3412c1877e
removed unnecessary unit test
11 years ago
e1b4df74f0
Added tests for DefaultJwtEncryptionAndDecryptionService
11 years ago
5223d88e0a
updated unit test to fit new nimbus version
11 years ago
7bf8e2ad08
change the OctetSequenceKey constructor in SymmetricCacheService
11 years ago
306c8cff17
update nimbus-jose-jwt dependency to 2.26 and fix the affected files
11 years ago
48431fd5c7
Unit test for JWKSetKeyStore class
11 years ago
adf477c64e
[maven-release-plugin] prepare for next development iteration
11 years ago
8d97ed61ec
[maven-release-plugin] prepare release mitreid-connect-1.1.8
11 years ago
acf039a1f7
wrapped auth method check, added SECRET_JWT, closes #621
11 years ago
a465559ac5
Revert incorrect key-encoding change in SymmetricCacheService
11 years ago
1dc204f975
Validate HMAC-signed ID tokens
11 years ago
276d846f4c
Configuration Property Bean to load the OP wide registration token life
...
time
11 years ago
71fa796b42
Allow public clients to use token endpoint, closes #611 , closes #613
11 years ago
85acfa90db
[maven-release-plugin] prepare for next development iteration
11 years ago
d5e4cb45a2
[maven-release-plugin] prepare release mitreid-connect-1.1.7
11 years ago
257312d5da
made user info interceptor more null safe for client side
11 years ago
943fae25a1
make user info interceptor more compatible with standalone OIDC client software (with no user info service)
11 years ago
be98b9cd0b
[maven-release-plugin] prepare for next development iteration
11 years ago
8320f0eefe
[maven-release-plugin] prepare release mitreid-connect-1.1.6
11 years ago
0c8cacd59a
added missing copyright headers
11 years ago
525f3aa2a8
Cleaned up indentation, whitespace, and imports.
11 years ago
c34357a433
added resource registration endpoint with basic functionality and specialized tokens
11 years ago
05e9624ae3
added support for encrypted and symmetrically signed id tokens and user info responses
11 years ago
e4d5f4a540
added system wide cache for all symmetric validators, closes # 557
11 years ago
ca333d256b
Appropriately catch runtime exceptions in all guava caches, closes #603
11 years ago
880014176f
[maven-release-plugin] prepare for next development iteration
11 years ago
ca8a003e3d
[maven-release-plugin] prepare release mitreid-connect-1.1.5
11 years ago
7cd36b471f
Make introspection endpoint access authorization pluggable.
11 years ago
b8129bf60d
[maven-release-plugin] prepare for next development iteration
11 years ago
a9e34ac9bd
[maven-release-plugin] prepare release mitreid-connect-1.1.4
11 years ago
521017c5c2
updated stats service to have a resettable cache triggered by other service events
11 years ago
26c464e440
fixed bad JPQL in auth holder cleanup class
11 years ago
39509bfdc4
Performance improvement of token cleanup:
...
an alternative token cleanup mechanism designed to maintain a very compact memory footprint while performing cleanup in consecutive runs of the cleanup thread. This serves to address OutOfMemoryException issues of the original token cleanup mechanism when process is under load. Also, added cleanup of the authentication_holder table.
11 years ago
aa9a25a2d7
updated to even newer versions of eclipselink and JPA, closes #580 even harder
11 years ago
8f13410e42
updated JPA and eclipselink to remove eclipselink repository dependency, closes #580
11 years ago
97cd00e06c
[maven-release-plugin] prepare for next development iteration
11 years ago
23c7cf6996
[maven-release-plugin] prepare release mitreid-connect-1.1.3
11 years ago
ad5ffb64e8
[maven-release-plugin] prepare for next development iteration
11 years ago
1635cf957d
[maven-release-plugin] prepare release mitreid-connect-1.1.2
11 years ago
b67121f0cd
added client_secret_jwt auth method support, closes #174
11 years ago
9395c3802d
[maven-release-plugin] prepare for next development iteration
11 years ago
4f8311962a
[maven-release-plugin] prepare release mitreid-connect-1.1.1
11 years ago
1289d4737a
Changed references of DefaultHttpClient to SystemDefaultHttpClient to inherit system proxy settings, should address #548
11 years ago
e9d4acfd03
upgraded nimbus jose jwt library
11 years ago
11064b540a
upgrade guava to 16
11 years ago
3b52ce8201
happy new year!
11 years ago
ebbc7209aa
automated code formatting and cleanup
11 years ago
e1e7f7a579
[maven-release-plugin] prepare for next development iteration
11 years ago
42fe973f7b
[maven-release-plugin] prepare release mitreid-connect-1.1.0
11 years ago
d330bd1c9b
cleanup, added revocation uri to server config
11 years ago
a24eadeb11
cleaned up responseType calls, addresses #451
11 years ago
d3dbb00e77
ensure clients and tokens don't get special system scopes, addresses #320
11 years ago
ef01de168d
Moved special token scopes to scope service interface
11 years ago
4f986d6a38
clean up some auto generated functions
11 years ago
27f391ef01
Fixed compilation errors for SECOAUTH milestone updates
11 years ago
61f0db20f6
updated to secoauth 2.0.0.M2
11 years ago
190caee9a1
refactored userinfo serializer
11 years ago
7a4366c083
collapsed two serialization functions into one
11 years ago
d919e2e330
change from lists to sets
11 years ago
65a7e1d724
Added UserInfo.toJson method; added ScopeClaimTranslationService; rewrote UserInfoSerializer to use both
11 years ago
952acccbf3
Removed address fields
11 years ago
78fa5f9b1d
Started to write ScopeClaimTranslationService
11 years ago
cb449c25b1
Made a UserInfoSerializer class, attempted to switch UserInfoInterceptor over to use it, but it requires a bad hack. I might be missing something.
11 years ago
59da1960eb
added token_endpoint_auth_signing_alg, addresses #511
...
affects #455
11 years ago
f227724caa
dependency juggling
11 years ago
998b00fd38
moved repo references to parent, added dependencies for webapp
11 years ago
d9ad6d20e8
added spring core, moved servlet and test dependencies up to parent
11 years ago
38f20afe04
added necessary dependencies to common
11 years ago
8a5a16f374
refactored project into four modules:
...
Common
Client
Server Library
Server Webapp
addresses #367
11 years ago
47d304851d
Created token service for OIDC special tokens; removed creation of id tokens and registration_access_tokens to the new service.
11 years ago
26a7d0b8a8
Fixed typo
11 years ago
c98f77c405
Remove @PostConstruct from JWKSetKeyStore
11 years ago
b75d77495a
if there's only one key, return it as the default
11 years ago
fb2f2f9792
spelling, property access, and cleanup
11 years ago
1d0560edbc
refactored some json utils to their own static class
11 years ago
aeab1ac3cb
added encryption method list to encryption/decryption service
11 years ago
6605877a1b
added encryption/decryption to cached JWK-URI service
11 years ago
2b0d02dc72
added additional discoverable fields to ServerConfig object
11 years ago
85d9e07a94
Removed @PostConstruct; placed buildSignersAndVerifiers() calls inside both constructors.
11 years ago
c22cd62977
Added null check;
11 years ago
aecf4958ed
Testing removing extra method calls
11 years ago
e67a41c556
added transient passthroughs to JOSE algorithms for client
11 years ago
f9ca15139d
added phone-number verified, addresses #505
...
affects #455
11 years ago
0281cf02fe
calculate pairwise based on redirect uri rather than client id
11 years ago
b1a6127d06
added equality checks to data model objects
11 years ago
dbdc2e777d
added pairwise identifier service and repository
11 years ago
914f2e4d93
added new call to get the UserInfo in context with the requesting client to allow for pairwise identifiers.
...
temporary implementation of pairwise identifiers in place
11 years ago
596b385d2a
interceptor shouldn't ever overwrite stuff from the base model
11 years ago
b9da10d176
look up by username instead of subject
11 years ago
61544ed774
cleanup
11 years ago
72f0ab631d
added transient structured value to system scope, added scope matcher function to scope service
11 years ago
1ef18a3a93
missed a service definition
11 years ago
b416888b07
Structured Scopes from BB+
11 years ago
0a962e17fa
stopgap to prevent some leaks due to #492
11 years ago
235029ba0e
inject user's authorities into javascript context
11 years ago
be6179d1ac
inject the current user into the javascript context
11 years ago
6276ec8e66
Revert "PlainSigner and PlainVerifier created for alg:none JWS support."
...
This reverts commit 30d7aaa66a
11 years ago
2108311d65
Revert "refactored code to use the more generic JWT declaration."
...
This reverts commit e0b56bc72a
11 years ago
1514b2d2e0
Revert "placeholder"
...
This reverts commit d763a954da
11 years ago
dd35dc60df
Revert "implemented alg:none at the signing service."
...
This reverts commit 02078ebccb
11 years ago
Justin Richer