78fa5f9b1d
Started to write ScopeClaimTranslationService
11 years ago
cb449c25b1
Made a UserInfoSerializer class, attempted to switch UserInfoInterceptor over to use it, but it requires a bad hack. I might be missing something.
11 years ago
59da1960eb
added token_endpoint_auth_signing_alg, addresses #511
...
affects #455
11 years ago
f227724caa
dependency juggling
11 years ago
998b00fd38
moved repo references to parent, added dependencies for webapp
11 years ago
d9ad6d20e8
added spring core, moved servlet and test dependencies up to parent
11 years ago
38f20afe04
added necessary dependencies to common
11 years ago
8a5a16f374
refactored project into four modules:
...
Common
Client
Server Library
Server Webapp
addresses #367
11 years ago
47d304851d
Created token service for OIDC special tokens; removed creation of id tokens and registration_access_tokens to the new service.
11 years ago
26a7d0b8a8
Fixed typo
11 years ago
c98f77c405
Remove @PostConstruct from JWKSetKeyStore
11 years ago
b75d77495a
if there's only one key, return it as the default
11 years ago
fb2f2f9792
spelling, property access, and cleanup
11 years ago
1d0560edbc
refactored some json utils to their own static class
11 years ago
aeab1ac3cb
added encryption method list to encryption/decryption service
11 years ago
6605877a1b
added encryption/decryption to cached JWK-URI service
11 years ago
2b0d02dc72
added additional discoverable fields to ServerConfig object
11 years ago
85d9e07a94
Removed @PostConstruct; placed buildSignersAndVerifiers() calls inside both constructors.
11 years ago
c22cd62977
Added null check;
11 years ago
aecf4958ed
Testing removing extra method calls
11 years ago
e67a41c556
added transient passthroughs to JOSE algorithms for client
11 years ago
f9ca15139d
added phone-number verified, addresses #505
...
affects #455
11 years ago
0281cf02fe
calculate pairwise based on redirect uri rather than client id
11 years ago
b1a6127d06
added equality checks to data model objects
11 years ago
dbdc2e777d
added pairwise identifier service and repository
11 years ago
914f2e4d93
added new call to get the UserInfo in context with the requesting client to allow for pairwise identifiers.
...
temporary implementation of pairwise identifiers in place
11 years ago
596b385d2a
interceptor shouldn't ever overwrite stuff from the base model
11 years ago
b9da10d176
look up by username instead of subject
11 years ago
61544ed774
cleanup
11 years ago
72f0ab631d
added transient structured value to system scope, added scope matcher function to scope service
11 years ago
1ef18a3a93
missed a service definition
11 years ago
b416888b07
Structured Scopes from BB+
11 years ago
0a962e17fa
stopgap to prevent some leaks due to #492
11 years ago
235029ba0e
inject user's authorities into javascript context
11 years ago
be6179d1ac
inject the current user into the javascript context
11 years ago
6276ec8e66
Revert "PlainSigner and PlainVerifier created for alg:none JWS support."
...
This reverts commit 30d7aaa66a
11 years ago
2108311d65
Revert "refactored code to use the more generic JWT declaration."
...
This reverts commit e0b56bc72a
11 years ago
1514b2d2e0
Revert "placeholder"
...
This reverts commit d763a954da
11 years ago
dd35dc60df
Revert "implemented alg:none at the signing service."
...
This reverts commit 02078ebccb
11 years ago
78559b625a
Revert "removed the plain verifer. validating a no-signature is simply handled as a special case in validateSignature(). Also, doing some type safety checks."
...
This reverts commit c957d59f7c
11 years ago
15ec027505
Revert "junit test added for signing service."
...
This reverts commit 9f89f84da1
11 years ago
9f89f84da1
junit test added for signing service.
11 years ago
c957d59f7c
removed the plain verifer. validating a no-signature is simply handled as a special case in validateSignature(). Also, doing some type safety checks.
11 years ago
02078ebccb
implemented alg:none at the signing service.
11 years ago
d763a954da
placeholder
11 years ago
e0b56bc72a
refactored code to use the more generic JWT declaration.
11 years ago
30d7aaa66a
PlainSigner and PlainVerifier created for alg:none JWS support.
11 years ago
da915d8b35
explicitly try to initialize the JWK set if it's null by the time the getter is called
11 years ago
0059c7b4cc
Use clients preferred algorithm, if any, to sign
11 years ago
a80c19384f
added 'use server default' to JOSE options, addresses #462
11 years ago
ba0c3c5d78
id tokens always expire, addresses #416
11 years ago
21068f57e6
cached jwk services expire after an hour
11 years ago
6e2baa3ec4
updated comments for jwe service.
11 years ago
e1b072c991
Updated nimbusds library version to 2.17.2 and made relevant changes in enc./dec. service and test
11 years ago
372675fd2a
changed encrypt/decrypt parameter to use JWEObject instead of EncryptedJWT
11 years ago
f0b77f8614
RSA encryption service tested.
11 years ago
3a1c551ff7
implemented symmetric key encryption.
11 years ago
dfbefe0780
encrypt/decrypt implemented. initial commit for unit testing of jwe service.
11 years ago
ae6721dd10
jwe service accessor methods and private initializing method done.
11 years ago
887338b2d9
jwe service init commit.
11 years ago
be97aedbc7
Used Predicates to filter expired tokens and approved sites;
11 years ago
b3bb43881d
Moved getExpired to service layers
11 years ago
eea37cf79c
Fixed token expiration bug by removing jsql queries. Instead expired tokens or approved sites are filtered at the repository level
11 years ago
2f711c88a7
Removed nonce service
11 years ago
d4fbb4f599
Removed Event class
11 years ago
beaeaa4ccc
I can spell "consortium", I promise
11 years ago
b2b6fd6448
further cleanup
11 years ago
856c0ea0b5
Merge commit '023dd440d4a0e6e59a14c88013837d79a77c74e0' into 1.1-merge
...
Conflicts:
openid-connect-client/pom.xml
openid-connect-client/src/main/java/org/mitre/oauth2/introspectingfilter/AuthorizationRequestImpl.java
openid-connect-client/src/main/java/org/mitre/oauth2/introspectingfilter/IntrospectingTokenService.java
openid-connect-client/src/main/java/org/mitre/oauth2/introspectingfilter/IntrospectionAuthorityGranter.java
openid-connect-client/src/main/java/org/mitre/oauth2/introspectingfilter/IntrospectionUrlProvider.java
openid-connect-client/src/main/java/org/mitre/openid/connect/client/OIDCAuthenticationFilter.java
openid-connect-client/src/main/java/org/mitre/openid/connect/client/OIDCAuthenticationProvider.java
openid-connect-client/src/main/java/org/mitre/openid/connect/client/keypublisher/ClientKeyPublisher.java
openid-connect-client/src/main/java/org/mitre/openid/connect/client/keypublisher/ClientKeyPublisherMapping.java
openid-connect-client/src/main/java/org/mitre/openid/connect/client/keypublisher/JwkViewResolver.java
openid-connect-client/src/main/java/org/mitre/openid/connect/client/service/AuthRequestUrlBuilder.java
openid-connect-client/src/main/java/org/mitre/openid/connect/client/service/ClientConfigurationService.java
openid-connect-client/src/main/java/org/mitre/openid/connect/client/service/impl/StaticClientConfigurationService.java
openid-connect-client/src/main/java/org/mitre/openid/connect/client/service/impl/StaticServerConfigurationService.java
openid-connect-client/src/main/java/org/mitre/openid/connect/client/service/impl/StaticSingleIssuerService.java
openid-connect-client/src/main/java/org/mitre/openid/connect/client/service/impl/ThirdPartyIssuerService.java
openid-connect-client/src/test/java/org/mitre/openid/connect/client/AbstractOIDCAuthenticationFilterTest.java
openid-connect-common/pom.xml
openid-connect-common/src/main/java/org/mitre/jose/keystore/JWKSetKeyStore.java
openid-connect-common/src/main/java/org/mitre/jwt/signer/service/JwtSigningAndValidationService.java
openid-connect-common/src/main/java/org/mitre/jwt/signer/service/impl/DefaultJwtSigningAndValidationService.java
openid-connect-common/src/main/java/org/mitre/jwt/signer/service/impl/JWKSetSigningAndValidationServiceCacheService.java
openid-connect-common/src/main/java/org/mitre/oauth2/model/AuthorizationCodeEntity.java
openid-connect-common/src/main/java/org/mitre/oauth2/model/ClientDetailsEntity.java
openid-connect-common/src/main/java/org/mitre/oauth2/model/OAuth2AccessTokenEntity.java
openid-connect-common/src/main/java/org/mitre/oauth2/model/OAuth2RefreshTokenEntity.java
openid-connect-common/src/main/java/org/mitre/oauth2/model/SystemScope.java
openid-connect-common/src/main/java/org/mitre/oauth2/repository/AuthorizationCodeRepository.java
openid-connect-common/src/main/java/org/mitre/oauth2/repository/OAuth2TokenRepository.java
openid-connect-common/src/main/java/org/mitre/oauth2/service/OAuth2TokenEntityService.java
openid-connect-common/src/main/java/org/mitre/openid/connect/config/ConfigurationPropertiesBean.java
openid-connect-common/src/main/java/org/mitre/openid/connect/config/ServerConfiguration.java
openid-connect-common/src/main/java/org/mitre/openid/connect/model/ApprovedSite.java
openid-connect-common/src/main/java/org/mitre/openid/connect/model/BlacklistedSite.java
openid-connect-common/src/main/java/org/mitre/openid/connect/model/Event.java
openid-connect-common/src/main/java/org/mitre/openid/connect/model/OIDCAuthenticationToken.java
openid-connect-common/src/main/java/org/mitre/openid/connect/model/WhitelistedSite.java
openid-connect-common/src/main/java/org/mitre/util/jpa/JpaUtil.java
openid-connect-server/.gitignore
openid-connect-server/pom.xml
openid-connect-server/src/main/java/org/mitre/oauth2/repository/impl/JpaAuthorizationCodeRepository.java
openid-connect-server/src/main/java/org/mitre/oauth2/service/impl/DefaultOAuth2AuthorizationCodeService.java
openid-connect-server/src/main/java/org/mitre/oauth2/service/impl/DefaultOAuth2ClientDetailsEntityService.java
openid-connect-server/src/main/java/org/mitre/oauth2/service/impl/DefaultOAuth2ProviderTokenService.java
openid-connect-server/src/main/java/org/mitre/oauth2/service/impl/DefaultSystemScopeService.java
openid-connect-server/src/main/java/org/mitre/oauth2/token/ChainedTokenGranter.java
openid-connect-server/src/main/java/org/mitre/oauth2/token/JwtAssertionTokenGranter.java
openid-connect-server/src/main/java/org/mitre/oauth2/view/TokenIntrospectionView.java
openid-connect-server/src/main/java/org/mitre/oauth2/web/IntrospectionEndpoint.java
openid-connect-server/src/main/java/org/mitre/oauth2/web/OAuthConfirmationController.java
openid-connect-server/src/main/java/org/mitre/oauth2/web/RevocationEndpoint.java
openid-connect-server/src/main/java/org/mitre/openid/connect/ConnectOAuth2RequestFactory.java
openid-connect-server/src/main/java/org/mitre/openid/connect/assertion/JwtBearerAuthenticationProvider.java
openid-connect-server/src/main/java/org/mitre/openid/connect/assertion/JwtBearerClientAssertionTokenEndpointFilter.java
openid-connect-server/src/main/java/org/mitre/openid/connect/exception/InvalidJwtSignatureException.java
openid-connect-server/src/main/java/org/mitre/openid/connect/exception/UnknownUserInfoSchemaException.java
openid-connect-server/src/main/java/org/mitre/openid/connect/exception/UserNotFoundException.java
openid-connect-server/src/main/java/org/mitre/openid/connect/repository/impl/JpaApprovedSiteRepository.java
openid-connect-server/src/main/java/org/mitre/openid/connect/repository/impl/JpaUserInfoRepository.java
openid-connect-server/src/main/java/org/mitre/openid/connect/service/impl/DefaultApprovedSiteService.java
openid-connect-server/src/main/java/org/mitre/openid/connect/service/impl/DefaultNonceService.java
openid-connect-server/src/main/java/org/mitre/openid/connect/service/impl/DefaultStatsService.java
openid-connect-server/src/main/java/org/mitre/openid/connect/service/impl/DefaultUserInfoUserDetailsService.java
openid-connect-server/src/main/java/org/mitre/openid/connect/service/impl/DefaultWhitelistedSiteService.java
openid-connect-server/src/main/java/org/mitre/openid/connect/token/ConnectTokenEnhancer.java
openid-connect-server/src/main/java/org/mitre/openid/connect/token/TofuUserApprovalHandler.java
openid-connect-server/src/main/java/org/mitre/openid/connect/view/AbstractClientEntityView.java
openid-connect-server/src/main/java/org/mitre/openid/connect/view/ClientInformationResponseView.java
openid-connect-server/src/main/java/org/mitre/openid/connect/view/ExceptionAsJSONView.java
openid-connect-server/src/main/java/org/mitre/openid/connect/view/JsonEntityView.java
openid-connect-server/src/main/java/org/mitre/openid/connect/view/JsonErrorView.java
openid-connect-server/src/main/java/org/mitre/openid/connect/view/POCOUserInfoView.java
openid-connect-server/src/main/java/org/mitre/openid/connect/view/StatsSummary.java
openid-connect-server/src/main/java/org/mitre/openid/connect/view/UserInfoView.java
openid-connect-server/src/main/java/org/mitre/openid/connect/web/ApprovedSiteAPI.java
openid-connect-server/src/main/java/org/mitre/openid/connect/web/BlacklistAPI.java
openid-connect-server/src/main/java/org/mitre/openid/connect/web/ClientAPI.java
openid-connect-server/src/main/java/org/mitre/openid/connect/web/ClientDynamicRegistrationEndpoint.java
openid-connect-server/src/main/java/org/mitre/openid/connect/web/ManagerController.java
openid-connect-server/src/main/java/org/mitre/openid/connect/web/RequestObjectAuthorizationEndpoint.java
openid-connect-server/src/main/java/org/mitre/openid/connect/web/StatsAPI.java
openid-connect-server/src/main/java/org/mitre/openid/connect/web/UserInfoEndpoint.java
openid-connect-server/src/main/java/org/mitre/openid/connect/web/UserInfoInterceptor.java
openid-connect-server/src/main/java/org/mitre/openid/connect/web/WhitelistAPI.java
openid-connect-server/src/main/webapp/WEB-INF/tags/aboutContent.tag
openid-connect-server/src/main/webapp/WEB-INF/tags/breadcrumbs.tag
openid-connect-server/src/main/webapp/WEB-INF/tags/contactContent.tag
openid-connect-server/src/main/webapp/WEB-INF/tags/copyright.tag
openid-connect-server/src/main/webapp/WEB-INF/tags/header.tag
openid-connect-server/src/main/webapp/WEB-INF/tags/landingPageAbout.tag
openid-connect-server/src/main/webapp/WEB-INF/tags/landingPageContact.tag
openid-connect-server/src/main/webapp/WEB-INF/tags/landingPageStats.tag
openid-connect-server/src/main/webapp/WEB-INF/tags/landingPageWelcome.tag
openid-connect-server/src/main/webapp/WEB-INF/tags/sidebar.tag
openid-connect-server/src/main/webapp/WEB-INF/tags/statsContent.tag
openid-connect-server/src/main/webapp/WEB-INF/tags/topbar.tag
openid-connect-server/src/main/webapp/WEB-INF/views/about.jsp
openid-connect-server/src/main/webapp/WEB-INF/views/approve.jsp
openid-connect-server/src/main/webapp/WEB-INF/views/contact.jsp
openid-connect-server/src/main/webapp/WEB-INF/views/exception/usernotfound.jsp
openid-connect-server/src/main/webapp/WEB-INF/views/login.jsp
openid-connect-server/src/main/webapp/WEB-INF/views/manage.jsp
openid-connect-server/src/main/webapp/WEB-INF/views/stats.jsp
pom.xml
11 years ago
023dd440d4
[maven-release-plugin] prepare for next development iteration
11 years ago
5e8f93cf15
[maven-release-plugin] prepare release mitreid-connect-1.0.6
11 years ago
e658ffd7fc
format/cleanup and copyright
11 years ago
906db0ac86
Opened token api access to all users; restricted to only show currently-logged-in-users tokens
11 years ago
fb448a246a
converted test data to map, use new serializer
12 years ago
8edd6da136
added serializer for non-heirarchical URIs
12 years ago
5893d8f8f8
fixed up parsing regular expression
12 years ago
f565688e59
changed name issuer->normalized. the result of normalization is not necessarily the issuer.
12 years ago
d80aaced9a
reorganized test data and test methods.
12 years ago
809a243b64
tests for webfinger url normalization.
12 years ago
eaa7298ef1
init commit for Webfinger normilizer utility class.
12 years ago
20871852c0
updated dependencies for secoauth 1.1
12 years ago
b397f0ae15
First go at adding token API; needs to be tested
12 years ago
88db457fc4
Removed .springBeans from tracking; removed initializingbean in favor of @PostConstruct
12 years ago
a4a18fd54c
externalized introspection URL from client's introspecting token service, addresses #435
...
added service to parses token as JWT and pulls out issuer to find server
added introspection url to serverconfig object
added introspection parsing (and parse checks) to dynamic server config object
12 years ago
aad432c5d7
replaced stracktrace-printing with logger messages. removed some unused imports.
12 years ago
15aea61fbe
Applied code cleanup
12 years ago
e00d696c60
deleted auto-generated TODO.
12 years ago
e9c246808f
only our entity version may be stored in our storage layer. removed TODO.
12 years ago
0d8c2442d2
[maven-release-plugin] prepare for next development iteration
12 years ago
9bf5f70957
[maven-release-plugin] prepare release mitreid-connect-1.0.5
12 years ago
77be0d0ea8
implemented getExpiresIn() for oauth access token entities.
12 years ago
2d3f43e3b8
Added task scheduling for deleting expired tokens and approved sites. Configuration is all done in application-context.xml so that it is easy to configure
12 years ago
936f581a0b
[maven-release-plugin] prepare for next development iteration
12 years ago
27edec1a56
[maven-release-plugin] prepare release mitreid-connect-1.0.4
12 years ago
a668fb964d
changed String comparison implementation for better readability
12 years ago
ab4d1da9d4
added logger warning if issuer url does not use http scheme.
12 years ago
b438e87f98
passed wire testing and updated unit tests.
12 years ago
e74444e3d1
addresses issue #366
12 years ago
530c3a75ee
Applyed refactoring
12 years ago
f0f2fbea40
updated secoauth library version in poms
12 years ago
2b3376e0ed
[maven-release-plugin] prepare for next development iteration
12 years ago
7fe4bc3b56
[maven-release-plugin] prepare release mitreid-connect-1.0.3
12 years ago
d6109fd1ae
explicitly mapped missing JPA columns in common->openid.connect.model #317
12 years ago
46641a2fa1
explicitly mapped missing JPA columns in common-oauth2.model #317
12 years ago
c577b691c7
moved OIDC auth token and userinfo interception filter to common package, addresses #353
12 years ago
6ed7477bc0
added stats to admin UI page, restyled scopes and dynamically registered flags
12 years ago
567a3314d6
[maven-release-plugin] prepare for next development iteration
12 years ago
1286726188
[maven-release-plugin] prepare release mitreid-connect-1.0.2
12 years ago
de77f2c75a
commentary!
12 years ago
d0eb98b8ff
tests for embedded JOSE objects
12 years ago
8ee299aab3
added tests for ClientDetailsEntity and RegisteredClient data objects
12 years ago
c760ebf4a4
changed expires_at -> client_secret_expires_at, issued_at -> client_id_issued_at
12 years ago
317526b1ad
unit tests for basic data classes
12 years ago
cc1da67639
fixed expires_at property, hid helper functions
12 years ago
3c5025c52b
Updated version number for secoauth
12 years ago
25d75a1b30
[maven-release-plugin] prepare for next development iteration
12 years ago
5418bdef5a
[maven-release-plugin] prepare release mitreid-connect-1.0.1
12 years ago
81cd13f6d3
added RegisteredClient class to facilitate client configuration and dynamic registration, addresses #335
12 years ago
defa5b8fbc
[maven-release-plugin] prepare for next development iteration
12 years ago
dbdc99361e
[maven-release-plugin] prepare release mitreid-connect-1.0.0
12 years ago
1e870703f8
added licence/copyright header
12 years ago
8afab04544
whitespace, import, brace, annotation, and format cleanups
12 years ago
b8c385e5c9
pom file cleanups
12 years ago
9b03801f9d
[maven-release-plugin] prepare for next development iteration
12 years ago
d76304b9a6
[maven-release-plugin] prepare release mitreid-connect-0.9.3
12 years ago
c80b1081cc
Cleaning up approvedsite => token linkage
12 years ago
939a801048
Redid approved site -> token mapping so it is unidirectional from ApprovedSite side. Fixed some error logging, added a new view for ApprovedSite which will only show the IDs of the tokens in the approvedTokens list
12 years ago
a79aca906e
Fixed error logging; added ApprovedSite tracking to tokens
12 years ago
94aa279290
[maven-release-plugin] prepare for next development iteration
12 years ago
cc92743888
[maven-release-plugin] prepare release mitreid-connect-0.9.2
12 years ago
7307b4b19d
added tostring to system scope to help with debugging
12 years ago
fb859fc39a
added client dynamic registration service, extracted clientdetails<->json processing into its own static class
12 years ago
cf39b49657
added registration uri to server config, changed index of client config service to be server config not just issuer
12 years ago
f76f44b999
added dynamic discovery to client
12 years ago
33af3b1ad6
updated discovery endpoint to latest spec, removed surplus specialized view
12 years ago
ac2993c402
[maven-release-plugin] prepare for next development iteration
12 years ago
f0d75f9144
[maven-release-plugin] prepare release mitreid-connect-0.9.1
12 years ago
23c318f6c2
Updating guava to 14.0.1
12 years ago
86a42ce294
fixed typo for older versions of java/maven
12 years ago
5f54777109
[maven-release-plugin] prepare for next development iteration
12 years ago
620a60ddc2
[maven-release-plugin] prepare release mitreid-connect-0.9.0
12 years ago
54f1ae972b
Added properties and updated poms for sync to central
12 years ago
f101dcc512
moved to released version of SECOAUTH
12 years ago
72e2c7cb6c
Updated build references
12 years ago
4538d8fb14
made signing and verification service construction safe for public-only keys
12 years ago
6cc50e7cd5
switched signing & validation service to use JWK natively for keys
12 years ago
5a04198eac
moved to JPSK based key store
12 years ago
e2ad4d2e8f
cleaned up spurious nosuchalgorithm exceptions, addresses #285
12 years ago
5f7c46aecd
updated to nimbus 2.13
12 years ago
fcc95f8a0a
Moved nonce processing stuff into nonce service and out of ConnectAuthorizationRequestManager
12 years ago
08eaaa0a12
updated repository to use proper concrete class
12 years ago
Amanda Anganes