74 Commits (c56a1a355ff01e3d717fded391aee84c0075e162)

Author SHA1 Message Date
Kévin Chalet b3de8b998e Introduce OpenIddictScope.Resources and OpenIddictScopeManager.ListResourcesAsync() 9 years ago
Kévin Chalet e0975fb283 Update the introspection endpoint to only accept access tokens with an explicit audience attached 9 years ago
Kévin Chalet cb05ebc769 Introduce scope permissions, add opt-in scope validation support and rework existing permissions 9 years ago
Kévin Chalet 5fc0f4cad8 Avoid returning an error when extending the lifetime of a refresh token or revoking previous tokens fails 9 years ago
Kévin Chalet bc6440ae9e Avoid changing the status of the token used in the token request when revoking previous tokens 9 years ago
Kévin Chalet 6471384676 Remove built-in support for the none flow 9 years ago
Kévin Chalet c079027ca7 Introduce full support for application permissions 9 years ago
Kévin Chalet 9bae6740db Cache the TApplication/TToken entities in the request properties to avoid multiple stores calls 9 years ago
Kévin Chalet a19f5e81ff Rename OpenIddictToken.Ciphertext/Hash to Payload/ReferenceId and add new methods to allow overriding the default obfuscation 9 years ago
Kévin Chalet bddfdb74be Add "state" parameters to the GetAsync()/ListAsync() stores methods to avoid closure allocations 9 years ago
Kévin Chalet 0a409a3013 Correctly restore the authentication properties of non-reference authorization codes/refresh tokens 9 years ago
Kévin Chalet d7589c229e Allow custom properties marked as public to be returned as authorization/logout/token response parameters 9 years ago
Kévin Chalet 820eedfd44 Ensure that a refresh_token is correctly returned for grant_type=authorization_code requests 9 years ago
Kévin Chalet b3d406609b Update the OpenIddictBuilder methods documentation and reword the exception messages 9 years ago
Kévin Chalet 31abb05f4d Introduce timestamp properties and update the Entity Framework stores to avoid swalling DbUpdateConcurrencyException 9 years ago
Kévin Chalet 1118e77977 Update the managers/stores methods to accept and return ImmutableArray instead of raw arrays 9 years ago
Kévin Chalet cf3e649b0f Add automatic revocation of old tokens when redeeming refresh tokens with rolling tokens enabled 9 years ago
Kévin Chalet acfcef6817 Introduce a new OpenIddictAuthorization.Type property and the corresponding stores methods 9 years ago
Kévin Chalet dbfd9f58ab Use a crypto-secure RNG to generate the request_id parameter 9 years ago
Kévin Chalet 38e69a7034 Reword the error messages returned by the OpenIddict endpoints 9 years ago
Kévin Chalet 013c480fec Update the exception thrown by OpenIddictModelBinder and include the token identifier in the log messages when possible 9 years ago
Kévin Chalet 8488dd4f81 Introduce the ability to specify multiple callback URLs (redirect_uri and post_logout_redirect_uri) 9 years ago
Kévin Chalet f03ba6d66e Add aud, exp, iat, iss and sub to the list of default claims exposed by the discovery endpoint 9 years ago
Kévin Chalet df6bafb723 Add missing license headers 9 years ago
Kévin Chalet 3c17571919 Introduce built-in Entity Framework 6.x stores for OpenIddict 9 years ago
Kévin Chalet a4284c188f Move OpenIddictExtensions to the Microsoft.Extensions.DependencyInjection namespace 9 years ago
Kévin Chalet f95a17acae Introduce a new hybrid client type and prevent confidential clients from retrieving an identity token from the authorization endpoint 9 years ago
Kévin Chalet 54c0af96dd Prevent the OpenID Connect server middleware from using its default logic when deserializing reference tokens 9 years ago
Kévin Chalet 4df77f181c Update the discovery endpoint to return the request_parameter_supported/request_uri_parameter_supported parameters 9 years ago
Kévin Chalet b3c0d886a7 Introduce OpenIddictOptions.Claims/OpenIddictBuilder.RegisterClaims() 9 years ago
Kévin Chalet 19633c55c6 Fix the invalid metadata returned by the discovery endpoint 9 years ago
Kévin Chalet eb6588576e Introduce a new rolling tokens option and disable it by default 9 years ago
Kévin Chalet 6b97606d0f Introduce a new option allowing to configure the registered scopes 9 years ago
vyfster 524fe6f055 Introduce OpenIddictToken.Start/End to expose the token validation validity period as first class properties 9 years ago
Kévin Chalet 3280e09c1d Introduce built-in reference tokens support and automatic compromised tokens revocation 9 years ago
Kévin Chalet 4741e031ed Introduce OpenIddictApplicationManager.ValidateLogoutRedirectUriAsync() and allow multiple clients to share the same logout redirect URL 9 years ago
Kévin Chalet f68fad8f01 Use Assert.Single()/Empty() instead of Assert.Equal() 9 years ago
Kévin Chalet 46dceca939 Introduce OpenIddictBuilder.AddDevelopmentSigningCertificate() 9 years ago
Kévin Chalet b7359dd93d Update OpenIddict.Tests.csproj to add a net47 target 9 years ago
Kévin Chalet d39ebfe27d Introduce OpenIddictBuilder.AddEncryptingKey() 9 years ago
Kévin Chalet 5e7a5c103b Port OpenIddict to the new ASP.NET Core 2.0 authentication stack 9 years ago
Kévin Chalet 0ac6071afd React to API changes in aspnet-contrib/AspNet.Security.OpenIdConnect.Server 9 years ago
Kévin Chalet 89d2eb39ee Migrate to the aspnet-contrib 1.0.0 RTM packages 9 years ago
Kévin Chalet 6a5a76d4b0 Use DebugType=portable for the unit tests projects 9 years ago
Kévin Chalet 93c3dec683 Migrate to Moq 4.7.8 10 years ago
Kévin Chalet ade0085193 Replace the net451 TFM by net452 in the unit tests projects 10 years ago
Kévin Chalet 112c46deb6 Migrate to the new .csproj project system 10 years ago
Kévin Chalet 214c429fc4 Optimization: reject grant_type=authorization_code requests that don't specify a redirect_uri directly from ValidateTokenRequest 10 years ago
Kévin Chalet 9970537ebf Migrate to the ASOS rc1-final packages 10 years ago
Kévin Chalet c3fcb50a8e Remove the imports sections from project.json 10 years ago