Kévin Chalet
|
f0b9d38d97
|
Convert all the scoped event handlers to singleton services
|
1 month ago |
|
Kévin Chalet
|
66670e04f9
|
Convert all the event handlers using IOpenIddict*Dispatcher to singleton services
|
1 month ago |
|
Kévin Chalet
|
5fc15473ce
|
Attach IServiceProvider to OpenIddict*Transaction and make OpenIddict*Dispatcher a singleton service
|
1 month ago |
|
Kévin Chalet
|
9780dd2e6b
|
Enable additional Meziantou.Analyzer analyzers
|
2 months ago |
|
Kévin Chalet
|
d663eced46
|
Reference Meziantou.Analyzer globally and address the existing warnings
|
2 months ago |
|
Kévin Chalet
|
4f6882bc0a
|
Introduce a new session entity and store the session identifier in the tokens
|
2 months ago |
|
Kévin Chalet
|
6623bc451f
|
Decorate the Configure() builder APIs with [EditorBrowsable(EditorBrowsableState.Advanced)]
|
2 months ago |
|
Kévin Chalet
|
e9d5a1c64f
|
Update the client/server/validation stacks to always use the CancellationToken attached to the context
|
2 months ago |
|
Kévin Chalet
|
4cc756c565
|
Normalize the code style of null-coalescing and ternary operators
|
2 months ago |
|
Kévin Chalet
|
d41aeb28fc
|
Reference Microsoft.Bcl.Memory on .NET Framework and use Base64Url instead of Base64UrlEncoder
|
3 months ago |
|
Kévin Chalet
|
8f349edbff
|
Implement ML-DSA support in the client, core, server and validation stacks
|
3 months ago |
Makar
|
8df5dc3893
|
Introduce a ValidateOnStart() method in all builders
|
4 months ago |
|
Kévin Chalet
|
83f0bb5c8f
|
Move the options validation logic to IValidateOptions<TOptions> implementations
|
4 months ago |
|
Kévin Chalet
|
e62f3fcad3
|
Remove the members obsoleted in OpenIddict 7.x
|
4 months ago |
|
Kévin Chalet
|
4636bc6848
|
Stop supporting ASP.NET Core 2.3 and remove the .NET Framework 4.6.2/4.7.2, .NET Standard 2.0/2.1 and UAP TFMs
|
5 months ago |
|
Kévin Chalet
|
e118cc4234
|
Attach the TokenValidationResult instance to the ValidateTokenContext object
|
5 months ago |
Alexander Wiedemann
|
ef6dcf7031
|
Do not overwrite the WS-Federation claims manually added by the application in the merged principal
|
6 months ago |
|
Kévin Chalet
|
2cf8f4f056
|
Introduce a new dynamic option to disable issuer parameter validation and disable it for Google
|
7 months ago |
|
Kévin Chalet
|
8673009f78
|
Update the system integration package to restore the ambient request for marshalled authentication demands
|
7 months ago |
|
Kévin Chalet
|
248d5f7cb3
|
Remove the TokenBindingCertificate property from ClientCredentialsAuthenticationRequest
|
7 months ago |
|
Kévin Chalet
|
2a6169d4c8
|
Update the XML documentation to discourage using the implicit flow and the resource owner password credentials grant
|
7 months ago |
|
Kévin Chalet
|
a37538ea4c
|
Update the XML documentation to discourage using client secrets when possible
|
7 months ago |
|
Kévin Chalet
|
63b56ccc82
|
Detect and reject reference token payloads directly used as regular tokens
|
7 months ago |
|
Kévin Chalet
|
29c6668d45
|
Change how authentication demands are marshalled and support token binding certificates/additional token request parameters for interactive flows
|
7 months ago |
|
Kévin Chalet
|
7b9fd7677f
|
Revamp the client authentication method negotiation logic and support mTLS token binding in the client, server and validation stacks
|
7 months ago |
|
Kévin Chalet
|
b28f31891f
|
Bump the key size of RSA keys used to generate ephemeral keys and development certificates
|
8 months ago |
|
Kévin Chalet
|
5c1cda0ac5
|
Implement native mTLS client authentication support in the server stack
|
8 months ago |
|
Kévin Chalet
|
721fba7e6b
|
Use the new SHA256/SHA384/SHA512.HashData() polyfills
|
9 months ago |
|
Kévin Chalet
|
e8c7f5a222
|
Use the polyfilled generic Enum.IsDefined() on .NET Framework and manually replace missed ArgumentNullException.ThrowIfNull() guards
|
9 months ago |
|
Kévin Chalet
|
9797f86194
|
Replace PolySharp by the Polyfill source package and adopt ArgumentNullException.ThrowIfNull()/ArgumentException.ThrowIfNullOrEmpty()
|
9 months ago |
|
Kévin Chalet
|
a0f39b4b5c
|
Polyfill ValueTask.CompletedTask and ValueTask<TResult>.CompletedTask
|
11 months ago |
|
Kévin Chalet
|
dc04b1706c
|
Fix the OpenIddict server Data Protection integration to use a correct token type hints lookup
|
1 year ago |
|
Kévin Chalet
|
55cd0e94a8
|
Update all the token type validation delegates to assume that tokens that don't have a "typ" header are generic JSON Web Tokens
|
1 year ago |
|
Kévin Chalet
|
91a68c161a
|
Implement client authentication support for the PAR endpoint
|
1 year ago |
|
Kévin Chalet
|
d95b32221c
|
Stop using the token endpoint URI as the client assertion audience and use the new "client-authentication+jwt" JSON Web Token type
|
1 year ago |
|
Kévin Chalet
|
78ba0a3dec
|
Implement built-in audiences and resources indicators validation
|
1 year ago |
|
Kévin Chalet
|
8c94cb7c13
|
Implement OAuth 2.0 Token Exchange support
|
1 year ago |
|
Kévin Chalet
|
b33dad15f3
|
Implement new audience and presenter validation logic as part of the ValidateToken event
|
1 year ago |
|
Kévin Chalet
|
f8553a9ee7
|
Update the MapNonStandardResponseParameters userinfo handler to avoid using OpenIddictParameter.GetNamedParameters()
|
1 year ago |
|
Kévin Chalet
|
2fc7908f93
|
Attach event identifiers to all the log messages
|
1 year ago |
|
Kévin Chalet
|
27f612d195
|
Fix the OpenIddictClientModels records to only use init setters
|
1 year ago |
|
Kévin Chalet
|
01c0d10d34
|
Reduce the number of OpenIddictParameter.GetUnnamedParameters() calls
|
1 year ago |
|
Kévin Chalet
|
4dfb0b79d0
|
Do not use OpenIddictParameter.GetNamedParameters() to extract the mTLS endpoint aliases and validate the node type of "mtls_endpoint_aliases"
|
1 year ago |
|
Kévin Chalet
|
fab284f5d5
|
Update GenerateTokenContext to expose SecurityTokenDescriptor and adopt the new URI-style token type identifiers in the client, core, server and validation stacks
|
1 year ago |
|
Kévin Chalet
|
03e1b28910
|
Do not mark the .NET 8.0 TFMs as AOT-compatible and use TypeDescriptor.RegisterType<T>()/TypeDescriptor.GetConverterFromRegisteredType() on .NET 9.0+
|
1 year ago |
|
Kévin Chalet
|
1beb7ab4c9
|
Use Uri.TryCreate() to build the base and request URIs used by OpenIddict
|
2 years ago |
|
Kévin Chalet
|
5b56eddc0c
|
Remove all the store resolvers and mark all the assemblies as trimming/Native AOT-compatible
|
2 years ago |
|
Kévin Chalet
|
bef75c4f56
|
Use the CreateAsyncScope() helper to avoid having to manually cast IServiceProvider to IAsyncDisposable
|
2 years ago |
|
Kévin Chalet
|
38e84b862d
|
Update OpenIddictParameter to offer ImmutableArray<string> conversions instead of string[] and clone JsonNode objects to guarantee immutability
|
2 years ago |
|
Kévin Chalet
|
e39c635631
|
Decorate the claim extensions with [OverloadResolutionPriority] and collection expressions for ImmutableArray<T>
|
2 years ago |
