Justin Richer
37b9acda66
fixed erroneous error log
9 years ago
Justin Richer
89316cbab1
fixed default token lifetimes for heart mode
9 years ago
Justin Richer
60faf96e00
modified UI for HEART mode
9 years ago
Justin Richer
26d507d635
default new client in UI to HEART-compliant values
9 years ago
Justin Richer
52061ff05a
pass heart mode variable to javascript
9 years ago
Justin Richer
3a0fd9141f
added HEART Mode image to footer
9 years ago
Justin Richer
d0d6ae2ad8
[maven-release-plugin] prepare for next development iteration
9 years ago
Justin Richer
7f5b70e9e1
[maven-release-plugin] prepare release mitreid-connect-1.2.5
9 years ago
Justin Richer
cebf0fb8b2
added general javascript error catch
9 years ago
Justin Richer
659646ba9a
sync overridden files from UMA server
9 years ago
Justin Richer
193d3f8ec6
fixed typo in messages file
9 years ago
Justin Richer
002767ec8a
UI cleanup for dynamic registration and resource registration
9 years ago
Justin Richer
8168acf04b
set off client registration information on dun reg page
9 years ago
Justin Richer
26483b22a9
added claims redirect URI editing to the UI for both admins and dynamic clients, closes #1005
9 years ago
Justin Richer
82a1e49e79
[maven-release-plugin] prepare for next development iteration
9 years ago
Justin Richer
e6684fb7a8
[maven-release-plugin] prepare release mitreid-connect-1.2.4
9 years ago
Justin Richer
7badfe1d17
Happy new year 2016!
9 years ago
Oscar Kurniawan
b691cd198a
Update client.html
...
In my instance, this typo cause an error to underscore.js when it is parsing
9 years ago
Justin Richer
d1033b693f
added privacy-preserving client logo cache
9 years ago
Justin Richer
43509b7dfb
removed a few straggling KIT references
9 years ago
Justin Richer
099ae41607
added client logo to admin table, closes #280
9 years ago
Justin Richer
e828f3f18d
[maven-release-plugin] prepare for next development iteration
9 years ago
Justin Richer
01ca5ef8e2
[maven-release-plugin] prepare release mitreid-connect-1.2.3
9 years ago
Justin Richer
d338352cc8
scroll Ui to top of page on page loads, closes #977
9 years ago
Justin Richer
7f464c496b
changed copyright to new consortium name
9 years ago
Justin Richer
be9d8948ef
added UMA classes to logger configuration
9 years ago
Justin Richer
c59f722cc2
enforce pairwise identifier consistency in UI, closes #969
9 years ago
Justin Richer
2496dc114c
allow language system to be loaded from multiple files. closes #817 closes #876
9 years ago
Justin Richer
e255fc1a10
change default behavior of message source, closes #964
9 years ago
Justin Richer
70751a3d4a
updated configuration to comment out optional property value in example
9 years ago
Cosmin Cojocar
7b34a666d9
Make the dual client support configurable
9 years ago
Mark Janssen
f27673a5f5
Align user profile claims
...
Especially helps when `<dd>` collapses due to an empty claim value.
9 years ago
Justin Richer
6d2b73a7ef
added JSPs to filter
9 years ago
Mark Janssen
4c1e6866ce
Filter only `*.tag` files
...
Instead of excluding all binary files, just filter `*.tag` files.
http://maven.apache.org/plugins/maven-resources-plugin/examples/filter.html
9 years ago
Justin Richer
2deec98b58
[maven-release-plugin] prepare for next development iteration
9 years ago
Justin Richer
d96b2dc130
[maven-release-plugin] prepare release mitreid-connect-1.2.2
9 years ago
Justin Richer
a5701f4ea3
limit client pagination to 10 pages at a time, closes #886
9 years ago
Justin Richer
c67611e975
added qualifier name to persistence unit and transaction manager, closes #883
9 years ago
Mark Janssen
d337e14de3
Remove transitive commons-logging dependencies
...
We use slf4j instead; jcl-over-slf4j needs to be a compile-time dependency because we use it in several classes.
Unfortunately Maven does not have a way to exclude commons-logging globally, so we need to figure out which dependencies include it through `mvn dependency:tree` and specify an `<exclusion>` for each of them.
Finally, we upgrade to slf4j 1.7.12: http://www.slf4j.org/news.html .
9 years ago
Mark Janssen
301802abd3
Speed up servlet start
...
- Set metadata-complete="true" attribute on the <web-app> element.
- Add an empty <absolute-ordering /> element.
See:
https://wiki.apache.org/tomcat/HowTo/FasterStartUp#Configure_your_web_ap
plication
On my (old) machine, this reduces startup time with Jetty from 137580ms
to 20166ms.
9 years ago
Mark Janssen
90e4cb97ff
Upgrade jetty-maven-plugin and configure war path
...
Configuring war path enables `mvn jetty:run-war`.
9 years ago
Mark Janssen
8b7fc5de68
Update HikariCP to 2.4.1
...
https://github.com/brettwooldridge/HikariCP/blob/dev/CHANGES
9 years ago
Mark Janssen
9117e7fe31
Add SQL indexes for PostgreSQL and HSQLDB
9 years ago
Mark Janssen
7871ee0f26
Improve error message
9 years ago
Mark Janssen
58543ac9c4
Fix ID token icon description
9 years ago
Mark Janssen
b5c298e0ca
Remove legacy CSRF protection for approve page
...
Instead, we rely on the Spring Security CSRF protection, like we already do for the login page. Additionally, we remove the authentication check in`isApproved`, because this is already done by Spring Security (and if not, we have bigger problems to worry about).
9 years ago
Justin Richer
8b362f23f3
[maven-release-plugin] prepare for next development iteration
9 years ago
Justin Richer
e384a6257b
[maven-release-plugin] prepare release mitreid-connect-1.2.1
9 years ago
Justin Richer
3c222b0d79
rewrote blacklist UI, fixed delete functions on rest of UI, closes #905
9 years ago
Justin Richer
43e9fbc29c
fixed issuer on login page, added CSRF to login / logout, closes #870 , closes #824 , closes #875
9 years ago
Justin Richer
74f5a248c7
Added indexes to MySQL file, closes #902
9 years ago
Justin Richer
31374c0f7b
added spring security to logger configuration, closes #917
9 years ago
Stephen Doxsee
8d0355a513
Fix commented-out datasource config for postgresql and mysql to user HikariDataSource instead of Apache's BasicDataSource (since the class isn't in the project by default)
9 years ago
Justin Richer
54d8d890e5
restricted access to /authorize to ROLE_USER accounts, closes #892
9 years ago
Justin Richer
22c05ec51b
[maven-release-plugin] prepare for next development iteration
9 years ago
Justin Richer
e6b64cd9cd
[maven-release-plugin] prepare release mitreid-connect-1.2.0
9 years ago
Justin Richer
cd46994fb3
removed old DB upgrade scripts (use the upgrade API instead)
9 years ago
Justin Richer
15c2b57730
[maven-release-plugin] prepare for next development iteration
9 years ago
Justin Richer
8317c759f1
[maven-release-plugin] prepare release mitreid-connect-1.2.0-RC2
9 years ago
Justin Richer
0740443768
added claims redirect uri set to client model for UMA usage
9 years ago
Justin Richer
658b5e1456
updated all available javascript libraries to latest versions
10 years ago
Justin Richer
99fbda3d13
fix scope icon overlay in scope editor for safari/chrome/IE, closes #867
10 years ago
Justin Richer
71c52d1a39
restored default scopes
10 years ago
Justin Richer
a4e75ed733
[maven-release-plugin] prepare for next development iteration
10 years ago
Justin Richer
58a47d0e46
[maven-release-plugin] prepare release mitreid-connect-1.2.0-RC1
10 years ago
Justin Richer
e18fa60054
database sync
10 years ago
Justin Richer
064f36ef6c
clean up resource sets when clients are deleted
10 years ago
Justin Richer
7345a03aaa
added UMA import, closes #811 even harder
10 years ago
Justin Richer
8c822c0f54
detached whitelist from approved sites, closes #781
10 years ago
Justin Richer
2d6be48732
made error page responsive to HTTP status codes.
10 years ago
Justin Richer
e96eda0990
save dynamically registered clients to the server's database, closes #799
10 years ago
Justin Richer
44dce71888
fixed database syntax, closes #860
10 years ago
Justin Richer
42b93be492
added uri-encoded client service, closes #857
10 years ago
Justin Richer
a42920355c
updated error page, closes #858
10 years ago
Justin Richer
0360d35c3b
updated to servlet 3.0
10 years ago
Justin Richer
de72311c95
updated key to 2048-bit version to set a good example
10 years ago
Justin Richer
ee9413b882
database sync
10 years ago
Justin Richer
2cfaa1c1d7
renamed RequiredClaimSet to Policy
10 years ago
Justin Richer
b8a5486995
made required claims sets stick in the database
10 years ago
Justin Richer
cd47d32e2d
split required claim sets out as separate indirection structure, closes #813
10 years ago
Justin Richer
50cbeb3e4c
DB table sync
10 years ago
Justin Richer
2f4d9ce54b
clearing out refresh tokens is now configurable, closes #409
10 years ago
Justin Richer
b18bea6b9f
switched connection pool to use HikariCP, closes #821
10 years ago
Justin Richer
445099fc74
Sync database changes across all three platforms
10 years ago
lomori
84b595ea6f
Synch with HSQLDB version
...
Few fields were missing, e.g. user_info::src, causing an application crash with MySQL.
10 years ago
Yaser Alraddadi
2d5e53c0f2
Fix syntax error: , at the end of table creation
...
Fix syntax error: , at the end of table creation
10 years ago
Justin Richer
d1e8529a7b
expose ID Token and UserInfo to the AuthoritiesProvider and AuthoritiesMapper, both extensible
...
closes #699
closes #761
10 years ago
Justin Richer
23e1e87368
dressed up error message a little
10 years ago
Justin Richer
0aabb7226d
internationalized the error and login pages
10 years ago
Justin Richer
4655650a68
added OAuth error display page, closes #559
10 years ago
Justin Richer
54e3b7e8d3
added new messages for JWK Set handling
10 years ago
Justin Richer
49c8804a1c
JWK Set by value UI added to resource registration
10 years ago
Justin Richer
d09b003bc3
JWK Set by value UI added to dynamic registration
10 years ago
Justin Richer
79317d5b70
JWK Set by value added to admin UI, addresses #826
10 years ago
Justin Richer
30162f6baa
added direct JWK set to data model
10 years ago
Justin Richer
285504cba1
sync database tables across different vendors
10 years ago
Mark Janssen
742ceea182
Support for PostgreSQL
10 years ago
Mark Janssen
d583499a07
Add X-Frame-Options header
10 years ago
Justin Richer
98e414b6df
broke out authentication holder class into parts, no more serializable pieces in the database, closes #696
10 years ago
Justin Richer
cb8abca0f6
removed embedded JOSE classes in favor of converters
10 years ago
Justin Richer
e9aeb8318e
added labels for new UI bits
10 years ago
Justin Richer
6be2b4f65e
added ES* and PS* support for signed objects
10 years ago
Mark Janssen
eb1ea4c0b8
Update topbar.tag
...
Fixes #816
10 years ago
Justin Richer
aeed2fa003
issue new refresh tokens for clients who are configured for it, closes #408
10 years ago
Justin Richer
5b02e18f7c
added a simplified user menu and login button for collapsed navbars, closes #801
10 years ago
Justin Richer
e52fff58f5
added hierarchical user info display, closes #787
10 years ago
Justin Richer
52b1bda8d8
version match and cleanup
10 years ago
Justin Richer
cdf6107b25
reverted changes related to UMA server
10 years ago
Justin Richer
f077579b29
moved UMA-specific files to the UMA webapp package
10 years ago
Justin Richer
582c52ebf5
display error on webfinger failure
10 years ago
Justin Richer
7188a06488
added deletion functionality to UI
10 years ago
Justin Richer
c63651626f
added simple display for required claims into resource set display
10 years ago
Justin Richer
396ed472a9
cleaned up external login page
10 years ago
Justin Richer
9c6f12087d
fixed javascript bug on resource set save
10 years ago
Justin Richer
b2912b944a
tweaked configuration of login pages to allow parallel logins
10 years ago
Justin Richer
08413302eb
configured OIDC client on claims collection endpoint
10 years ago
Justin Richer
2a4cceff5a
object consistency across commits
10 years ago
Justin Richer
6e095e3266
can now add and remove email address claims from the UI
10 years ago
Justin Richer
1ad1813239
claim removal and policy saving
10 years ago
Justin Richer
e89d8cd985
added webfinger lookup helper service
10 years ago
Justin Richer
06ae8545ae
Merge branch 'master' into uma
10 years ago
Justin Richer
332cb22a99
claim forms displayed
10 years ago
Justin Richer
3e931c68b4
added policy editing overview page
10 years ago
Justin Richer
ba0c679e60
made "en" the default locale explicitly
10 years ago
Justin Richer
aee2544fbf
updated tables for MySQL
10 years ago
Justin Richer
7df31f1e87
completed rudimentary UMA authorization API.
...
Working: resource set registration, permission ticket creation, RPT creation from ticket
Still missing: adding required claims to resource set, adding provided claims to permission ticket
10 years ago
Justin Richer
e1769d1545
added (optional) permissions sets to access tokens
10 years ago
Justin Richer
1be9da52c6
separated ticket object from permission object to facilitate re-use of permission object with tokens
10 years ago
Justin Richer
2993b76dad
added auth request endpoint to context configuration
10 years ago
Justin Richer
1393251da9
added value to claim
10 years ago
Justin Richer
2aadb09f49
started claims service, added expiration to permissions
10 years ago
Justin Richer
a57c336e11
added uma_authorization to default scope set
10 years ago
Justin Richer
8352145d82
Merge branch 'master' into authorization-api
...
Conflicts:
openid-connect-common/src/main/java/org/mitre/oauth2/service/SystemScopeService.java
openid-connect-server-webapp/src/main/webapp/WEB-INF/application-context.xml
openid-connect-server/src/main/java/org/mitre/discovery/web/DiscoveryEndpoint.java
openid-connect-server/src/main/java/org/mitre/oauth2/web/IntrospectionEndpoint.java
openid-connect-server/src/main/java/org/mitre/openid/connect/web/ClientAPI.java
openid-connect-server/src/test/java/org/mitre/oauth2/service/impl/TestDefaultIntrospectionAuthorizer.java
10 years ago
Justin Richer
ba51df0c37
consolidated client credential filter beans
...
(note: imports magic from secoauth)
10 years ago
Justin Richer
4f12fab56b
made unused auth codes expired (they're still single-use), refactored auth code service layer
10 years ago
Justin Richer
7e9ee525a8
cleaned up old i18n files and references
10 years ago
Justin Richer
f39e2e9412
ported the remainder of the swedish language file to the JSON format
10 years ago
Justin Richer
9b0e504cea
transferred remainder of English text to new configuration
10 years ago
Justin Richer
2abcd96bbe
set fallback locale to English, ultimate fall through is to return the code string itself
10 years ago
Justin Richer
285ad71874
made input reader use UTF8, imported the first set of Swedish text to the JSON format
10 years ago
Justin Richer
4d1b08f89d
moved english homepage text to json format
10 years ago
Justin Richer
80605becf1
rudimentary json-based message source
10 years ago
Justin Richer
ed8887864c
added font and key files to non-filtered file sets
10 years ago
Justin Richer
75e0cdd550
fixed syntax error in messages file
10 years ago
Justin Richer
54bec32b7e
restored relative time display to a few pages where it was lost during i18n updates, closes #766
10 years ago
Justin Richer
daee9266c5
default clients to SECRET_BASIC in UI, closes #772
10 years ago
Justin Richer
1735dbca11
extracted controller URLs to constants, closes #769
10 years ago
Justin Richer
c777ebfac9
added universal OAuth exception handling
10 years ago
Justin Richer
1ba14f7682
added resource set and permission ticket tables to mysql datastore
10 years ago
Justin Richer
c3bf359629
turned resource server filter back on
10 years ago
Justin Richer
99c57141cb
fixed prepacked scope value
10 years ago
Justin Richer
ee522100b9
Merge branch 'master' into uma-introspection
...
* master:
fixed logger variable name
made logger declarations consistent across project, closes #780
Fixed logger
null safe
removed DateUtil
added icons to scope editing panel
10 years ago
Justin Richer
627bcaee43
added client_id to resource sets
10 years ago
Justin Richer
5ff9cd1bbb
implemented permission registration API
10 years ago
Justin Richer
0dc7cb05e7
added icons to scope editing panel
10 years ago
Justin Richer
351ce3995a
Merge branch 'master' into uma
...
pulled in deep link checking and checkbox handling
10 years ago
Justin Richer
c8cf2abbd9
made scopes robust against deep links
10 years ago
Justin Richer
45754d3b75
made clients robust against deep links
10 years ago
Justin Richer
d570497b16
fixed some bugs in whitelist rendering and saving
10 years ago
Justin Richer
692e8418d6
fixed whitelist deep linking, closes #718
10 years ago
Justin Richer
8caaf3ae20
whitelist editor now uses checkboxes, closes #773
10 years ago
Justin Richer
4d88e04e59
added resource set registration scope to built in set
10 years ago
Justin Richer
3b6412219b
added abbreviated view, updated OAuth error handling, fixed URL mapping
10 years ago
Justin Richer
3076da1ed8
functioning resource set repository layer
10 years ago
Justin Richer
efeead52b6
fixed typos in data layer, added blank service layer to resource set
10 years ago
Justin Richer
071ea579a3
added resource set class
10 years ago
Justin Richer
b670f44138
added UMA to version number
10 years ago
Justin Richer
19879c20c2
restored restricted grant type behavior on dynamic registration page (was lost in translation)
10 years ago
Justin Richer
6a41e98474
added display flag for default scopes
10 years ago
Justin Richer
5f116d522d
fixed missing display message
10 years ago
Justin Richer
2d53f317b0
checkboxes now control list membership behavior, autocomplete is turned off
10 years ago
Justin Richer
e963c3c1ec
checkbox based list renderer
10 years ago
Justin Richer
9a19207f86
long list widgets now clickable
10 years ago
Justin Richer
9ccaa98e2a
fixed default scope lists for dynamic clients and protected resources
10 years ago
Justin Richer
cf07f75682
added UI for restricted scopes
10 years ago
Justin Richer
593fac83cf
scopes can now be set as "restricted" instead of needing to be set "allowDynReg", closes #747
10 years ago
Justin Richer
ecfb72bc50
additional JOSE class naming
10 years ago
Justin Richer
522edda074
additional JOSE class renaming
10 years ago
Justin Richer
05f03f7c90
yet more year updates
10 years ago
Justin Richer
f7998899cf
missed a few copyright notices
10 years ago
Justin Richer
e2349984b8
happy new year 2015!
10 years ago
Justin Richer
d91da77a31
cleaned up resource reg view
10 years ago
Justin Richer
cdd49d9d54
ported help-block text to other admin pages, cleaned up rsreg form processor
10 years ago
Justin Richer
40b390de6d
pluralized post-logout redirect uris for dynamically registered clients
10 years ago
Justin Richer
da9c8bdee5
added support for help blocks on list widget views
10 years ago
Justin Richer
cc02f8fbe8
pluralized post-logout redirect URI on client, closes #654
10 years ago
Justin Richer
b7612520c4
fixed swedish message
10 years ago
Justin Richer
70779a69ea
reorganized dependency management section, managed cross-module dependencies, updated Nimbus JWT library
10 years ago
Justin Richer
587d4b2db6
further pom file cleanup
10 years ago
Justin Richer
377d8cb884
moved dependency version management to parent pom, closes #666
10 years ago
Justin Richer
d25602fbe7
created a locale resolved tied in with the existing server configuration bean, removed locale interceptor (it doesn't work with fixed resolvers), cleaned up comments and files
10 years ago
Fredrik Jönsson
7861300d72
Activate locale change interceptor and make it overrideable.
10 years ago
Fredrik Jönsson
10b7eb60c8
Fix typo.
10 years ago
Fredrik Jönsson
a80bb19faf
Translate dynreg, rsreg warning.
10 years ago
Fredrik Jönsson
3fbd17ffe3
Translate additional tooltip.
10 years ago
Fredrik Jönsson
c5d1f4de9d
Translated not implemented yet.
10 years ago
Fredrik Jönsson
d774cfeb6d
Fix explicit date format strings.
10 years ago
Fredrik Jönsson
0b4e584533
Translate dates.
10 years ago
Fredrik Jönsson
7dbfa37887
Switch language to English.
10 years ago
Fredrik Jönsson
22e9dd703b
Fix typo.
10 years ago