Kévin Chalet
|
1c040c8279
|
Allow confidential applications to retrieve an identity token from the authorization endpoint for compatibility purposes
|
8 years ago |
|
Kévin Chalet
|
7bca2c06ed
|
Revamp the OpenIddict services registration process and introduce new builders to separate the server APIs from the core APIs
|
8 years ago |
|
Kévin Chalet
|
ef139e23d1
|
Move the default stores to OpenIddict.Stores and the server components to OpenIddict.Server
|
8 years ago |
|
Kévin Chalet
|
b3de8b998e
|
Introduce OpenIddictScope.Resources and OpenIddictScopeManager.ListResourcesAsync()
|
8 years ago |
|
Kévin Chalet
|
cb05ebc769
|
Introduce scope permissions, add opt-in scope validation support and rework existing permissions
|
8 years ago |
|
Kévin Chalet
|
611e4a521a
|
Avoid using HttpContext.RequestAborted in the provider classes
|
8 years ago |
|
Kévin Chalet
|
6471384676
|
Remove built-in support for the none flow
|
8 years ago |
|
Kévin Chalet
|
c079027ca7
|
Introduce full support for application permissions
|
8 years ago |
|
Kévin Chalet
|
9bae6740db
|
Cache the TApplication/TToken entities in the request properties to avoid multiple stores calls
|
9 years ago |
|
Kévin Chalet
|
dbfd9f58ab
|
Use a crypto-secure RNG to generate the request_id parameter
|
9 years ago |
|
Kévin Chalet
|
38e69a7034
|
Reword the error messages returned by the OpenIddict endpoints
|
9 years ago |
|
Kévin Chalet
|
8488dd4f81
|
Introduce the ability to specify multiple callback URLs (redirect_uri and post_logout_redirect_uri)
|
9 years ago |
|
Kévin Chalet
|
f95a17acae
|
Introduce a new hybrid client type and prevent confidential clients from retrieving an identity token from the authorization endpoint
|
9 years ago |
|
Kévin Chalet
|
5e7a5c103b
|
Port OpenIddict to the new ASP.NET Core 2.0 authentication stack
|
9 years ago |
|
Kévin Chalet
|
f44cf04f28
|
Migrate to the latest ASOS RTM nightly builds
|
9 years ago |
|
Kévin Chalet
|
e36a80bc14
|
Adhere to the ASP.NET team coding style guidelines
|
9 years ago |
|
Kévin Chalet
|
ea08d4d894
|
Relax the default signing credentials policy to allow using OpenIddict in degraded mode
|
9 years ago |
|
Kévin Chalet
|
7c65c83a04
|
Introduce new IOpenIddictApplicationStore/OpenIddictApplicationManager APIs
|
10 years ago |
|
Kévin Chalet
|
ded88a4289
|
Remove the internal id_token_hint checks
|
10 years ago |
|
Kévin Chalet
|
bb1d2e07be
|
Remove OpenIddictDbContext and revamp OpenIddict/OpenIddict.Core
|
10 years ago |
|
Kévin Chalet
|
568ad7599f
|
Fix an invalid error description in OpenIddictProvider.Authentication.cs
|
10 years ago |
|
Kévin Chalet
|
cc79326fb4
|
React to API/namespace changes in aspnet-contrib/AspNet.Security.OpenIdConnect.Server
146759e15e
7f0760bbc7
|
10 years ago |
|
Kévin Chalet
|
135da2f611
|
Make transparent request caching an opt-in feature
|
10 years ago |
|
Kévin Chalet
|
53b38c93f3
|
Add the OpenIddict endpoints tests
|
10 years ago |
|
Kévin Chalet
|
d8fadc0f99
|
Decouple OpenIddict from ASP.NET Core Identity
|
10 years ago |
|
Kévin Chalet
|
6c7ff09f01
|
Remove the email/profile scopes checks
|
10 years ago |
|
Kévin Chalet
|
5fe563d80d
|
Introduce new OpenIddictOptions extensions
|
10 years ago |
|
Kévin Chalet
|
ce61ab5779
|
Relax the authorization request validation policy to allow confidential clients to partially use the hybrid flow
|
10 years ago |
|
Kévin Chalet
|
76d9b62571
|
Reject authorization requests that specify code_challenge_method=plain or use an inappropriate response type
|
10 years ago |
|
Kévin Chalet
|
113176d023
|
Extend request_id to the logout endpoint and update AuthorizationController to only flow the request_id instead of the entire payload
|
10 years ago |
|
Kévin Chalet
|
b96fa64f44
|
Update OpenIddict.Core to target the ASOS beta7 nightly builds
|
10 years ago |
|
Kévin Chalet
|
9bea36b96a
|
Fix the incorrect redirection in OpenIddictProvider.HandleAuthorizationRequest
|
10 years ago |
|
Kévin Chalet
|
05a69e3131
|
Introduce a list of supported grant types
|
10 years ago |
|
Kévin Chalet
|
574d8b770a
|
Skip scope validation when the profile corresponding to the logged in user cannot be found in the database
|
10 years ago |
|
Kévin Chalet
|
696b883d4d
|
Replace the internal error handling logic by the status code pages stack
|
10 years ago |
|
Kévin Chalet
|
289b18045b
|
Replace ISession by IDistributedCache and extend request_id handling to GET requests
|
10 years ago |
|
Kévin Chalet
|
4e225db73b
|
Remove OpenIddict.Mvc, OpenIddict.Assets and OpenIddict.Security
|
10 years ago |
|
Kévin Chalet
|
34fa0c1eb5
|
Implement POST authorization requests support using user sessions
|
10 years ago |
|
Kévin Chalet
|
9b54678e26
|
Reject authorization requests that include a request/request_uri parameter
|
10 years ago |
|
Kévin Chalet
|
3082ba9752
|
Reject authorization requests that don't specify a standard response_type/response_mode
|
10 years ago |
|
Kévin Chalet
|
dced1cd8fe
|
Migrate to the .NET Core/ASP.NET Core RTM packages
|
10 years ago |
XperiAndri
|
4a3b84ddb5
|
Introduce OpenIddictApplication.ClientId to separate the public client identifier from the internal primary key
|
10 years ago |
Massimiliano Donini
|
758e1266af
|
Introduce new log messages in OpenIddictProvider and throw exceptions when appropriate
|
10 years ago |
|
Kévin Chalet
|
1bde9c2cf5
|
Introduce OpenIddictUserManager and add OpenIddictToken/OpenIddictUser/OpenIddictApplication relationships support
|
10 years ago |
|
Kévin Chalet
|
d0dce5b33a
|
Refactor OpenIddict/OpenIddict.Core, introduce new entities and add built-in refresh token revocation
|
10 years ago |
|
Kévin Chalet
|
c60ca71f74
|
Fix OpenIddictProvider.HandleLogoutRequest to prevent throwing an ArgumentNullException when the authentication cookie is no longer valid
|
10 years ago |
|
Kévin Chalet
|
5c09b2ef8e
|
Fix OpenIddictManager.CreateIdentityAsync to avoid storing null email addresses as claims
|
10 years ago |
|
Kévin Chalet
|
4c4eb16d85
|
Implement HandleLogoutRequest to handle logout requests without requiring user consent
|
10 years ago |
|
Kévin Chalet
|
5899533ae7
|
Introduce OpenIddictConfiguration/OpenIddictServices, decouple OpenIddictStore from UserStore and add new extensions
|
10 years ago |
|
Kévin Chalet
|
63c3aa9e06
|
React to naming changes in aspnet-contrib/AspNet.Security.OpenIdConnect.Server
b766fb20d5
|
10 years ago |
