Justin Richer
|
38f20afe04
|
added necessary dependencies to common
|
2013-09-24 13:50:36 -04:00 |
|
Justin Richer
|
451fcf6b27
|
pulled dependencies out of parent project
|
2013-09-24 13:50:17 -04:00 |
|
Justin Richer
|
8a5a16f374
|
refactored project into four modules:
Common
Client
Server Library
Server Webapp
addresses #367
|
2013-09-23 17:19:09 -04:00 |
|
Justin Richer
|
bf3e0033fe
|
initial refactor of userinfoview for new model components
|
2013-09-19 12:36:22 -04:00 |
|
Justin Richer
|
9debf1486d
|
pass authorized and requested claims as strings to view
|
2013-09-19 12:36:22 -04:00 |
|
Justin Richer
|
b396610f35
|
refactor processing of request object
|
2013-09-19 12:36:22 -04:00 |
|
Amanda Anganes
|
47d304851d
|
Created token service for OIDC special tokens; removed creation of id tokens and registration_access_tokens to the new service.
|
2013-09-17 16:56:46 -04:00 |
|
Amanda Anganes
|
26a7d0b8a8
|
Fixed typo
|
2013-09-17 11:03:09 -04:00 |
|
Amanda Anganes
|
66e837f650
|
Move extension parameters into OAuth2Request.extensions map; remove all calls to OAuth2Request.getRequestParameters.
|
2013-09-17 10:54:19 -04:00 |
|
Amanda Anganes
|
c98f77c405
|
Remove @PostConstruct from JWKSetKeyStore
|
2013-09-17 10:54:19 -04:00 |
|
Justin Richer
|
b2b915b4ae
|
explcitly set alg and enc instead of trying to guess
|
2013-09-16 17:27:05 -04:00 |
|
Justin Richer
|
b75d77495a
|
if there's only one key, return it as the default
|
2013-09-16 17:27:05 -04:00 |
|
Justin Richer
|
fb2f2f9792
|
spelling, property access, and cleanup
|
2013-09-16 17:27:04 -04:00 |
|
Justin Richer
|
2ca713c7f2
|
added encrypted request object service to client, addresses #475
|
2013-09-16 17:27:04 -04:00 |
|
Justin Richer
|
1d0560edbc
|
refactored some json utils to their own static class
|
2013-09-16 17:27:04 -04:00 |
|
Justin Richer
|
e1ed53a229
|
added missing parts to discovery
|
2013-09-16 17:27:04 -04:00 |
|
Justin Richer
|
aeab1ac3cb
|
added encryption method list to encryption/decryption service
|
2013-09-16 17:27:04 -04:00 |
|
Justin Richer
|
6605877a1b
|
added encryption/decryption to cached JWK-URI service
|
2013-09-16 17:27:04 -04:00 |
|
Justin Richer
|
2b0d02dc72
|
added additional discoverable fields to ServerConfig object
|
2013-09-16 17:27:04 -04:00 |
|
Amanda Anganes
|
85d9e07a94
|
Removed @PostConstruct; placed buildSignersAndVerifiers() calls inside both constructors.
|
2013-09-13 14:44:38 -04:00 |
|
Amanda Anganes
|
c22cd62977
|
Added null check;
|
2013-09-13 14:44:38 -04:00 |
|
Amanda Anganes
|
aecf4958ed
|
Testing removing extra method calls
|
2013-09-13 14:44:38 -04:00 |
|
Justin Richer
|
9f13dc8f77
|
wrap errors in saving the client in an HTTP 400 (instead of HTTP 500) error
|
2013-09-13 14:22:42 -04:00 |
|
Justin Richer
|
9b72c6b1f3
|
check sector identifier URI's contents and match against redirect URIs, addresses #504
|
2013-09-13 14:22:24 -04:00 |
|
Justin Richer
|
1aa5fe25c6
|
re-decrypt request object at userinfo endpoint (this shouldn't need to happen)
|
2013-09-12 17:05:34 -04:00 |
|
Justin Richer
|
09cd752c86
|
added basic support for encrypted request objects, addresses #475
|
2013-09-12 17:05:12 -04:00 |
|
Justin Richer
|
a52f86db49
|
removed NYI tags from request object algorithm fields
|
2013-09-12 16:46:22 -04:00 |
|
Justin Richer
|
d09b3b50d6
|
call encode() instead of new() on Base64URL utility
|
2013-09-12 15:19:14 -04:00 |
|
Justin Richer
|
35bd9c8eda
|
throw appropriate errors from request factory
|
2013-09-12 14:48:54 -04:00 |
|
Justin Richer
|
e67a41c556
|
added transient passthroughs to JOSE algorithms for client
|
2013-09-12 14:08:37 -04:00 |
|
Justin Richer
|
c9aa42dbef
|
better processing for signed request objects
|
2013-09-12 13:56:10 -04:00 |
|
Justin Richer
|
f9ca15139d
|
added phone-number verified, addresses #505
affects #455
|
2013-09-12 10:19:14 -04:00 |
|
Justin Richer
|
6cbed133b2
|
let user know that the client is using a pairwise identifier on approval
|
2013-09-11 17:39:55 -04:00 |
|
Justin Richer
|
a9f639a718
|
moved subject type and sector identifier controls to the 'access' tab
|
2013-09-11 17:14:35 -04:00 |
|
Justin Richer
|
6b66139ead
|
added unit test for uuid service
|
2013-09-11 15:28:00 -04:00 |
|
Justin Richer
|
0281cf02fe
|
calculate pairwise based on redirect uri rather than client id
|
2013-09-11 14:37:17 -04:00 |
|
Justin Richer
|
f6a8ac4529
|
added unit test for default userinfo service (with pairwise checks)
|
2013-09-11 11:59:40 -04:00 |
|
Justin Richer
|
b1a6127d06
|
added equality checks to data model objects
|
2013-09-11 11:59:40 -04:00 |
|
Justin Richer
|
77c0473438
|
fixed comparison order to be null safe
cleaned up type check
|
2013-09-11 11:59:34 -04:00 |
|
Justin Richer
|
dbdc2e777d
|
added pairwise identifier service and repository
|
2013-09-10 17:15:58 -04:00 |
|
Justin Richer
|
bdf62eaa36
|
need to check the sector identifier at some point
|
2013-09-10 16:35:51 -04:00 |
|
Justin Richer
|
914f2e4d93
|
added new call to get the UserInfo in context with the requesting client to allow for pairwise identifiers.
temporary implementation of pairwise identifiers in place
|
2013-09-10 16:01:17 -04:00 |
|
Justin Richer
|
596b385d2a
|
interceptor shouldn't ever overwrite stuff from the base model
|
2013-09-10 15:27:04 -04:00 |
|
Justin Richer
|
149fb1bac1
|
services shouldn't be transactional
|
2013-09-10 15:26:09 -04:00 |
|
Justin Richer
|
c3b90b9d71
|
removed old form value from fetcher
|
2013-09-10 15:06:38 -04:00 |
|
Justin Richer
|
29d1c7d54a
|
userinfo endpoint now uses OAuth2Authentication exclusively
(which is all it was really doing before)
|
2013-09-10 14:16:34 -04:00 |
|
Justin Richer
|
ac42c00062
|
id token now uses userinfo's sub
|
2013-09-10 13:50:49 -04:00 |
|
Justin Richer
|
f139541485
|
added randomized subs to demo users
|
2013-09-10 13:48:37 -04:00 |
|
Justin Richer
|
ded7c66c78
|
fixed misleading error message
|
2013-09-10 13:46:49 -04:00 |
|
Justin Richer
|
b9da10d176
|
look up by username instead of subject
|
2013-09-10 11:39:00 -04:00 |