Kévin Chalet
|
7b9fd7677f
|
Revamp the client authentication method negotiation logic and support mTLS token binding in the client, server and validation stacks
|
2 months ago |
|
Kévin Chalet
|
5c1cda0ac5
|
Implement native mTLS client authentication support in the server stack
|
3 months ago |
|
Kévin Chalet
|
9797f86194
|
Replace PolySharp by the Polyfill source package and adopt ArgumentNullException.ThrowIfNull()/ArgumentException.ThrowIfNullOrEmpty()
|
4 months ago |
|
Kévin Chalet
|
a0f39b4b5c
|
Polyfill ValueTask.CompletedTask and ValueTask<TResult>.CompletedTask
|
6 months ago |
|
Kévin Chalet
|
ea09c7f2fb
|
Update the console sandbox to use the Google integration
|
10 months ago |
|
Kévin Chalet
|
91a68c161a
|
Implement client authentication support for the PAR endpoint
|
11 months ago |
|
Kévin Chalet
|
d95b32221c
|
Stop using the token endpoint URI as the client assertion audience and use the new "client-authentication+jwt" JSON Web Token type
|
11 months ago |
|
Kévin Chalet
|
8c94cb7c13
|
Implement OAuth 2.0 Token Exchange support
|
11 months ago |
|
Kévin Chalet
|
b33dad15f3
|
Implement new audience and presenter validation logic as part of the ValidateToken event
|
11 months ago |
|
Kévin Chalet
|
f8553a9ee7
|
Update the MapNonStandardResponseParameters userinfo handler to avoid using OpenIddictParameter.GetNamedParameters()
|
12 months ago |
|
Kévin Chalet
|
2fc7908f93
|
Attach event identifiers to all the log messages
|
12 months ago |
|
Kévin Chalet
|
fab284f5d5
|
Update GenerateTokenContext to expose SecurityTokenDescriptor and adopt the new URI-style token type identifiers in the client, core, server and validation stacks
|
1 year ago |
|
Kévin Chalet
|
1beb7ab4c9
|
Use Uri.TryCreate() to build the base and request URIs used by OpenIddict
|
1 year ago |
|
Kévin Chalet
|
5b56eddc0c
|
Remove all the store resolvers and mark all the assemblies as trimming/Native AOT-compatible
|
1 year ago |
|
Kévin Chalet
|
e39c635631
|
Decorate the claim extensions with [OverloadResolutionPriority] and collection expressions for ImmutableArray<T>
|
1 year ago |
|
Kévin Chalet
|
b17b3fe235
|
Update the .NET Framework and .NET Standard TFMs to target ASP.NET Core/Entity Framework Core 2.3 and .NET Extensions 8.0
|
1 year ago |
|
Kévin Chalet
|
42d6369910
|
Implement Pushed Authorization Requests (PAR) support and revamp the request caching feature
|
1 year ago |
|
Kévin Chalet
|
ff752efe09
|
Automatically normalize "amr" claims in identity tokens to ensure a JSON array is always returned
|
1 year ago |
|
Kévin Chalet
|
d4c05e2e23
|
Rename the device, cryptography, logout and verification endpoints and the associated events/event handlers
|
2 years ago |
Jan Trejbal
|
2475ed3c1a
|
Use System.TimeProvider on .NET 8.0+
|
2 years ago |
|
Kévin Chalet
|
38d87b2945
|
Allow using unique JSON_ARRAY claims to represent arrays of strings
|
2 years ago |
|
Kévin Chalet
|
fcffb83d8f
|
Remove Uri.IsWellFormedOriginalString()/Uri.IsWellFormedUriString()
|
2 years ago |
|
Kévin Chalet
|
b32eb8c0a2
|
Make user codes fully configurable and remove token length assumptions
|
2 years ago |
|
Kévin Chalet
|
26fdb68773
|
Bump the .NET SDK to 8.0.200 and stop using collection expressions with ImmutableArray<T>
|
2 years ago |
|
Kévin Chalet
|
a5d2d867ba
|
Use List<T> instead of Enumerable.Any() in the samples
|
2 years ago |
|
Kévin Chalet
|
6e1c123dd8
|
Normalize introspection handling in the client and validation stacks
|
2 years ago |
|
Kévin Chalet
|
d2a35e844f
|
Update the client console sandbox to support refreshing the user authentication
|
2 years ago |
|
Kévin Chalet
|
24e242e7b3
|
Fix the client assertion validation logic to avoid rejecting assertions that don't specify an "iat" claim
|
2 years ago |
|
Kévin Chalet
|
cf3e960055
|
Abort sign-in demands whose principal contains a standard claim with an invalid claim value type
|
2 years ago |
|
Kévin Chalet
|
3753229267
|
Update the client and server stacks to automatically restore the authentication properties and attach them to the authentication context
|
2 years ago |
|
Kévin Chalet
|
02cca0a42e
|
Update the entire code base to use collection expressions
|
3 years ago |
|
Kévin Chalet
|
4b9029e235
|
Revamp the validation handler and add client assertions support
|
3 years ago |
|
Kévin Chalet
|
00fa3f3494
|
Allow configuring the supported client authentication methods and use invalid_client for client assertion errors
|
3 years ago |
|
Kévin Chalet
|
d6c9c0b35c
|
Add client assertions support to the server stack
|
3 years ago |
|
Kévin Chalet
|
a941660a41
|
Move the client authentication logic to the ProcessAuthentication event
|
3 years ago |
|
Kévin Chalet
|
1c382d90ba
|
Introduce application settings and support configuring token lifetimes per client
|
3 years ago |
|
Kévin Chalet
|
4685332df5
|
Add device authorization grant support in the OpenIddict client
|
3 years ago |
|
Kévin Chalet
|
eb1fcc82bd
|
Introduce new properties to disable token rejection and don't reject authentication demands for invalid identity token hints
|
3 years ago |
|
Kévin Chalet
|
bfa95d094a
|
Unify the token entry properties restoration logic and fix an issue affecting device codes and ASP.NET Core Data Protection
|
3 years ago |
|
Kévin Chalet
|
21ccfc5e9b
|
Unify the token entry properties restoration logic and fix an issue affecting device codes and ASP.NET Core Data Protection
|
3 years ago |
|
Kévin Chalet
|
8c14d4e3e9
|
Replace references to "URL" by "URI" when resource identifiers are not required to be resource locators
|
3 years ago |
|
Kévin Chalet
|
2a987bcebe
|
Support relative redirect_uri/post_logout_redirect_uri in the client stack and revisit how OpenIddict handles URIs
|
3 years ago |
|
Kévin Chalet
|
d7582544b8
|
Introduce Allow*Flow() methods in the client stack to control what grant types/response types/response modes/code challenge methods are enabled
|
3 years ago |
|
Kévin Chalet
|
51c09bec8a
|
Mark most of the infrastructure types as sealed
|
4 years ago |
|
Kévin Chalet
|
efc4ff1c72
|
Rework the correlation cookie mechanism to use the nonce as the cookie name and store the request forgery protection in the cookie value
|
4 years ago |
|
Kévin Chalet
|
d7fea891f0
|
Unify the instantiation of cryptographic algorithms
|
4 years ago |
|
Kévin Chalet
|
7ca9be1428
|
Reference PolySharp and replace Substring() calls by the range syntax
|
4 years ago |
|
Kévin Chalet
|
43e75cd49f
|
Update the ProcessChallenge/SignIn/SignOut events to expose the host authentication properties
|
4 years ago |
|
Kévin Chalet
|
4ef3c51a01
|
Implement client_id support for logout requests and native id_token_hint validation for both authorization and logout requests
|
4 years ago |
|
Kévin Chalet
|
e1d7817825
|
Update the client and server stacks to redeem tokens earlier
|
4 years ago |
