Kévin Chalet
|
d668c82d8b
|
Use SuppressChildValidationMetadataProvider to exclude OpenIdConnectRequest/OpenIdConnectResponse from child validation
|
8 years ago |
|
Kévin Chalet
|
2bbd153f40
|
Update OpenIddictServerConfiguration to validate the default schemes and ensure they don't point to the OpenIddict server handler
|
8 years ago |
|
Kévin Chalet
|
e7c4942777
|
Move the scope permissions validation logic to ensure it also applies to public clients
|
8 years ago |
|
Kévin Chalet
|
041a83847a
|
Introduce AuthenticationTicket extensions and move the EntityFramework/EntityFrameworkCore extensions to a better namespace
|
8 years ago |
|
Kévin Chalet
|
55f358689c
|
Introduce built-in entity caching support in the managers and allow disabling the additional checks
|
8 years ago |
|
Kévin Chalet
|
84055f634c
|
Move the handlers registration logic to OpenIddictServerConfiguration/OpenIddictValidationConfiguration
|
8 years ago |
|
Kévin Chalet
|
978c398d7d
|
Introduce new constants
|
8 years ago |
|
Kévin Chalet
|
9a06891507
|
Tweak the events model to force user-defined handlers to explicitly determine whether other handlers can be invoked
|
8 years ago |
|
Kévin Chalet
|
aa79131335
|
Introduce OpenIddictServerBuilder.SetRequestCachingPolicy()
|
8 years ago |
|
Kévin Chalet
|
bbf4c42057
|
Move the server and validation components to an .Internal namespace
|
8 years ago |
|
Kévin Chalet
|
ab34bdae2e
|
Update AddServer()/AddValidation() to throw an exception when the OpenID Connect server/OAuth validation handler are already registered and to prevent custom providers
|
8 years ago |
|
Kévin Chalet
|
a65deb4463
|
Update OpenIddictServerBuilder to allow calling SetAccessTokenLifetime/SetAuthorizationCodeLifetime/SetIdentityTokenLifetime/SetRefreshTokenLifetime with null values
|
8 years ago |
|
Kévin Chalet
|
b5c9798e17
|
Introduce new unit tests for the core/server/validation builders and extensions
|
8 years ago |
|
Kévin Chalet
|
99cebde3c3
|
Fix ApplyAuthorizationResponse/ApplyLogoutResponse to work with null requests
|
8 years ago |
|
Kévin Chalet
|
62ea117682
|
Store the token/authorization identifiers in new internal authentication properties
|
8 years ago |
|
Kévin Chalet
|
e9c796ca37
|
Throw an InvalidOperationException when SignIn() is called with an unauthenticated ClaimsIdentity
|
8 years ago |
|
Kévin Chalet
|
e7abdab60d
|
Update the token endpoint validation logic to reject scope=offline_access requests if the client application is not allowed to use the refresh token flow
|
8 years ago |
|
Kévin Chalet
|
5c40217da4
|
Replace the application provider/events by a new notifications-based system
|
8 years ago |
|
Kévin Chalet
|
7e10bedb73
|
Remove implicit permissions and introduce OpenIddictServerBuilder.IgnoreEndpointPermissions()/IgnoreGrantTypePermissions()/IgnoreScopePermissions()
|
8 years ago |
|
Kévin Chalet
|
8f9c6f109d
|
Enable scope validation and reject unidentified token/revocation requests by default
|
8 years ago |
|
Kévin Chalet
|
0e5b0cec66
|
Update exception messages to point to the new OpenIddict services APIs
|
8 years ago |
|
Kévin Chalet
|
aa89d0c215
|
Automatically validate the authorization associated with authorization codes/refresh tokens
|
8 years ago |
|
Kévin Chalet
|
d848dc8529
|
Update common.props to build portable debug symbols
|
8 years ago |
|
Kévin Chalet
|
f17db7496d
|
Update HandleConfigurationRequest to use the new HandleConfigurationRequestContext.Claims property
|
8 years ago |
|
Kévin Chalet
|
91d5592d55
|
Migrate to the latest aspnet-contrib packages
|
8 years ago |
|
Kévin Chalet
|
33af961b0c
|
Rename options.AddMvcBinders() to options.UseMvc() and add an option allowing to disable binding exceptions
|
8 years ago |
|
Kévin Chalet
|
32fe4b0ae7
|
Remove OpenIddict.Models/OpenIddict.Stores and move to per-provider models
|
8 years ago |
|
Kévin Chalet
|
267a89a08c
|
Remove the non-standard external_providers_supported node from the discovery document
|
8 years ago |
|
Kévin Chalet
|
943e9578f3
|
Introduce OpenIddictServerBuilder.RegisterProvider() to allow registering a custom OpenID Connect server provider
|
8 years ago |
|
Kévin Chalet
|
92524d4371
|
Introduce OpenIddictServerDefaults and OpenIddictValidationDefaults
|
8 years ago |
|
Kévin Chalet
|
1c040c8279
|
Allow confidential applications to retrieve an identity token from the authorization endpoint for compatibility purposes
|
8 years ago |
|
Kévin Chalet
|
7bca2c06ed
|
Revamp the OpenIddict services registration process and introduce new builders to separate the server APIs from the core APIs
|
8 years ago |
|
Kévin Chalet
|
ef139e23d1
|
Move the default stores to OpenIddict.Stores and the server components to OpenIddict.Server
|
8 years ago |
