William Kim
|
cdd3a6d478
|
changed at_hash/c_hash impl. HMAC-SHA --> regular SHA.
|
11 years ago |
|
Amanda Anganes
|
fd611ce353
|
Had an unsaved file hanging around - formatting JSPs
|
11 years ago |
|
Amanda Anganes
|
a91f160e34
|
Fixed formatting in tag files
|
11 years ago |
|
Amanda Anganes
|
5beac9d50d
|
Fixed formatting in JSPs
|
11 years ago |
|
Amanda Anganes
|
2d4d7f7be9
|
Had to hand-merge some things; git got confused
|
11 years ago |
|
Amanda Anganes
|
861beeba64
|
Added c_hash function, added stub of unit test for JWSUtils
|
11 years ago |
|
Amanda Anganes
|
37580cc21e
|
JWSUtils uses JWSAlgorithm to match bit length; ConnectTokenEnhancer calls the util method now
|
11 years ago |
|
Amanda Anganes
|
3a591dc1f4
|
Added JWSUtils class;
|
11 years ago |
|
Amanda Anganes
|
be97aedbc7
|
Used Predicates to filter expired tokens and approved sites;
|
11 years ago |
|
Amanda Anganes
|
b3bb43881d
|
Moved getExpired to service layers
|
11 years ago |
|
Amanda Anganes
|
eea37cf79c
|
Fixed token expiration bug by removing jsql queries. Instead expired tokens or approved sites are filtered at the repository level
|
11 years ago |
|
Amanda Anganes
|
ce4ab6a766
|
Updated spring version to 3.2.3; added a 10-minute initial delay to the scheduled tasks in task-config.xml
|
11 years ago |
|
Amanda Anganes
|
265214511c
|
Renamed oAuth2RequestFactory
|
11 years ago |
|
Amanda Anganes
|
a4c1a7a37d
|
Issue 449
|
11 years ago |
|
Amanda Anganes
|
9dda789488
|
Updated database tables
|
11 years ago |
|
Amanda Anganes
|
2f711c88a7
|
Removed nonce service
|
11 years ago |
|
Amanda Anganes
|
d4fbb4f599
|
Removed Event class
|
11 years ago |
|
William Kim
|
88863f4910
|
replaced mock TokenRequest and the storedAuth test field with concrete objects. test should pass now.
|
11 years ago |
|
William Kim
|
1392faa83c
|
replaced mock client auth with concrete OAuth2Request object
|
11 years ago |
|
Amanda Anganes
|
ad2ace6d74
|
Do not expire registration tokens
|
11 years ago |
|
Justin Richer
|
beaeaa4ccc
|
I can spell "consortium", I promise
|
11 years ago |
|
Justin Richer
|
b2b6fd6448
|
further cleanup
|
11 years ago |
|
Justin Richer
|
856c0ea0b5
|
Merge commit '023dd440d4a0e6e59a14c88013837d79a77c74e0' into 1.1-merge
Conflicts:
openid-connect-client/pom.xml
openid-connect-client/src/main/java/org/mitre/oauth2/introspectingfilter/AuthorizationRequestImpl.java
openid-connect-client/src/main/java/org/mitre/oauth2/introspectingfilter/IntrospectingTokenService.java
openid-connect-client/src/main/java/org/mitre/oauth2/introspectingfilter/IntrospectionAuthorityGranter.java
openid-connect-client/src/main/java/org/mitre/oauth2/introspectingfilter/IntrospectionUrlProvider.java
openid-connect-client/src/main/java/org/mitre/openid/connect/client/OIDCAuthenticationFilter.java
openid-connect-client/src/main/java/org/mitre/openid/connect/client/OIDCAuthenticationProvider.java
openid-connect-client/src/main/java/org/mitre/openid/connect/client/keypublisher/ClientKeyPublisher.java
openid-connect-client/src/main/java/org/mitre/openid/connect/client/keypublisher/ClientKeyPublisherMapping.java
openid-connect-client/src/main/java/org/mitre/openid/connect/client/keypublisher/JwkViewResolver.java
openid-connect-client/src/main/java/org/mitre/openid/connect/client/service/AuthRequestUrlBuilder.java
openid-connect-client/src/main/java/org/mitre/openid/connect/client/service/ClientConfigurationService.java
openid-connect-client/src/main/java/org/mitre/openid/connect/client/service/impl/StaticClientConfigurationService.java
openid-connect-client/src/main/java/org/mitre/openid/connect/client/service/impl/StaticServerConfigurationService.java
openid-connect-client/src/main/java/org/mitre/openid/connect/client/service/impl/StaticSingleIssuerService.java
openid-connect-client/src/main/java/org/mitre/openid/connect/client/service/impl/ThirdPartyIssuerService.java
openid-connect-client/src/test/java/org/mitre/openid/connect/client/AbstractOIDCAuthenticationFilterTest.java
openid-connect-common/pom.xml
openid-connect-common/src/main/java/org/mitre/jose/keystore/JWKSetKeyStore.java
openid-connect-common/src/main/java/org/mitre/jwt/signer/service/JwtSigningAndValidationService.java
openid-connect-common/src/main/java/org/mitre/jwt/signer/service/impl/DefaultJwtSigningAndValidationService.java
openid-connect-common/src/main/java/org/mitre/jwt/signer/service/impl/JWKSetSigningAndValidationServiceCacheService.java
openid-connect-common/src/main/java/org/mitre/oauth2/model/AuthorizationCodeEntity.java
openid-connect-common/src/main/java/org/mitre/oauth2/model/ClientDetailsEntity.java
openid-connect-common/src/main/java/org/mitre/oauth2/model/OAuth2AccessTokenEntity.java
openid-connect-common/src/main/java/org/mitre/oauth2/model/OAuth2RefreshTokenEntity.java
openid-connect-common/src/main/java/org/mitre/oauth2/model/SystemScope.java
openid-connect-common/src/main/java/org/mitre/oauth2/repository/AuthorizationCodeRepository.java
openid-connect-common/src/main/java/org/mitre/oauth2/repository/OAuth2TokenRepository.java
openid-connect-common/src/main/java/org/mitre/oauth2/service/OAuth2TokenEntityService.java
openid-connect-common/src/main/java/org/mitre/openid/connect/config/ConfigurationPropertiesBean.java
openid-connect-common/src/main/java/org/mitre/openid/connect/config/ServerConfiguration.java
openid-connect-common/src/main/java/org/mitre/openid/connect/model/ApprovedSite.java
openid-connect-common/src/main/java/org/mitre/openid/connect/model/BlacklistedSite.java
openid-connect-common/src/main/java/org/mitre/openid/connect/model/Event.java
openid-connect-common/src/main/java/org/mitre/openid/connect/model/OIDCAuthenticationToken.java
openid-connect-common/src/main/java/org/mitre/openid/connect/model/WhitelistedSite.java
openid-connect-common/src/main/java/org/mitre/util/jpa/JpaUtil.java
openid-connect-server/.gitignore
openid-connect-server/pom.xml
openid-connect-server/src/main/java/org/mitre/oauth2/repository/impl/JpaAuthorizationCodeRepository.java
openid-connect-server/src/main/java/org/mitre/oauth2/service/impl/DefaultOAuth2AuthorizationCodeService.java
openid-connect-server/src/main/java/org/mitre/oauth2/service/impl/DefaultOAuth2ClientDetailsEntityService.java
openid-connect-server/src/main/java/org/mitre/oauth2/service/impl/DefaultOAuth2ProviderTokenService.java
openid-connect-server/src/main/java/org/mitre/oauth2/service/impl/DefaultSystemScopeService.java
openid-connect-server/src/main/java/org/mitre/oauth2/token/ChainedTokenGranter.java
openid-connect-server/src/main/java/org/mitre/oauth2/token/JwtAssertionTokenGranter.java
openid-connect-server/src/main/java/org/mitre/oauth2/view/TokenIntrospectionView.java
openid-connect-server/src/main/java/org/mitre/oauth2/web/IntrospectionEndpoint.java
openid-connect-server/src/main/java/org/mitre/oauth2/web/OAuthConfirmationController.java
openid-connect-server/src/main/java/org/mitre/oauth2/web/RevocationEndpoint.java
openid-connect-server/src/main/java/org/mitre/openid/connect/ConnectOAuth2RequestFactory.java
openid-connect-server/src/main/java/org/mitre/openid/connect/assertion/JwtBearerAuthenticationProvider.java
openid-connect-server/src/main/java/org/mitre/openid/connect/assertion/JwtBearerClientAssertionTokenEndpointFilter.java
openid-connect-server/src/main/java/org/mitre/openid/connect/exception/InvalidJwtSignatureException.java
openid-connect-server/src/main/java/org/mitre/openid/connect/exception/UnknownUserInfoSchemaException.java
openid-connect-server/src/main/java/org/mitre/openid/connect/exception/UserNotFoundException.java
openid-connect-server/src/main/java/org/mitre/openid/connect/repository/impl/JpaApprovedSiteRepository.java
openid-connect-server/src/main/java/org/mitre/openid/connect/repository/impl/JpaUserInfoRepository.java
openid-connect-server/src/main/java/org/mitre/openid/connect/service/impl/DefaultApprovedSiteService.java
openid-connect-server/src/main/java/org/mitre/openid/connect/service/impl/DefaultNonceService.java
openid-connect-server/src/main/java/org/mitre/openid/connect/service/impl/DefaultStatsService.java
openid-connect-server/src/main/java/org/mitre/openid/connect/service/impl/DefaultUserInfoUserDetailsService.java
openid-connect-server/src/main/java/org/mitre/openid/connect/service/impl/DefaultWhitelistedSiteService.java
openid-connect-server/src/main/java/org/mitre/openid/connect/token/ConnectTokenEnhancer.java
openid-connect-server/src/main/java/org/mitre/openid/connect/token/TofuUserApprovalHandler.java
openid-connect-server/src/main/java/org/mitre/openid/connect/view/AbstractClientEntityView.java
openid-connect-server/src/main/java/org/mitre/openid/connect/view/ClientInformationResponseView.java
openid-connect-server/src/main/java/org/mitre/openid/connect/view/ExceptionAsJSONView.java
openid-connect-server/src/main/java/org/mitre/openid/connect/view/JsonEntityView.java
openid-connect-server/src/main/java/org/mitre/openid/connect/view/JsonErrorView.java
openid-connect-server/src/main/java/org/mitre/openid/connect/view/POCOUserInfoView.java
openid-connect-server/src/main/java/org/mitre/openid/connect/view/StatsSummary.java
openid-connect-server/src/main/java/org/mitre/openid/connect/view/UserInfoView.java
openid-connect-server/src/main/java/org/mitre/openid/connect/web/ApprovedSiteAPI.java
openid-connect-server/src/main/java/org/mitre/openid/connect/web/BlacklistAPI.java
openid-connect-server/src/main/java/org/mitre/openid/connect/web/ClientAPI.java
openid-connect-server/src/main/java/org/mitre/openid/connect/web/ClientDynamicRegistrationEndpoint.java
openid-connect-server/src/main/java/org/mitre/openid/connect/web/ManagerController.java
openid-connect-server/src/main/java/org/mitre/openid/connect/web/RequestObjectAuthorizationEndpoint.java
openid-connect-server/src/main/java/org/mitre/openid/connect/web/StatsAPI.java
openid-connect-server/src/main/java/org/mitre/openid/connect/web/UserInfoEndpoint.java
openid-connect-server/src/main/java/org/mitre/openid/connect/web/UserInfoInterceptor.java
openid-connect-server/src/main/java/org/mitre/openid/connect/web/WhitelistAPI.java
openid-connect-server/src/main/webapp/WEB-INF/tags/aboutContent.tag
openid-connect-server/src/main/webapp/WEB-INF/tags/breadcrumbs.tag
openid-connect-server/src/main/webapp/WEB-INF/tags/contactContent.tag
openid-connect-server/src/main/webapp/WEB-INF/tags/copyright.tag
openid-connect-server/src/main/webapp/WEB-INF/tags/header.tag
openid-connect-server/src/main/webapp/WEB-INF/tags/landingPageAbout.tag
openid-connect-server/src/main/webapp/WEB-INF/tags/landingPageContact.tag
openid-connect-server/src/main/webapp/WEB-INF/tags/landingPageStats.tag
openid-connect-server/src/main/webapp/WEB-INF/tags/landingPageWelcome.tag
openid-connect-server/src/main/webapp/WEB-INF/tags/sidebar.tag
openid-connect-server/src/main/webapp/WEB-INF/tags/statsContent.tag
openid-connect-server/src/main/webapp/WEB-INF/tags/topbar.tag
openid-connect-server/src/main/webapp/WEB-INF/views/about.jsp
openid-connect-server/src/main/webapp/WEB-INF/views/approve.jsp
openid-connect-server/src/main/webapp/WEB-INF/views/contact.jsp
openid-connect-server/src/main/webapp/WEB-INF/views/exception/usernotfound.jsp
openid-connect-server/src/main/webapp/WEB-INF/views/login.jsp
openid-connect-server/src/main/webapp/WEB-INF/views/manage.jsp
openid-connect-server/src/main/webapp/WEB-INF/views/stats.jsp
pom.xml
|
11 years ago |
|
Justin Richer
|
023dd440d4
|
[maven-release-plugin] prepare for next development iteration
|
11 years ago |
|
Justin Richer
|
5e8f93cf15
|
[maven-release-plugin] prepare release mitreid-connect-1.0.6
|
11 years ago |
|
Justin Richer
|
e658ffd7fc
|
format/cleanup and copyright
|
11 years ago |
|
Justin Richer
|
d4b544d519
|
disable token API (for now)
|
11 years ago |
|
Amanda Anganes
|
906db0ac86
|
Opened token api access to all users; restricted to only show currently-logged-in-users tokens
|
11 years ago |
|
Justin Richer
|
71da5b3d94
|
clean up some discovery values
|
12 years ago |
|
Justin Richer
|
c62bed37ff
|
convert server to use normalizer
|
12 years ago |
|
William Kim
|
93c3e7906f
|
put in line breaks into the extra long comments in DiscoveryEndpoint.java
|
12 years ago |
|
Justin Richer
|
20871852c0
|
updated dependencies for secoauth 1.1
|
12 years ago |
|
Amanda Anganes
|
b397f0ae15
|
First go at adding token API; needs to be tested
|
12 years ago |
|
Amanda Anganes
|
88db457fc4
|
Removed .springBeans from tracking; removed initializingbean in favor of @PostConstruct
|
12 years ago |
|
Amanda Anganes
|
dfbf01c9e3
|
Added .springBeans to gitignore
|
12 years ago |
|
William Kim
|
aad432c5d7
|
replaced stracktrace-printing with logger messages. removed some unused imports.
|
12 years ago |
|
William Kim
|
f483d41b88
|
getCustomClaim -> getClaim. Also, removed outdated TODOs.
|
12 years ago |
|
William Kim
|
17a96ca122
|
removed resolved TODOs. Fixed by the resolution of issue #345.
|
12 years ago |
|
William Kim
|
0d882faeca
|
added a TODO and fixed some comment typos.
|
12 years ago |
|
Amanda Anganes
|
15aea61fbe
|
Applied code cleanup
|
12 years ago |
|
Amanda Anganes
|
3e23967b46
|
Updated code to reflect SECOAUTH changes
|
12 years ago |
|
William Kim
|
9a6f345e15
|
yes, allow default scoping if the client doesn't ask for any.
|
12 years ago |
|
William Kim
|
3d312b7eb5
|
Deleted PermissionDeniedException class. Unused.
|
12 years ago |
|
William Kim
|
c5743dc810
|
updated unit tests to reflect new exception-throwing behavior.
|
12 years ago |
|
William Kim
|
ada54c297d
|
addresses issue #382. Throw an exception when client tries to upscope.
|
12 years ago |
|
Justin Richer
|
0d8c2442d2
|
[maven-release-plugin] prepare for next development iteration
|
12 years ago |
|
Justin Richer
|
9bf5f70957
|
[maven-release-plugin] prepare release mitreid-connect-1.0.5
|
12 years ago |
|
Amanda Anganes
|
12cb672c6d
|
Added new file for task config
|
12 years ago |
|
Amanda Anganes
|
059c2545c9
|
Split task configuration out into its own spring file
|
12 years ago |
|
William Kim
|
910839e5d9
|
fixed typo referring to client id as a client secret in code comments.
|
12 years ago |
|
Amanda Anganes
|
2d3f43e3b8
|
Added task scheduling for deleting expired tokens and approved sites. Configuration is all done in application-context.xml so that it is easy to configure
|
12 years ago |
|
Justin Richer
|
93a0492e97
|
made optional parameters optional
|
12 years ago |
|
Justin Richer
|
a9da88fb79
|
brought introspection endpoint and introspection token services into compliance with draft, addresses #376
|
12 years ago |
|
Josh Mandel
|
34373d777c
|
base URL of the server is set by the issuer.
|
12 years ago |
|
William Kim
|
3eddd58ae4
|
added unit test for checking expiration date of refreshed tokens.
|
12 years ago |
|
William Kim
|
24b24f6fa3
|
More unit tests for refreshing access tokens--specifically, checking scope processing.
|
12 years ago |
|
William Kim
|
5ffe1a50a2
|
Added null-handling for Scope values from the auth request. (Without this, a NullPointerException gets thrown with null scope values).
|
12 years ago |
|
William Kim
|
ed2223cae3
|
unit tests of exceptions cases for refreshing access tokens.
|
12 years ago |
|
William Kim
|
3353b92426
|
deeper unit tests on access token creation.
|
12 years ago |
|
Justin Richer
|
936f581a0b
|
[maven-release-plugin] prepare for next development iteration
|
12 years ago |
|
Justin Richer
|
27edec1a56
|
[maven-release-plugin] prepare release mitreid-connect-1.0.4
|
12 years ago |
|
William Kim
|
10f9858870
|
fixed typo on the about page.
|
12 years ago |
|
William Kim
|
42027e451c
|
added REQUIRED response types to discovery doc. Also, fixed 2 typos in the list of supported grant types.
|
12 years ago |
|
William Kim
|
2a92185433
|
added introspection endpoint URL to discovery document.
|
12 years ago |
|
William Kim
|
741946d1ae
|
updated server discovery code comments.
|
12 years ago |
|
William Kim
|
f27b69d06b
|
removed Version field from server discovery configuration.
|
12 years ago |
|
Justin Richer
|
5505b26aac
|
Form fix for login elements
addresses #352
|
12 years ago |
|
William Kim
|
4f9cbb4b3f
|
added check for null
|
12 years ago |
|
William Kim
|
1528c93acd
|
TestDefaultSystemScopeService unit tests done.
|
12 years ago |
|
William Kim
|
eca62f2d36
|
initial commit for TestDefaultSystemScopeService.
|
12 years ago |
|
William Kim
|
d0dc3c79cb
|
more unit tests for TestDefaultOAuth2ProviderTokenService.
|
12 years ago |
|
William Kim
|
dc51af5b83
|
removed testing builder inner class from DefaultOAuth2ProviderTokenService. Also, added more unit tests.
|
12 years ago |
|
William Kim
|
5ee7aae5d2
|
initial commit TestDefaultOAuth2ProviderTokenService.
|
12 years ago |
|
William Kim
|
abc4f01dde
|
TestDefaultStatsService done.
|
12 years ago |
|
Amanda Anganes
|
c212821267
|
Fixed ChainedTokenGranter setup
|
12 years ago |
|
Amanda Anganes
|
530c3a75ee
|
Applyed refactoring
|
12 years ago |
|
William Kim
|
f0f2fbea40
|
updated secoauth library version in poms
|
12 years ago |
|
Amanda Anganes
|
8b1a538464
|
Updated msql table definitions
|
12 years ago |
|
William Kim
|
cf3cee5ec2
|
removed lolcat :(
|
12 years ago |
|
William Kim
|
37dd7e7042
|
changed demo user accounts for server
|
12 years ago |
|
Justin Richer
|
2b3376e0ed
|
[maven-release-plugin] prepare for next development iteration
|
12 years ago |
|
Justin Richer
|
7fe4bc3b56
|
[maven-release-plugin] prepare release mitreid-connect-1.0.3
|
12 years ago |
|
Justin Richer
|
d6f5ca68bf
|
Added time skew to nonce service test
|
12 years ago |
|
William Kim
|
8935a87c23
|
TestDefaultWhitelistedSiteService done. Removed constructors from DefaultWhitelistedSiteService.
|
12 years ago |
|
William Kim
|
5fb1ef3aca
|
Revised test methods for checking for offline_access scope. Previous tests were doing trivial checking.
|
12 years ago |
|
William Kim
|
8851f4d037
|
TestDefaultOAuth2ClientDetailsEntityService done. Removed constructors from DefaultOAuth2ClientDetailsEntityService.
|
12 years ago |
|
William Kim
|
701217d98c
|
TestDefaultNonceService done.
|
12 years ago |
|
William Kim
|
4ee904cbfd
|
removed setter/getter from DefaultUserInfoUserDetailsService and updated test class with Mockito annotations.
|
12 years ago |
|
William Kim
|
5428848627
|
updated TestDefaultApprovedSiteService to use annotation style Mocking. Allows for removal of injector constructor.
|
12 years ago |
|
William Kim
|
01fcb4828d
|
removed test constructors for DefaultBlacklistedSiteService.java. Used annotation method of injecting mock objects into testing class (@InjectMocks).
|
12 years ago |
|
William Kim
|
9a3625ae2b
|
made unit test for checking blacklisted sites. Introduced a new constructor to be able to inject repository for testing.
|
12 years ago |
|
Justin Richer
|
c577b691c7
|
moved OIDC auth token and userinfo interception filter to common package, addresses #353
|
12 years ago |
|
Justin Richer
|
8290d198c2
|
added passthrough of userinfo for remote OIDC users
|
12 years ago |
|
Justin Richer
|
aea562f565
|
moved mockito dependency to core project
|
12 years ago |
|
Justin Richer
|
6ed7477bc0
|
added stats to admin UI page, restyled scopes and dynamically registered flags
|
12 years ago |
|
Justin Richer
|
6ec8b77f81
|
beans version update (is this a config file? should this even be in here?)
|
12 years ago |
|
William Kim
|
338edcce31
|
fixed typos in admin.js
|
12 years ago |
|
Justin Richer
|
9388c664ab
|
moved reuse refresh token checkbox to its own div/label, addresses #345
|
12 years ago |
|
Justin Richer
|
567a3314d6
|
[maven-release-plugin] prepare for next development iteration
|
12 years ago |
|
Justin Richer
|
1286726188
|
[maven-release-plugin] prepare release mitreid-connect-1.0.2
|
12 years ago |
