Justin Richer
|
62a43165f0
|
added json member type checking for json utils, won't die if a string is found where an array was expected
closes #637
|
2014-07-20 09:42:57 -07:00 |
Justin Richer
|
325a200f16
|
added configurable support for different token presentation methods in user info fetcher, closes #632
|
2014-07-20 09:27:02 -07:00 |
Justin Richer
|
1db4227ce5
|
reformat / reorder
|
2014-07-20 09:02:42 -07:00 |
Justin Richer
|
f997049eff
|
key service can now deal with missing 'kid' fields in JWKs
closes #639
|
2014-07-20 08:40:04 -07:00 |
Justin Richer
|
8768188133
|
makes the grant types checker softer, closes #640
|
2014-07-19 23:54:02 -07:00 |
Justin Richer
|
2a2a86a14d
|
further escaping on approval page
closes #634
|
2014-07-19 23:32:05 -07:00 |
Justin Richer
|
a192cc4620
|
added escaping to JSP display
|
2014-07-19 23:18:04 -07:00 |
Justin Richer
|
91e00d79e3
|
changed all templates to print escaped characters
|
2014-07-19 22:39:48 -07:00 |
Justin Richer
|
38b6ab7a1b
|
changed user button on top bar to drop down, tweaked login page, closes #635
|
2014-07-17 00:11:27 -04:00 |
Justin Richer
|
9666404d54
|
added "none" to discovery endpoint
|
2014-07-16 23:48:18 -04:00 |
Justin Richer
|
7476edb310
|
added unsigned ID token support to server
|
2014-07-16 22:29:13 -04:00 |
Justin Richer
|
c7a6c4fafe
|
added support for unsigned ID tokens in client, use client configuration to turn this on, closes #633
|
2014-07-16 22:18:07 -04:00 |
tsitkov
|
5c2cb75407
|
Better test coverage for JWS/EAlgorithmEmbed, JWEEncryptionMethodEmbed
|
2014-07-16 21:39:13 -04:00 |
Justin Richer
|
285f5ef10b
|
added some header icons
|
2014-07-14 00:01:23 -04:00 |
Justin Richer
|
042a109312
|
grouped buttons in admin panel, closes #459
|
2014-07-04 22:15:51 -04:00 |
Justin Richer
|
55491c9979
|
enhanced client searching, closes #565 closes #566
|
2014-07-04 22:00:50 -04:00 |
Justin Richer
|
343e95d161
|
refresh token table displays count of currently active access tokens, closes #554
|
2014-07-02 18:23:02 -04:00 |
Justin Richer
|
665df2b29c
|
grants table displays number of access tokens associated with grant (not id or refresh tokens), closes #555
|
2014-07-02 18:06:48 -04:00 |
Justin Richer
|
538c4031bb
|
added in better default checks for content negotiation
|
2014-07-02 16:01:26 -04:00 |
Justin Richer
|
3412c1877e
|
removed unnecessary unit test
|
2014-07-02 15:05:37 -04:00 |
tsitkov
|
e1b4df74f0
|
Added tests for DefaultJwtEncryptionAndDecryptionService
|
2014-07-02 14:57:56 -04:00 |
Justin Richer
|
5223d88e0a
|
updated unit test to fit new nimbus version
|
2014-07-02 11:41:38 -04:00 |
Kristina Sahlmann
|
7bf8e2ad08
|
change the OctetSequenceKey constructor in SymmetricCacheService
|
2014-07-02 11:37:42 -04:00 |
Kristina Sahlmann
|
306c8cff17
|
update nimbus-jose-jwt dependency to 2.26 and fix the affected files
|
2014-07-02 11:37:42 -04:00 |
tsitkov
|
48431fd5c7
|
Unit test for JWKSetKeyStore class
|
2014-06-30 13:21:07 -04:00 |
Justin Richer
|
078bf5e464
|
combine HTTP content negotiation with client preferences for user info endpoint
|
2014-06-28 23:44:37 -04:00 |
Justin Richer
|
1de2a61176
|
made accept header optional for user info request
|
2014-06-28 22:20:05 -04:00 |
Justin Richer
|
112154a2d8
|
cleaned up contacts handling across all classes of client, added text to address #626
|
2014-06-26 13:10:19 -04:00 |
Justin Richer
|
04acc21eea
|
removed injection of admin email address from client API, will happen browser-side now
|
2014-06-26 13:00:36 -04:00 |
Justin Richer
|
a8185e5ae2
|
changed display text for unknown registration time on clients
|
2014-06-26 12:59:35 -04:00 |
Justin Richer
|
9a3bf818cd
|
added icon for token introspection enabled clients
|
2014-06-26 12:59:19 -04:00 |
Justin Richer
|
683776e031
|
removed extraneous yup, closes #623
|
2014-06-26 11:51:23 -04:00 |
Justin Richer
|
0e02a4c7ca
|
fixed wonky CSS on login page ... again
(backport from MIT)
|
2014-06-26 11:27:44 -04:00 |
Justin Richer
|
d35f1fa014
|
added element scope to query for logo preview, closes #624
|
2014-06-26 11:11:12 -04:00 |
Justin Richer
|
08d62473be
|
removed placeholder log-in box on lefthand side for non-logged-in users, replaced with a half-width spacer
|
2014-06-25 15:29:45 -04:00 |
Justin Richer
|
adf477c64e
|
[maven-release-plugin] prepare for next development iteration
|
2014-06-18 18:27:27 -04:00 |
Justin Richer
|
8d97ed61ec
|
[maven-release-plugin] prepare release mitreid-connect-1.1.8
|
2014-06-18 18:27:25 -04:00 |
Justin Richer
|
acf039a1f7
|
wrapped auth method check, added SECRET_JWT, closes #621
|
2014-06-18 18:24:05 -04:00 |
Justin Richer
|
9f9b49fc63
|
refactored validator checks to cascade better, throw an authentication exception if we can't find a validator for the ID Token
|
2014-06-18 18:17:14 -04:00 |
Christopher Elkins
|
a465559ac5
|
Revert incorrect key-encoding change in SymmetricCacheService
|
2014-06-18 18:10:33 -04:00 |
Christopher Elkins
|
1dc204f975
|
Validate HMAC-signed ID tokens
|
2014-06-18 18:10:33 -04:00 |
Justin Richer
|
5773fe195b
|
set proper content type on user info JWT response
|
2014-06-18 18:05:11 -04:00 |
Justin Richer
|
5f97ce0ca1
|
fixed error code string
|
2014-06-18 14:50:17 -04:00 |
Justin Richer
|
6589cd717d
|
disallow fragments in redirect uris for dynamic clients, closes #622
|
2014-06-18 14:49:29 -04:00 |
Justin Richer
|
4e52543091
|
more properly respond to some client registration errors
|
2014-06-18 14:45:55 -04:00 |
Justin Richer
|
c493f438e7
|
applied token rotation to protected resources
|
2014-06-12 19:37:50 -04:00 |
Justin Richer
|
f4edd3164f
|
made timeout field optional, tokens don't expire in the default case
|
2014-06-12 19:37:32 -04:00 |
tjain
|
276d846f4c
|
Configuration Property Bean to load the OP wide registration token life
time
|
2014-06-12 19:12:32 -04:00 |
Trilok Jain
|
4e09ec687b
|
Registration Token regeneration - when they are beyond their lifetime
(in read/update calls)
|
2014-06-12 19:12:32 -04:00 |
Trilok Jain
|
ed3e6a2814
|
https://github.com/mitreid-connect/OpenID-Connect-Java-Spring-Server/issues/431:
Generating a new registration access token on read/update call and
revoking the token issued earlier.
|
2014-06-12 19:12:32 -04:00 |