Justin Richer
d32118d017
Revert "added unit tests for nonce-less url builders (exception cases)"
...
This reverts commit ada1b0d24e
.
Conflicts:
openid-connect-client/src/test/java/org/mitre/openid/connect/client/service/impl/TestPlainAuthRequestUrlBuilder.java
10 years ago
Justin Richer
0d6775dfa8
made auth request url builder handle multiple keys
10 years ago
Justin Richer
da72ce02ad
added token endpoint options to client filter, closes #803
10 years ago
Justin Richer
617d485478
updated all references to media types to use constants instead of literals, closes #767
10 years ago
Justin Richer
c09b63c69f
made logger declarations consistent across project, closes #780
10 years ago
Justin Richer
7a1480bb07
moved and consolidated json utilities
10 years ago
Justin Richer
b376bc6059
removed some vestigial service/repository calls, closes #513
10 years ago
Justin Richer
05f03f7c90
yet more year updates
10 years ago
Justin Richer
994ce6c743
consistently named JOSE-based classes, closes #529
10 years ago
Justin Richer
685960358c
formatting cleanup
10 years ago
Justin Richer
e2349984b8
happy new year 2015!
10 years ago
Justin Richer
a9544059cf
flagged spurious serialization warnings from the libraries (we're not actually serializing things here)
10 years ago
Justin Richer
77c06e9557
replaced deprecated http components calls, closes #744
10 years ago
Justin Richer
3708b531df
moved requirement to different component, closes #759
...
also cleaned up comments in filter
10 years ago
Justin Richer
ada1b0d24e
added unit tests for nonce-less url builders (exception cases)
10 years ago
Justin Richer
bbeaeb06e3
added option to send skip sending nonce if desired, closes #704 , closes #683 ,
10 years ago
William Kim
9aa45f8efb
Made the constructor public for OIDCAuthentication filter.
10 years ago
Justin Richer
69c19d35fa
moved test into test package
10 years ago
Justin Richer
775b77b367
updated date format of token introspection response, closes #719
10 years ago
Justin Richer
bc9942e929
relaxed issuer constraints in client, closes #638
10 years ago
Justin Richer
3f5e2acfeb
if no alg is explicitly set, use the default from the signer
10 years ago
David Steinkopff
659880b4dc
fix broken dependency declaration, that follow up to org.springframework.beans.NotWritablePropertyException: Invalid property 'jwkKeyList' of bean class exception
10 years ago
Justin Richer
134909a82f
import cleanup
10 years ago
Justin Richer
c683131f12
externalized view name strings and tied them to view beans
10 years ago
Justin Richer
a704277652
Removed exceptions from @PostConstruct methods, closes #663
10 years ago
Justin Richer
b0cce924a2
JsonFileRegisteredClientService now writes out entire client registration to disk, closes #651
10 years ago
Brenden Keyes
863dbd17b8
Added setClientConfigurationService method.
10 years ago
Justin Richer
325a200f16
added configurable support for different token presentation methods in user info fetcher, closes #632
10 years ago
Justin Richer
c7a6c4fafe
added support for unsigned ID tokens in client, use client configuration to turn this on, closes #633
11 years ago
Kristina Sahlmann
306c8cff17
update nimbus-jose-jwt dependency to 2.26 and fix the affected files
11 years ago
Justin Richer
9f9b49fc63
refactored validator checks to cascade better, throw an authentication exception if we can't find a validator for the ID Token
11 years ago
Christopher Elkins
1dc204f975
Validate HMAC-signed ID tokens
11 years ago
Justin Richer
0c8cacd59a
added missing copyright headers
11 years ago
Justin Richer
525f3aa2a8
Cleaned up indentation, whitespace, and imports.
11 years ago
Justin Richer
27e68f1d56
added service to optionally check "target_uri" links, closes #547
11 years ago
Justin Richer
e4d5f4a540
added system wide cache for all symmetric validators, closes # 557
11 years ago
Justin Richer
ca333d256b
Appropriately catch runtime exceptions in all guava caches, closes #603
11 years ago
Brenden Keyes
90b10d7bad
Added Getter/Setter for IntospectionAuthorityGranter. Still defaults to SimpleIntrospectionAuthorityGranter
11 years ago
Justin Richer
79bd7e420c
made scope handling consistent for introspection services (now a space-separated string), closes #570
11 years ago
Justin Richer
53cc7ef447
Fixed audience claim on client auth assertion
11 years ago
Justin Richer
3629ff5e2f
added signed authentication assertion support to client, closes #558
11 years ago
Justin Richer
1289d4737a
Changed references of DefaultHttpClient to SystemDefaultHttpClient to inherit system proxy settings, should address #548
11 years ago
Justin Richer
d946cfb4a7
added support for target uri parameter in third party issuer (or other custom issuer that sets the right flag on return), closes #539
11 years ago
Justin Richer
3b52ce8201
happy new year!
11 years ago
Justin Richer
ebbc7209aa
automated code formatting and cleanup
11 years ago
Justin Richer
49a7db6c6e
Sanity check on client template object for dynamic registration client-side service
11 years ago
Justin Richer
27f391ef01
Fixed compilation errors for SECOAUTH milestone updates
11 years ago
Justin Richer
c896bef2e8
Created hybrid issuer service, addresses #509
11 years ago
Justin Richer
0ff7cb75a0
made userinfo fetching optional, addresses #510
11 years ago
Justin Richer
8fc6de0a6d
hybrid service instantiates inner members, addresses #508
11 years ago
Justin Richer
b2b915b4ae
explcitly set alg and enc instead of trying to guess
11 years ago
Justin Richer
fb2f2f9792
spelling, property access, and cleanup
11 years ago
Justin Richer
2ca713c7f2
added encrypted request object service to client, addresses #475
11 years ago
Justin Richer
1d0560edbc
refactored some json utils to their own static class
11 years ago
Justin Richer
6605877a1b
added encryption/decryption to cached JWK-URI service
11 years ago
Justin Richer
c3b90b9d71
removed old form value from fetcher
11 years ago
Justin Richer
ded7c66c78
fixed misleading error message
11 years ago
Justin Richer
6851224e42
fixed token expiration parsing
11 years ago
Justin Richer
94ddc77668
fixed scope parsing on token implementation, too
...
Conflicts:
openid-connect-client/src/main/java/org/mitre/oauth2/introspectingfilter/AuthorizationRequestImpl.java
11 years ago
Justin Richer
a9710899cd
removed vestigial client config service
11 years ago
Justin Richer
2201206f0e
refactored token introspection packages to support different client credentials at different services
11 years ago
William Kim
2108311d65
Revert "refactored code to use the more generic JWT declaration."
...
This reverts commit e0b56bc72a
.
11 years ago
William Kim
e0b56bc72a
refactored code to use the more generic JWT declaration.
11 years ago
Justin Richer
6a9650d2a7
added configurable support for clients to send extra parameters like display and prompt, addresses #426
11 years ago
Justin Richer
3360117b7b
Client library no longer serializes nulls on registration, addresses #478
11 years ago
William Kim
a1d6901bcc
using nimbusds's new data-type specific claim getter.
11 years ago
William Kim
c7495a6ae3
Revert "made having a nonce not required for id tokens iss #464"
...
This reverts commit d0486cc1ec
.
11 years ago
William Kim
d0486cc1ec
made having a nonce not required for id tokens iss #464
11 years ago
William Kim
e1b072c991
Updated nimbusds library version to 2.17.2 and made relevant changes in enc./dec. service and test
11 years ago
Justin Richer
beaeaa4ccc
I can spell "consortium", I promise
11 years ago
Justin Richer
b2b6fd6448
further cleanup
11 years ago
Justin Richer
856c0ea0b5
Merge commit '023dd440d4a0e6e59a14c88013837d79a77c74e0' into 1.1-merge
...
Conflicts:
openid-connect-client/pom.xml
openid-connect-client/src/main/java/org/mitre/oauth2/introspectingfilter/AuthorizationRequestImpl.java
openid-connect-client/src/main/java/org/mitre/oauth2/introspectingfilter/IntrospectingTokenService.java
openid-connect-client/src/main/java/org/mitre/oauth2/introspectingfilter/IntrospectionAuthorityGranter.java
openid-connect-client/src/main/java/org/mitre/oauth2/introspectingfilter/IntrospectionUrlProvider.java
openid-connect-client/src/main/java/org/mitre/openid/connect/client/OIDCAuthenticationFilter.java
openid-connect-client/src/main/java/org/mitre/openid/connect/client/OIDCAuthenticationProvider.java
openid-connect-client/src/main/java/org/mitre/openid/connect/client/keypublisher/ClientKeyPublisher.java
openid-connect-client/src/main/java/org/mitre/openid/connect/client/keypublisher/ClientKeyPublisherMapping.java
openid-connect-client/src/main/java/org/mitre/openid/connect/client/keypublisher/JwkViewResolver.java
openid-connect-client/src/main/java/org/mitre/openid/connect/client/service/AuthRequestUrlBuilder.java
openid-connect-client/src/main/java/org/mitre/openid/connect/client/service/ClientConfigurationService.java
openid-connect-client/src/main/java/org/mitre/openid/connect/client/service/impl/StaticClientConfigurationService.java
openid-connect-client/src/main/java/org/mitre/openid/connect/client/service/impl/StaticServerConfigurationService.java
openid-connect-client/src/main/java/org/mitre/openid/connect/client/service/impl/StaticSingleIssuerService.java
openid-connect-client/src/main/java/org/mitre/openid/connect/client/service/impl/ThirdPartyIssuerService.java
openid-connect-client/src/test/java/org/mitre/openid/connect/client/AbstractOIDCAuthenticationFilterTest.java
openid-connect-common/pom.xml
openid-connect-common/src/main/java/org/mitre/jose/keystore/JWKSetKeyStore.java
openid-connect-common/src/main/java/org/mitre/jwt/signer/service/JwtSigningAndValidationService.java
openid-connect-common/src/main/java/org/mitre/jwt/signer/service/impl/DefaultJwtSigningAndValidationService.java
openid-connect-common/src/main/java/org/mitre/jwt/signer/service/impl/JWKSetSigningAndValidationServiceCacheService.java
openid-connect-common/src/main/java/org/mitre/oauth2/model/AuthorizationCodeEntity.java
openid-connect-common/src/main/java/org/mitre/oauth2/model/ClientDetailsEntity.java
openid-connect-common/src/main/java/org/mitre/oauth2/model/OAuth2AccessTokenEntity.java
openid-connect-common/src/main/java/org/mitre/oauth2/model/OAuth2RefreshTokenEntity.java
openid-connect-common/src/main/java/org/mitre/oauth2/model/SystemScope.java
openid-connect-common/src/main/java/org/mitre/oauth2/repository/AuthorizationCodeRepository.java
openid-connect-common/src/main/java/org/mitre/oauth2/repository/OAuth2TokenRepository.java
openid-connect-common/src/main/java/org/mitre/oauth2/service/OAuth2TokenEntityService.java
openid-connect-common/src/main/java/org/mitre/openid/connect/config/ConfigurationPropertiesBean.java
openid-connect-common/src/main/java/org/mitre/openid/connect/config/ServerConfiguration.java
openid-connect-common/src/main/java/org/mitre/openid/connect/model/ApprovedSite.java
openid-connect-common/src/main/java/org/mitre/openid/connect/model/BlacklistedSite.java
openid-connect-common/src/main/java/org/mitre/openid/connect/model/Event.java
openid-connect-common/src/main/java/org/mitre/openid/connect/model/OIDCAuthenticationToken.java
openid-connect-common/src/main/java/org/mitre/openid/connect/model/WhitelistedSite.java
openid-connect-common/src/main/java/org/mitre/util/jpa/JpaUtil.java
openid-connect-server/.gitignore
openid-connect-server/pom.xml
openid-connect-server/src/main/java/org/mitre/oauth2/repository/impl/JpaAuthorizationCodeRepository.java
openid-connect-server/src/main/java/org/mitre/oauth2/service/impl/DefaultOAuth2AuthorizationCodeService.java
openid-connect-server/src/main/java/org/mitre/oauth2/service/impl/DefaultOAuth2ClientDetailsEntityService.java
openid-connect-server/src/main/java/org/mitre/oauth2/service/impl/DefaultOAuth2ProviderTokenService.java
openid-connect-server/src/main/java/org/mitre/oauth2/service/impl/DefaultSystemScopeService.java
openid-connect-server/src/main/java/org/mitre/oauth2/token/ChainedTokenGranter.java
openid-connect-server/src/main/java/org/mitre/oauth2/token/JwtAssertionTokenGranter.java
openid-connect-server/src/main/java/org/mitre/oauth2/view/TokenIntrospectionView.java
openid-connect-server/src/main/java/org/mitre/oauth2/web/IntrospectionEndpoint.java
openid-connect-server/src/main/java/org/mitre/oauth2/web/OAuthConfirmationController.java
openid-connect-server/src/main/java/org/mitre/oauth2/web/RevocationEndpoint.java
openid-connect-server/src/main/java/org/mitre/openid/connect/ConnectOAuth2RequestFactory.java
openid-connect-server/src/main/java/org/mitre/openid/connect/assertion/JwtBearerAuthenticationProvider.java
openid-connect-server/src/main/java/org/mitre/openid/connect/assertion/JwtBearerClientAssertionTokenEndpointFilter.java
openid-connect-server/src/main/java/org/mitre/openid/connect/exception/InvalidJwtSignatureException.java
openid-connect-server/src/main/java/org/mitre/openid/connect/exception/UnknownUserInfoSchemaException.java
openid-connect-server/src/main/java/org/mitre/openid/connect/exception/UserNotFoundException.java
openid-connect-server/src/main/java/org/mitre/openid/connect/repository/impl/JpaApprovedSiteRepository.java
openid-connect-server/src/main/java/org/mitre/openid/connect/repository/impl/JpaUserInfoRepository.java
openid-connect-server/src/main/java/org/mitre/openid/connect/service/impl/DefaultApprovedSiteService.java
openid-connect-server/src/main/java/org/mitre/openid/connect/service/impl/DefaultNonceService.java
openid-connect-server/src/main/java/org/mitre/openid/connect/service/impl/DefaultStatsService.java
openid-connect-server/src/main/java/org/mitre/openid/connect/service/impl/DefaultUserInfoUserDetailsService.java
openid-connect-server/src/main/java/org/mitre/openid/connect/service/impl/DefaultWhitelistedSiteService.java
openid-connect-server/src/main/java/org/mitre/openid/connect/token/ConnectTokenEnhancer.java
openid-connect-server/src/main/java/org/mitre/openid/connect/token/TofuUserApprovalHandler.java
openid-connect-server/src/main/java/org/mitre/openid/connect/view/AbstractClientEntityView.java
openid-connect-server/src/main/java/org/mitre/openid/connect/view/ClientInformationResponseView.java
openid-connect-server/src/main/java/org/mitre/openid/connect/view/ExceptionAsJSONView.java
openid-connect-server/src/main/java/org/mitre/openid/connect/view/JsonEntityView.java
openid-connect-server/src/main/java/org/mitre/openid/connect/view/JsonErrorView.java
openid-connect-server/src/main/java/org/mitre/openid/connect/view/POCOUserInfoView.java
openid-connect-server/src/main/java/org/mitre/openid/connect/view/StatsSummary.java
openid-connect-server/src/main/java/org/mitre/openid/connect/view/UserInfoView.java
openid-connect-server/src/main/java/org/mitre/openid/connect/web/ApprovedSiteAPI.java
openid-connect-server/src/main/java/org/mitre/openid/connect/web/BlacklistAPI.java
openid-connect-server/src/main/java/org/mitre/openid/connect/web/ClientAPI.java
openid-connect-server/src/main/java/org/mitre/openid/connect/web/ClientDynamicRegistrationEndpoint.java
openid-connect-server/src/main/java/org/mitre/openid/connect/web/ManagerController.java
openid-connect-server/src/main/java/org/mitre/openid/connect/web/RequestObjectAuthorizationEndpoint.java
openid-connect-server/src/main/java/org/mitre/openid/connect/web/StatsAPI.java
openid-connect-server/src/main/java/org/mitre/openid/connect/web/UserInfoEndpoint.java
openid-connect-server/src/main/java/org/mitre/openid/connect/web/UserInfoInterceptor.java
openid-connect-server/src/main/java/org/mitre/openid/connect/web/WhitelistAPI.java
openid-connect-server/src/main/webapp/WEB-INF/tags/aboutContent.tag
openid-connect-server/src/main/webapp/WEB-INF/tags/breadcrumbs.tag
openid-connect-server/src/main/webapp/WEB-INF/tags/contactContent.tag
openid-connect-server/src/main/webapp/WEB-INF/tags/copyright.tag
openid-connect-server/src/main/webapp/WEB-INF/tags/header.tag
openid-connect-server/src/main/webapp/WEB-INF/tags/landingPageAbout.tag
openid-connect-server/src/main/webapp/WEB-INF/tags/landingPageContact.tag
openid-connect-server/src/main/webapp/WEB-INF/tags/landingPageStats.tag
openid-connect-server/src/main/webapp/WEB-INF/tags/landingPageWelcome.tag
openid-connect-server/src/main/webapp/WEB-INF/tags/sidebar.tag
openid-connect-server/src/main/webapp/WEB-INF/tags/statsContent.tag
openid-connect-server/src/main/webapp/WEB-INF/tags/topbar.tag
openid-connect-server/src/main/webapp/WEB-INF/views/about.jsp
openid-connect-server/src/main/webapp/WEB-INF/views/approve.jsp
openid-connect-server/src/main/webapp/WEB-INF/views/contact.jsp
openid-connect-server/src/main/webapp/WEB-INF/views/exception/usernotfound.jsp
openid-connect-server/src/main/webapp/WEB-INF/views/login.jsp
openid-connect-server/src/main/webapp/WEB-INF/views/manage.jsp
openid-connect-server/src/main/webapp/WEB-INF/views/stats.jsp
pom.xml
11 years ago
Justin Richer
e658ffd7fc
format/cleanup and copyright
11 years ago
William Kim
809a243b64
tests for webfinger url normalization.
11 years ago
William Kim
eaa7298ef1
init commit for Webfinger normilizer utility class.
11 years ago
William Kim
14e85616e4
init commit. webfinger service test.
12 years ago
William Kim
0e777917d3
Updated Third Party Issuer Service unit tests.
12 years ago
William Kim
8c8aeeb892
hybrid server and client configuration services unit tests done.
12 years ago
William Kim
6ece7f5efc
Static server and client configuration tests done.
12 years ago
Amanda Anganes
96e3f66a81
Removed more references to InitializingBean
12 years ago
William Kim
7b969f9776
removed TODO about empty JWK set at the client. issue #391 .
12 years ago
Justin Richer
67fd5fa7e9
roles granted by introspection token services are now configurable (and extendable) via service, addresses #386
12 years ago
Justin Richer
35d1e1b6d4
added whitelist/blacklist support to server & client services
12 years ago
Justin Richer
a4a18fd54c
externalized introspection URL from client's introspecting token service, addresses #435
...
added service to parses token as JWT and pulls out issuer to find server
added introspection url to serverconfig object
added introspection parsing (and parse checks) to dynamic server config object
12 years ago
William Kim
f483d41b88
getCustomClaim -> getClaim. Also, removed outdated TODOs.
12 years ago
Amanda Anganes
15aea61fbe
Applied code cleanup
12 years ago
Amanda Anganes
3e23967b46
Updated code to reflect SECOAUTH changes
12 years ago
Justin Richer
6e8ab7736e
added hybrid client and server services, addresses #387
12 years ago
Justin Richer
a9da88fb79
brought introspection endpoint and introspection token services into compliance with draft, addresses #376
12 years ago
William Kim
2d16b8d458
revised unit tests in TestSignedAuthRequestUrlBuilder.
12 years ago
William Kim
3edd6c83b3
added unit test for parsing signed jwt auth requests.
12 years ago
William Kim
22b89f50be
restored scheme choosing logic in webfinger service.
12 years ago
William Kim
6d5e0a1092
added test for exception handling. removed unused imports.
12 years ago
William Kim
19718438c9
TestSignedAuthRequestUrlBuilder done. Relies heavily on com.nimbusds library.
12 years ago
William Kim
77bdfe344e
init commit TestSignedAuthRequestUrlBuilder.
12 years ago
Justin Richer
ded9c21a47
moved back to custom regex to handle user input
12 years ago
Justin Richer
77c5e7b94c
switched to using UriComponents instead of custom class, updated normalization and processing rules for webfinger discovery
...
addresses #363
12 years ago
Justin Richer
8cf83f537a
fixed auth header
...
addresses #325
12 years ago
Justin Richer
3b3715ff91
automatic save file creation
12 years ago
Justin Richer
98d917f3b9
added extension mechanism for saving client information in between runs
12 years ago