Kévin Chalet
|
6dce31567c
|
Update ValidateIdentityModelToken and ValidateDataProtectionToken to immediately return an error when the token can be read but is invalid
|
6 years ago |
|
Kévin Chalet
|
dad788a936
|
Support the long application/at+jwt and application/jwt forms
|
6 years ago |
|
Kévin Chalet
|
1280fca285
|
Fix the device authorization endpoint to only accept POST requests and support client_secret_basic
|
6 years ago |
|
Kévin Chalet
|
beb6b3e92b
|
Make authorization codes reference tokens by default, split UseReferenceTokens into two settings and allow the Data Protection to fall back to JWT for specific token types
|
6 years ago |
|
Kévin Chalet
|
6bec7ad0c9
|
Remove the initialization logic from the MongoDB stores
|
6 years ago |
|
Kévin Chalet
|
5169c28d97
|
Bump Wilson to 6.7.0 and use the new SecurityKey.IsSupportedAlgorithm() API
|
6 years ago |
|
Kévin Chalet
|
8d600877fd
|
Decorate more server/validation handlers with OpenIddictServerHandlerType.BuiltIn
|
6 years ago |
|
Kévin Chalet
|
ed0dc56487
|
Reunify the custom and built-in handlers collections to avoid computing the collections per-request
|
6 years ago |
|
Kévin Chalet
|
2be6d808cf
|
Enable central package versions management
|
6 years ago |
|
Kévin Chalet
|
5738ba0e6f
|
Update the documentation to indicate the default OpenIddict entities must be replaced using ReplaceDefaultEntities()
|
6 years ago |
|
Kévin Chalet
|
fcb456e066
|
Allow OpenIddictMongoDbAuthorization.Subject and OpenIddictMongoDbToken.Subject to be null
|
6 years ago |
|
Kévin Chalet
|
4a2dedfd8c
|
Remove the System.Linq.Async dependency from OpenIddict.Core
|
6 years ago |
|
Kévin Chalet
|
45d90453c8
|
Fix the ProcessHostRedirectionResponse handler to be invoked after ProcessRedirectionResponse
|
6 years ago |
|
Kévin Chalet
|
e27eb09637
|
Update the packages descriptions
|
6 years ago |
|
Kévin Chalet
|
39a75284cc
|
Enable FxCop code analysis
|
6 years ago |
|
Kévin Chalet
|
fb406560c6
|
Normalize multiple public scope claims to a single spare-separated claim
|
6 years ago |
|
Kévin Chalet
|
db8eb98474
|
Make the Data Protection validation handlers consistent with their server counterpart
|
6 years ago |
|
Kévin Chalet
|
bbeb29726f
|
Avoid overriding the issuer/signing keys/decryption keys set in the token validation parameters
|
6 years ago |
|
Kévin Chalet
|
9aae602a64
|
Add a constants class containing the authentication method references defined by RFC8176
|
6 years ago |
|
Kévin Chalet
|
acad74e570
|
Use BinaryPrimitives.ReadUInt32BigEndian() and BinaryPrimitives.WriteUInt32BigEndian()
|
6 years ago |
|
Kévin Chalet
|
4e006968f3
|
Update OpenIddictValidationService to propagate the error details during introspection
|
6 years ago |
|
Kévin Chalet
|
19a0c0758c
|
Use a pre-sized Dictionary<string, string> instead of ImmutableDictionary.CreateBuilder<string, string>()
|
6 years ago |
|
Kévin Chalet
|
77ca35a53f
|
Use private claims for the token creation/expiration dates and introduce new Data Protection authentication properties
|
6 years ago |
|
Kévin Chalet
|
861a2376ca
|
Implement client_secret_basic support for introspection
|
6 years ago |
|
Kévin Chalet
|
949d5e39d4
|
Fix an issue with the status code pages middleware integration and tweak the ASP.NET Core hosts to use AuthenticateResult.NoResult()
|
6 years ago |
|
Kévin Chalet
|
2ac5b4b884
|
Update the validation OWIN integration to support active authentication and rework how errors are returned for API requests
|
6 years ago |
|
Kévin Chalet
|
7a104c816a
|
Update the Mongo DB helpers to use [EnumeratorCancellation]
|
6 years ago |
|
Kévin Chalet
|
d87803c4ec
|
Rename the default entities
|
7 years ago |
|
Kévin Chalet
|
90b1426305
|
Decorate local functions returning IAsyncEnumerable<T> with [EnumeratorCancellation]
|
6 years ago |
|
Kévin Chalet
|
f81f8fc7dd
|
Introduce introspection support and revamp the events model used by the validation handler
|
7 years ago |
|
Kévin Chalet
|
be23e18023
|
Leverage IdentityModel's new TypeValidator mechanism to allow validating JWT tokens issued by OpenIddict 1.x/2.x
|
7 years ago |
|
Kévin Chalet
|
528723b9b1
|
Fix OpenIddictParameter.ToString() to always use JsonElement.ToString()
|
6 years ago |
|
Kévin Chalet
|
2008ce59ed
|
Update the Entity Framework stores to reset the entity states when failing to update/delete an entity
|
7 years ago |
|
Kévin Chalet
|
414e05eed4
|
Create a DB entry for all types of tokens, rework reference tokens support and add token entry validation to the validation handler
|
7 years ago |
|
Kévin Chalet
|
c0bdb5ef56
|
Update Arcade and replace the netcoreapp3.0 TFMs by netcoreapp3.1
|
7 years ago |
|
Kévin Chalet
|
a9a15274ad
|
Remove the internal FixedTimeEquals helper and use BouncyCastle's Arrays.ConstantTimeAreEqual()
|
7 years ago |
|
Kévin Chalet
|
fb92acbdaf
|
Replace OpenIddictApplicationManager.IsConfidentialAsync()/IsPublicAsync()/IsHybridAsync() by HasClientTypeAsync()
|
7 years ago |
|
Kévin Chalet
|
ccaf982aeb
|
Update OpenIddictMessage.AddParameter() to throw an exception when the parameter already exists and introduce new APIs
|
7 years ago |
|
Kévin Chalet
|
fd63da76df
|
Allow returning custom challenge/sign-in/sign-out parameters via AuthenticationProperties.Parameters
|
7 years ago |
|
Kévin Chalet
|
700dc69c2e
|
Update the userinfo endpoint/validation handler to return a 401 error when the access token is missing
|
7 years ago |
|
Kévin Chalet
|
7a4e2e129c
|
Fix ValidateDataProtectionToken to correctly set the security principal
|
7 years ago |
|
Kévin Chalet
|
750ff208a1
|
Remove OpenIddictTokenDescriptor.Properties
|
7 years ago |
|
Kévin Chalet
|
8b097321c3
|
Update the ValidatePrincipal handler to ensure the token type of the claims principal matches the expected type
|
7 years ago |
|
Kévin Chalet
|
ac5f302b01
|
Add MapInternalClaims and handle multiple public "scope" claims for backward compatibility
|
7 years ago |
|
Kévin Chalet
|
3fc9a06e8b
|
Move the entities validation logic from the configuration classes to the EF 6.x builder class
|
7 years ago |
|
Kévin Chalet
|
560a44514b
|
Automatically add a client_id claim to access tokens and use "JWT" instead of "jwt" for the identity tokens' typ header
|
7 years ago |
|
Kévin Chalet
|
276a9b8a7d
|
Update OpenIddict.Validation.SystemNetHttp to use ReadAsStringAsync() and rework the samples
|
7 years ago |
Drew Fleming
|
78d14adb33
|
Reject token requests containing a code_verifier when no code_challenge is attached to the authorization code
|
7 years ago |
|
Kévin Chalet
|
97dffed124
|
Implement complete WWW-Authenticate response header support
|
7 years ago |
|
Kévin Chalet
|
24ebea58f7
|
Remove the NHibernate stores
|
7 years ago |
