a3d01727f9
Make FILTER_PROCESSES_URL public
...
Currently hardcoded in the filter and the client's Spring Security config; would be nicer to reference the value instead.
c5e70ebd5c/src/main/webapp/WEB-INF/spring/appServlet/servlet-context.xml (L54)
9 years ago
2deec98b58
[maven-release-plugin] prepare for next development iteration
9 years ago
d96b2dc130
[maven-release-plugin] prepare release mitreid-connect-1.2.2
9 years ago
6129cfa61a
added scope-based authorities granter for introspections services, closes #835
9 years ago
ebb4f2c3d4
Upgraded to nimbus 4.2, closes #934
9 years ago
98e1d26134
limited when login_hint is sent to the server, closes #963
9 years ago
8b362f23f3
[maven-release-plugin] prepare for next development iteration
9 years ago
e384a6257b
[maven-release-plugin] prepare release mitreid-connect-1.2.1
9 years ago
acb3d03052
added 'kid' to all signed tokens, closes #899
9 years ago
48bc26901a
added JTI to client auth
9 years ago
9fe98e0132
OIDCAuthenticationFilter: Make authenticationSignerService optional so
...
it must not be provided in Spring config
OIDCAuthenticationProvider: Setter for UserInfoFetcher, so own
implementation can be wired
UserInfoFetcher: Call to DefaultUserInfo.fromJson moved to method, so it
can be overwritten by own implementation to use own UserInfo
implementation
9 years ago
22c05ec51b
[maven-release-plugin] prepare for next development iteration
9 years ago
e6b64cd9cd
[maven-release-plugin] prepare release mitreid-connect-1.2.0
9 years ago
489450b1c2
automated code format cleanup
9 years ago
15c2b57730
[maven-release-plugin] prepare for next development iteration
9 years ago
8317c759f1
[maven-release-plugin] prepare release mitreid-connect-1.2.0-RC2
9 years ago
a4e75ed733
[maven-release-plugin] prepare for next development iteration
10 years ago
58a47d0e46
[maven-release-plugin] prepare release mitreid-connect-1.2.0-RC1
10 years ago
3c297ba18f
collapsed error clause
10 years ago
42b93be492
added uri-encoded client service, closes #857
10 years ago
667c766273
reverted over-reaching check on webfinger fetcher
10 years ago
d2a393f7f9
converted error handlers to a single @ControllerAdvice class, closes #788
10 years ago
7df3597757
split client's auth token into pending and authorized classes
10 years ago
b4520c170e
ID Token carried through as parsed JWT instead of string, closes #832
10 years ago
f4a1b27e2e
better handling of HTTP and JSON errors on network fetches, added http-forcing behavior for webfinger client and sector URL service
10 years ago
9ae92b983a
added http and json error handling to webfinger service
10 years ago
c166cbe49c
added login hint capability to client library
10 years ago
a259841eaf
Added getters and setters to IntrospectingTokenService
...
Fixed TokenCacheObject constructor for setting TCO's expire time
10 years ago
698fe55b85
IntrospectingTokenService now takes parameters (cacheTokens, cacheNonExpiringTokens, defaultExpireTime, forceCacheExpireTime) to change the behavior or even disable the caching of responses from the IntrospectionEndpoint.
10 years ago
9e74e40453
Use diamond syntax instead of explicit types
10 years ago
13f5e4f8a6
Collapse identical catch branches
10 years ago
6dc2b2cb5e
Various small improvements/bugfixes
10 years ago
54fbf0d0ac
Added null check for expiration during introspection. Making assumption that null exp means tokens dont expire.
10 years ago
d1e8529a7b
expose ID Token and UserInfo to the AuthoritiesProvider and AuthoritiesMapper, both extensible
...
closes #699
closes #761
10 years ago
effe955953
Fix blacklist/whitelist for DynamicRegistrationClientConfigurationService
...
ClientConfigurationService#getClientConfiguration has ServerConfiguration as parameter, not String
10 years ago
caf85b990d
Revert "added option to send skip sending nonce if desired, closes #704 , closes #683,"
...
This reverts commit bbeaeb06e3
10 years ago
d32118d017
Revert "added unit tests for nonce-less url builders (exception cases)"
...
This reverts commit ada1b0d24e
10 years ago
0d6775dfa8
made auth request url builder handle multiple keys
10 years ago
da72ce02ad
added token endpoint options to client filter, closes #803
10 years ago
617d485478
updated all references to media types to use constants instead of literals, closes #767
10 years ago
c09b63c69f
made logger declarations consistent across project, closes #780
10 years ago
7a1480bb07
moved and consolidated json utilities
10 years ago
b376bc6059
removed some vestigial service/repository calls, closes #513
10 years ago
05f03f7c90
yet more year updates
10 years ago
994ce6c743
consistently named JOSE-based classes, closes #529
10 years ago
685960358c
formatting cleanup
10 years ago
e2349984b8
happy new year 2015!
10 years ago
70779a69ea
reorganized dependency management section, managed cross-module dependencies, updated Nimbus JWT library
10 years ago
587d4b2db6
further pom file cleanup
10 years ago
a9544059cf
flagged spurious serialization warnings from the libraries (we're not actually serializing things here)
10 years ago
77c06e9557
replaced deprecated http components calls, closes #744
10 years ago
3708b531df
moved requirement to different component, closes #759
...
also cleaned up comments in filter
10 years ago
ada1b0d24e
added unit tests for nonce-less url builders (exception cases)
10 years ago
bbeaeb06e3
added option to send skip sending nonce if desired, closes #704 , closes #683 ,
10 years ago
9aa45f8efb
Made the constructor public for OIDCAuthentication filter.
10 years ago
69c19d35fa
moved test into test package
10 years ago
775b77b367
updated date format of token introspection response, closes #719
10 years ago
e6d10b67a4
update to Spring 4 and other related libraries
10 years ago
bc9942e929
relaxed issuer constraints in client, closes #638
10 years ago
3f5e2acfeb
if no alg is explicitly set, use the default from the signer
10 years ago
659880b4dc
fix broken dependency declaration, that follow up to org.springframework.beans.NotWritablePropertyException: Invalid property 'jwkKeyList' of bean class exception
10 years ago
db052f11ca
Moved development branch to 1.2
10 years ago
134909a82f
import cleanup
10 years ago
c683131f12
externalized view name strings and tied them to view beans
10 years ago
a704277652
Removed exceptions from @PostConstruct methods, closes #663
10 years ago
6f2f807b0b
[maven-release-plugin] prepare for next development iteration
10 years ago
93ae1516a5
[maven-release-plugin] prepare release mitreid-connect-1.1.9
10 years ago
b0cce924a2
JsonFileRegisteredClientService now writes out entire client registration to disk, closes #651
10 years ago
863dbd17b8
Added setClientConfigurationService method.
10 years ago
325a200f16
added configurable support for different token presentation methods in user info fetcher, closes #632
10 years ago
c7a6c4fafe
added support for unsigned ID tokens in client, use client configuration to turn this on, closes #633
11 years ago
306c8cff17
update nimbus-jose-jwt dependency to 2.26 and fix the affected files
11 years ago
adf477c64e
[maven-release-plugin] prepare for next development iteration
11 years ago
8d97ed61ec
[maven-release-plugin] prepare release mitreid-connect-1.1.8
11 years ago
9f9b49fc63
refactored validator checks to cascade better, throw an authentication exception if we can't find a validator for the ID Token
11 years ago
1dc204f975
Validate HMAC-signed ID tokens
11 years ago
85acfa90db
[maven-release-plugin] prepare for next development iteration
11 years ago
d5e4cb45a2
[maven-release-plugin] prepare release mitreid-connect-1.1.7
11 years ago
be98b9cd0b
[maven-release-plugin] prepare for next development iteration
11 years ago
8320f0eefe
[maven-release-plugin] prepare release mitreid-connect-1.1.6
11 years ago
0c8cacd59a
added missing copyright headers
11 years ago
525f3aa2a8
Cleaned up indentation, whitespace, and imports.
11 years ago
27e68f1d56
added service to optionally check "target_uri" links, closes #547
11 years ago
e4d5f4a540
added system wide cache for all symmetric validators, closes # 557
11 years ago
ca333d256b
Appropriately catch runtime exceptions in all guava caches, closes #603
11 years ago
880014176f
[maven-release-plugin] prepare for next development iteration
11 years ago
ca8a003e3d
[maven-release-plugin] prepare release mitreid-connect-1.1.5
11 years ago
37af569890
cleaned up unintentional pom version override
11 years ago
b8129bf60d
[maven-release-plugin] prepare for next development iteration
11 years ago
a9e34ac9bd
[maven-release-plugin] prepare release mitreid-connect-1.1.4
11 years ago
90b10d7bad
Added Getter/Setter for IntospectionAuthorityGranter. Still defaults to SimpleIntrospectionAuthorityGranter
11 years ago
79bd7e420c
made scope handling consistent for introspection services (now a space-separated string), closes #570
11 years ago
97cd00e06c
[maven-release-plugin] prepare for next development iteration
11 years ago
23c7cf6996
[maven-release-plugin] prepare release mitreid-connect-1.1.3
11 years ago
762fe11ab1
Update README.md
...
removed outdated configuration information and pointed to wiki, closes #561
11 years ago
ad5ffb64e8
[maven-release-plugin] prepare for next development iteration
11 years ago
1635cf957d
[maven-release-plugin] prepare release mitreid-connect-1.1.2
11 years ago
53cc7ef447
Fixed audience claim on client auth assertion
11 years ago
3629ff5e2f
added signed authentication assertion support to client, closes #558
11 years ago
9395c3802d
[maven-release-plugin] prepare for next development iteration
11 years ago
Mark Janssen