago
Kévin Chalet 2a31e22277 Throw an exception to abort unhandled redirection/post-logout redirection requests 3 years ago
Kévin Chalet bf8abc6e6e Support OpenIddictClientOptions.ClientUri/OpenIddictServerOptions.Issuer/OpenIddictValidationOptions.Issuer URIs created with DangerousDisablePathAndQueryCanonicalization=true 4 years ago
Kévin Chalet a1a0815cff Add XML documentation to the dispatcher/factory/handler filter classes 3 years ago
Kévin Chalet 0baa0e8399 Remove the unnecessary ValidateTokenContext.AuthorizationId property 3 years ago
Kévin Chalet bfa95d094a Unify the token entry properties restoration logic and fix an issue affecting device codes and ASP.NET Core Data Protection 3 years ago
Kévin Chalet 604889b129 Update ProcessChallengeContext/ProcessSignOutContext.Nonce's documentation to emphasize that nonces should be generated using a crypto-secure RNG 3 years ago
Kévin Chalet 22e28fc36c Add XML documentation to the dispatcher/factory/handler filter classes 3 years ago
Kévin Chalet 6e0c97262d Remove the unnecessary ValidateTokenContext.AuthorizationId property 3 years ago
Kévin Chalet 21ccfc5e9b Unify the token entry properties restoration logic and fix an issue affecting device codes and ASP.NET Core Data Protection 3 years ago
Kévin Chalet 3a80a6a4f0 Update ProcessChallengeContext/ProcessSignOutContext.Nonce's documentation to emphasize that nonces should be generated using a crypto-secure RNG 3 years ago
Kévin Chalet d8a4451603 Support OpenIddictClientOptions.ClientUri/OpenIddictServerOptions.Issuer/OpenIddictValidationOptions.Issuer URIs created with DangerousDisablePathAndQueryCanonicalization=true 4 years ago
Kévin Chalet 7751afd507 Update the order of the ResolveClientRegistrationFromStateToken handler 4 years ago