44b24af466
database storage for device flow
2017-03-14 17:40:28 -04:00
548dad4e29
added expiration to device codes
2017-03-14 17:40:27 -04:00
9cb5377ce8
added device code validity seconds to client model
2017-03-14 17:40:27 -04:00
a5b4115169
functioning device code flow
2017-03-14 17:40:26 -04:00
3326eee934
shell for device flow
2017-03-14 17:40:26 -04:00
c42fe57367
changed task operations to print out name of operation on run
2017-03-14 17:40:26 -04:00
72fd3c2b99
added ID Token Validity Seconds to data import/export API
2017-03-11 15:36:45 -05:00
3e5e7a0f0b
[maven-release-plugin] prepare for next development iteration
2017-03-03 18:03:26 -05:00
0d84db49af
[maven-release-plugin] prepare release mitreid-connect-1.3.0-RC1
2017-03-03 18:03:20 -05:00
98a4d56cdd
made extraction function less side-effect-ful
2017-03-03 17:20:15 -05:00
00ecd3dd22
Fix NPE if no claims are requested for the userinfo object
...
This happens if clients only requests id_token claims, or just send an empty claims parameter.
Change-Id: I8bd176ad271bda8a1e2f26b6221bd8e2d0a3ebfb
2017-03-03 16:09:51 -05:00
141f4da7f1
added PKCE editing capabilities to UI
2017-02-20 15:40:16 -05:00
c79b6da9d9
Javascript files for UI functionality loaded from configuration bean
2017-02-17 17:34:03 -05:00
b176d4d77e
cleaned up old endpoints
2017-02-16 18:24:21 -05:00
8178af87f0
further modularized data import/export service
2017-02-16 18:24:05 -05:00
52d2298f99
begin modularization of data import/export API
2017-02-15 11:51:32 -05:00
db50a88fe5
Happy New Year 2017
2017-01-17 17:09:14 -05:00
b17a7f43ae
removed structured scopes
2017-01-17 17:06:04 -05:00
46046b574a
Implemented paged operations and used for database cleanup tasks.
2017-01-17 15:36:57 -05:00
099211593c
Fix high load performance issue in token expiration task
2017-01-17 15:36:57 -05:00
0e703ef9f9
update a few dependency versions, closes #1145
2016-12-21 15:50:24 -05:00
91da3935f5
Made ID tokens ephemeral, made access token’s “additional information” extensible
2016-12-21 13:01:15 -05:00
4f4c8de1c8
Fix JPA issues to allow using Hibernate
2016-12-09 15:15:50 -05:00
22fa3605ef
Patched unit tests, still needs updates for checking approved site to token mapping on data import/export
2016-12-09 12:56:06 -05:00
55b1b00b73
Updated relationship between approved sites and access tokens, closes #874
2016-12-09 12:55:42 -05:00
d875d52be7
updated data import/export services for 1.3
2016-12-08 17:01:55 -05:00
7725fcfa2b
createAuthorizationCode should be @Transactional
...
An Authentication should not exist without its matching AuthorizationCode, but typically an AuthorizationCode will have a foreign key on an Authentication, meaning it can't be saved first. This block should be wrapped in a transaction so that other DB clients (say, for example, clearExpiredAuthorizationCodes) don't see an inconsistent snapshot and then misbehave.
2016-12-02 16:29:48 -05:00
c3d0c18af5
make HttpClient configurable, closes #1071
2016-12-02 16:23:55 -05:00
bb6bb81dbc
Add new tests which asserts that `user_id` should not be present in the introspection response if there's no user authentication available
2016-12-02 16:08:32 -05:00
52da5e769a
Fix test by returning a new OAuth2Authentication instead of mocking it
2016-12-02 16:08:32 -05:00
b2fab9642e
Fix such that `user_id` is only added if user authentication is available
...
OAuth2Authentication#getPrincipal() used by OAuth2Authentication#getName() defaults to the client id if user authentication is not available.
Prior to this fix, an introspection of a client-only access token would result to the user_id also being the client_id. This causes problems when this
introspection result is converted into an OAuth2Authentication by a resource server's IntrospectingTokenService -- the user_id is populated with
the client_id and so OAuth2Authentication's userAuthentication is populated falsely.
2016-12-02 16:08:32 -05:00
dea6044e77
Set the encoding of the UserInfo response body to UTF-8
...
See http://openid.net/specs/openid-connect-core-1_0.html#UserInfoResponse
2016-12-02 14:44:55 -05:00
af7c1f7d45
added PKCE support to discovery endpoint
2016-07-27 20:31:27 -04:00
ba0d0aab0b
use parameter constants for extensions maps in token service
2016-07-24 17:46:04 -04:00
ac0cafe7b3
parse and process PKCE requests
2016-07-24 17:45:43 -04:00
57208ac35d
added software statements to client API
2016-07-24 16:12:56 -04:00
d89257380f
make client assertion auth work again
2016-07-24 15:28:51 -04:00
f9e4d75a4a
use JWT bearer assertion token for assertion processing
2016-07-24 14:55:45 -04:00
bd9932d56f
added assertion processor to token endpoint
2016-07-22 15:31:00 -04:00
a5a12b2f1f
added assertion validation engine
2016-07-22 13:47:20 -04:00
fa63993896
added software statement to client model, added processor to dynamic registration parser
2016-07-21 16:55:46 -04:00
a951a22bf8
explicitly use language and country codes for locale resolution
2016-07-14 18:29:37 -04:00
b8cc0a82b3
fix issue #1061 : auto-detect locale country code
2016-07-14 18:29:37 -04:00
7177854416
inverted boolean for #1033
2016-07-08 13:00:26 -04:00
39bae3a160
make the client auth URL matcher use an existing matcher instead of custom code
2016-07-08 11:42:35 -04:00
01892b6f47
use a request matcher on authorization request filter, closes #1033
2016-07-08 11:00:01 -04:00
ca6e867df6
manage dependency versions in parent
2016-07-07 16:46:38 -04:00
ecb4a9ed53
Check that the underlying cause of the PersistenceException is caused by a duplicate entry.
2016-07-07 16:45:36 -04:00
6fb26856a7
Make apiAddClient in the client api return a HttpStatus.Conflict if you try to create a client with a used client id.
...
This fixes a bug where if you try to create a client with a client id that is already in use, you get an empty error message. Instead, now you get a message that tells you that the client couldn't be created because the client id is already in use.
2016-07-07 16:45:36 -04:00
8e71107f9b
Fix NPE when checking claim extension, Simplify always true expressions
2016-07-07 16:35:50 -04:00
Justin Richer