Kévin Chalet
|
62a10af526
|
Store the provider name in the state token as a private claim and update the ASP.NET Core/OWIN hosts to return it as part of the merged principal
|
4 years ago |
|
Kévin Chalet
|
6ed9eb25e1
|
Infer the redirection/post-logout redirection endpoint URIs from the redirect_uri/post_logout_redirect_uri configured in client registrations
|
4 years ago |
|
Kévin Chalet
|
3db9a7e9db
|
Require configuring a redirect_uri for interactive flows, even for non-OpenID Connect issuers
|
4 years ago |
|
Kévin Chalet
|
2a31e22277
|
Throw an exception to abort unhandled redirection/post-logout redirection requests
|
4 years ago |
|
Kévin Chalet
|
bf8abc6e6e
|
Support OpenIddictClientOptions.ClientUri/OpenIddictServerOptions.Issuer/OpenIddictValidationOptions.Issuer URIs created with DangerousDisablePathAndQueryCanonicalization=true
|
4 years ago |
|
Kévin Chalet
|
a1a0815cff
|
Add XML documentation to the dispatcher/factory/handler filter classes
|
4 years ago |
|
Kévin Chalet
|
0baa0e8399
|
Remove the unnecessary ValidateTokenContext.AuthorizationId property
|
4 years ago |
|
Kévin Chalet
|
bfa95d094a
|
Unify the token entry properties restoration logic and fix an issue affecting device codes and ASP.NET Core Data Protection
|
4 years ago |
|
Kévin Chalet
|
604889b129
|
Update ProcessChallengeContext/ProcessSignOutContext.Nonce's documentation to emphasize that nonces should be generated using a crypto-secure RNG
|
4 years ago |
|
Kévin Chalet
|
22e28fc36c
|
Add XML documentation to the dispatcher/factory/handler filter classes
|
4 years ago |
|
Kévin Chalet
|
6e0c97262d
|
Remove the unnecessary ValidateTokenContext.AuthorizationId property
|
4 years ago |
|
Kévin Chalet
|
21ccfc5e9b
|
Unify the token entry properties restoration logic and fix an issue affecting device codes and ASP.NET Core Data Protection
|
4 years ago |
|
Kévin Chalet
|
3a80a6a4f0
|
Update ProcessChallengeContext/ProcessSignOutContext.Nonce's documentation to emphasize that nonces should be generated using a crypto-secure RNG
|
4 years ago |
|
Kévin Chalet
|
d8a4451603
|
Support OpenIddictClientOptions.ClientUri/OpenIddictServerOptions.Issuer/OpenIddictValidationOptions.Issuer URIs created with DangerousDisablePathAndQueryCanonicalization=true
|
4 years ago |
|
Kévin Chalet
|
7751afd507
|
Update the order of the ResolveClientRegistrationFromStateToken handler
|
4 years ago |
|
Kévin Chalet
|
8c14d4e3e9
|
Replace references to "URL" by "URI" when resource identifiers are not required to be resource locators
|
4 years ago |
|
Kévin Chalet
|
2a987bcebe
|
Support relative redirect_uri/post_logout_redirect_uri in the client stack and revisit how OpenIddict handles URIs
|
4 years ago |
|
Kévin Chalet
|
38e52b10f3
|
Add new OpenIddictClientService overloads accepting a provider name instead of an issuer URI
|
4 years ago |
|
Kévin Chalet
|
1f2809c879
|
Add response_type=none support in the client stack and revamp the grant_type/response_type negotiation logic
|
4 years ago |
|
Kévin Chalet
|
fca788914c
|
Abort authentication demands with an explicit grant type if it's not listed as supported in the server configuration
|
4 years ago |
|
Kévin Chalet
|
d7582544b8
|
Introduce Allow*Flow() methods in the client stack to control what grant types/response types/response modes/code challenge methods are enabled
|
4 years ago |
|
Kévin Chalet
|
cc121c061d
|
Replace Portable.BouncyCastle by BouncyCastle.Cryptography
|
4 years ago |
|
Kévin Chalet
|
8717a068ad
|
Decorate advanced infrastructure types with [EditorBrowsable(EditorBrowsableState.Advanced)] or [EditorBrowsable(EditorBrowsableState.Never)]
|
4 years ago |
|
Kévin Chalet
|
828b0dbd08
|
Rework the AuthenticateWithClientCredentialsAsync()/AuthenticateWithPasswordAsync()/AuthenticateWithRefreshTokenAsync() APIs to be easier to use and more flexible
|
4 years ago |
|
Kévin Chalet
|
dca91a000e
|
Make provider options a first-class property in OpenIddictClientRegistration
|
4 years ago |
|
Kévin Chalet
|
51c09bec8a
|
Mark most of the infrastructure types as sealed
|
4 years ago |
|
Kévin Chalet
|
1846acc3da
|
Bump the .NET 7.0 SDK and dependencies to 7.0 RTM
|
4 years ago |
|
Kévin Chalet
|
efc4ff1c72
|
Rework the correlation cookie mechanism to use the nonce as the cookie name and store the request forgery protection in the cookie value
|
4 years ago |
|
Kévin Chalet
|
75b17c94f6
|
Start testing OpenIddict on .NET 7.0
|
4 years ago |
|
Kévin Chalet
|
d7fea891f0
|
Unify the instantiation of cryptographic algorithms
|
4 years ago |
|
Kévin Chalet
|
e2e2c84001
|
Bump PolySharp to 1.6.0 and decorate Uri and JSON properties/parameters with [StringSyntax]
|
4 years ago |
|
Kévin Chalet
|
7ca9be1428
|
Reference PolySharp and replace Substring() calls by the range syntax
|
4 years ago |
|
Kévin Chalet
|
6c963c80d0
|
Adjust nullable annotations
|
4 years ago |
|
Kévin Chalet
|
e3b4337b85
|
Revamp Packages.props and bump .NET and third-party dependencies
|
4 years ago |
|
Kévin Chalet
|
2b333272bf
|
Update the client stack to normalize authorization error responses
|
4 years ago |
|
Kévin Chalet
|
77a8a5c0c7
|
Revamp the handling of errors returned by the remote authorization server
|
4 years ago |
|
Kévin Chalet
|
43e75cd49f
|
Update the ProcessChallenge/SignIn/SignOut events to expose the host authentication properties
|
4 years ago |
|
Kévin Chalet
|
8342dd20ce
|
Support resolving client registrations based on the provider name
|
4 years ago |
|
Kévin Chalet
|
bc7e8cd8e3
|
Introduce new SetSigningKey() overloads in the Apple provider to make importing PEM-encoded keys easier
|
4 years ago |
|
Kévin Chalet
|
2a7becd6d3
|
Update the web integration to use native options and revamp how user agents are generated
|
4 years ago |
|
Kévin Chalet
|
20005d63cc
|
Prevent adding multiple client registrations using the same issuer
|
4 years ago |
|
Kévin Chalet
|
9cb88782f5
|
Make the issuer optional for sign-out operations when only one registration was added
|
4 years ago |
|
Kévin Chalet
|
a99a6cdace
|
Implement RP-initiated logout in the client stack
|
4 years ago |
|
Kévin Chalet
|
e1d7817825
|
Update the client and server stacks to redeem tokens earlier
|
4 years ago |
|
Kévin Chalet
|
026a4b4fbd
|
Use static usings for the OpenIddict exceptions
|
4 years ago |
|
Kévin Chalet
|
3b801f0326
|
Rename GenericException to ProtocolException
|
4 years ago |
|
Kévin Chalet
|
69cd85e552
|
Make the "rfp" validation logic mandatory and move common helpers to OpenIddictHelpers
|
4 years ago |
|
Kévin Chalet
|
5045461b93
|
Update handlers that ensure tokens are not missing to use a higher order
|
4 years ago |
|
Kévin Chalet
|
9c1bdfb288
|
Update the client and validation stacks to log requests and responses
|
4 years ago |
|
Kévin Chalet
|
b50a086862
|
Update the client stack to support the client credentials grant
|
4 years ago |
