Kévin Chalet
|
02cca0a42e
|
Update the entire code base to use collection expressions
|
2 years ago |
|
Kévin Chalet
|
a941660a41
|
Move the client authentication logic to the ProcessAuthentication event
|
2 years ago |
|
Kévin Chalet
|
1c382d90ba
|
Introduce application settings and support configuring token lifetimes per client
|
2 years ago |
|
Kévin Chalet
|
bfa95d094a
|
Unify the token entry properties restoration logic and fix an issue affecting device codes and ASP.NET Core Data Protection
|
3 years ago |
|
Kévin Chalet
|
21ccfc5e9b
|
Unify the token entry properties restoration logic and fix an issue affecting device codes and ASP.NET Core Data Protection
|
3 years ago |
|
Kévin Chalet
|
8c14d4e3e9
|
Replace references to "URL" by "URI" when resource identifiers are not required to be resource locators
|
3 years ago |
|
Kévin Chalet
|
2a987bcebe
|
Support relative redirect_uri/post_logout_redirect_uri in the client stack and revisit how OpenIddict handles URIs
|
3 years ago |
|
Kévin Chalet
|
779a8524e4
|
Fix global.json to reference Arcade 7.0.0-beta.22513.4
|
3 years ago |
|
Kévin Chalet
|
a1f84d38d0
|
Add integration tests projects for the client and validation stacks and use a high order for the AttachCustom*Parameters handlers
|
4 years ago |
|
Kévin Chalet
|
a1215728db
|
Implement "iss" support in the server stack and update the token validation logic to support issuers that don't end with a trailing slash
|
4 years ago |
|
Kévin Chalet
|
deee5e5b92
|
Update the code base to use implicit global usings
|
4 years ago |
|
Kévin Chalet
|
148a987a23
|
Update the code base to use file-scoped namespaces
|
4 years ago |
|
Kévin Chalet
|
f465efda19
|
Always require that the oi_tkn_typ claim be present if all token types are considered valid
|
5 years ago |
|
Kévin Chalet
|
8004a82c1d
|
Revamp the token authentication/generation mechanism and introduce new events
|
5 years ago |
|
Kévin Chalet
|
dfc57bff56
|
Add an error_uri to all the errors returned by OpenIddict
|
5 years ago |
|
Kévin Chalet
|
fdfb2498b0
|
Add integration tests to ensure device/user codes are returned as part of sign-in operations triggered from the device endpoint
|
5 years ago |
|
Kévin Chalet
|
22ff1fc02e
|
Block device requests sent by clients that were not granted the device code grant permission and add integration tests for the device and verification endpoints
|
5 years ago |
|
Kévin Chalet
|
de1b3b4477
|
Remove localized error descriptions support
|
5 years ago |
|
Kévin Chalet
|
a6dd8cf031
|
Revamp refresh tokens
|
5 years ago |
|
Kévin Chalet
|
84facf0895
|
Introduce response type permissions, remove hybrid clients support and bring back none flow support
|
5 years ago |
Johann
|
ff0958ea67
|
Enable nullable reference types support in the unit/integration tests projects
|
5 years ago |
|
Kévin Chalet
|
254be824c9
|
Introduce new properties in ProcessSignInContext to allow for more control over the token creation process
|
5 years ago |
|
Kévin Chalet
|
29f88f4b43
|
Change the resource identifiers naming scheme
|
5 years ago |
|
Kévin Chalet
|
f84a10270e
|
Revamp the authorizations/tokens pruning mechanism
|
6 years ago |
|
Kévin Chalet
|
5f164309cd
|
Automatically disable the incompatible options when enabling the degraded mode
|
6 years ago |
|
Kévin Chalet
|
c8215868cf
|
Rename the FunctionalTests namespace suffix to IntegrationTests
|
6 years ago |
|
Kévin Chalet
|
5da84ff95a
|
Move OpenIddictResources to the OpenIddict.Abstractions root namespace
|
6 years ago |
|
Kévin Chalet
|
8feeb8698d
|
Update the entire codebase to use IStringLocalizer/ResourceManager
|
6 years ago |
|
Kévin Chalet
|
dda225a328
|
Rename OpenIddictServerOptions.UseSlidingExpiration to DisableSlidingRefreshTokenExpiration and fix the XML documentation
|
6 years ago |
|
Kévin Chalet
|
e0909c87a8
|
Update the logout endpoint logic to not trigger a sign-out response by default and reword some of the exception messages
|
6 years ago |
Martin Costello
|
a92f48dd1c
|
Send integration test logs to xUnit output
|
6 years ago |
|
Kévin Chalet
|
beb6b3e92b
|
Make authorization codes reference tokens by default, split UseReferenceTokens into two settings and allow the Data Protection to fall back to JWT for specific token types
|
6 years ago |
|
Kévin Chalet
|
fb406560c6
|
Normalize multiple public scope claims to a single spare-separated claim
|
6 years ago |
|
Kévin Chalet
|
8021c15328
|
Use the generic host builder on .NET Core 3.1
|
6 years ago |
|
Kévin Chalet
|
77ca35a53f
|
Use private claims for the token creation/expiration dates and introduce new Data Protection authentication properties
|
6 years ago |
|
Kévin Chalet
|
f81f8fc7dd
|
Introduce introspection support and revamp the events model used by the validation handler
|
6 years ago |
|
Kévin Chalet
|
be23e18023
|
Leverage IdentityModel's new TypeValidator mechanism to allow validating JWT tokens issued by OpenIddict 1.x/2.x
|
6 years ago |
|
Kévin Chalet
|
414e05eed4
|
Create a DB entry for all types of tokens, rework reference tokens support and add token entry validation to the validation handler
|
6 years ago |
|
Kévin Chalet
|
fb92acbdaf
|
Replace OpenIddictApplicationManager.IsConfidentialAsync()/IsPublicAsync()/IsHybridAsync() by HasClientTypeAsync()
|
6 years ago |
|
Kévin Chalet
|
fd63da76df
|
Allow returning custom challenge/sign-in/sign-out parameters via AuthenticationProperties.Parameters
|
6 years ago |
|
Kévin Chalet
|
8b097321c3
|
Update the ValidatePrincipal handler to ensure the token type of the claims principal matches the expected type
|
6 years ago |
|
Kévin Chalet
|
ac5f302b01
|
Add MapInternalClaims and handle multiple public "scope" claims for backward compatibility
|
6 years ago |
|
Kévin Chalet
|
97dffed124
|
Implement complete WWW-Authenticate response header support
|
6 years ago |
|
Kévin Chalet
|
a8f9e53f9d
|
Relax the relative URLs constraints and fix the Uri construction logic to correctly compute absolute URLs
|
6 years ago |
|
Kévin Chalet
|
76a432e045
|
Port the challenge integration tests
|
6 years ago |
|
Kévin Chalet
|
3cbe3936bd
|
Port the sign-out integration tests and add validation to prevent sign-out from being triggered from unsupported endpoints
|
6 years ago |
|
Kévin Chalet
|
831a5b988a
|
Port the sign-in integration tests
|
6 years ago |
|
Kévin Chalet
|
a25907cd52
|
Automatically map the scope/azp access token claims to their OpenIddict private claims equivalents
|
6 years ago |
|
Kévin Chalet
|
c61f22f589
|
Port the authentication integration tests
|
6 years ago |
|
Kévin Chalet
|
eb35cbefb7
|
Port the token endpoint integration tests
|
6 years ago |
