Justin Richer
|
45ca4e565e
|
updated to SECOAUTH-1.0.1-BUILD-SNAPSHOT
|
2012-11-26 11:53:19 -05:00 |
Amanda Anganes
|
695091ca82
|
Refactor part 4 - should be final bit
|
2012-09-18 15:08:53 -04:00 |
Amanda Anganes
|
c40efda6b5
|
Refactor part 1
|
2012-09-18 14:24:34 -04:00 |
Justin Richer
|
7aec0dfe80
|
added randomized view names to lower possibility of conflicting with local views
|
2012-09-10 17:17:03 -04:00 |
Justin Richer
|
d11005fc5f
|
added x509 support
|
2012-09-10 17:17:03 -04:00 |
Justin Richer
|
2d24435365
|
Created custom resolver, handler mapper
moved endpoint back to server
|
2012-09-10 17:17:03 -04:00 |
Justin Richer
|
edeae29bef
|
client publisher mapping test
|
2012-09-10 17:17:03 -04:00 |
Justin Richer
|
be1046f9b6
|
bean-based configuration
|
2012-09-10 17:17:03 -04:00 |
Stephen Moore
|
4eee172f79
|
buildRedirectURI moved to URLUtils
|
2012-09-07 15:52:56 -04:00 |
Stephen Moore
|
05efdbf39d
|
buildURL uses URIUtils now.
|
2012-09-07 15:17:08 -04:00 |
Justin Richer
|
2b62042696
|
unshadowed Jwe header, unshadowed IdTokenClaims, added smart copy constructor to ClaimSet
|
2012-09-06 17:20:22 -04:00 |
Stephen Moore
|
e8eaf48efd
|
Added check for token NotBefore
Added timeSkewAllowance magic
|
2012-08-28 15:42:29 -04:00 |
Justin Richer
|
b47dcf8e6b
|
fixed timestamp math
(I hate timestamp math)
|
2012-08-17 16:35:27 -04:00 |
Justin Richer
|
26d5a846e0
|
Updated validator structure and id token checking.
|
2012-08-17 16:18:08 -04:00 |
Justin Richer
|
a0df7ad04b
|
client documentation updates, addresses #135
|
2012-08-17 15:35:08 -04:00 |
Justin Richer
|
012bb4afd7
|
Changed casing on "URI" to "Url" to match other parameters.
|
2012-08-17 15:32:04 -04:00 |
Justin Richer
|
d14f55004c
|
added parser to userinfo object, userinfo url in filter, fixed bug in user_id check
|
2012-08-17 14:40:13 -04:00 |
Justin Richer
|
fbd6e67af8
|
Refactored auth provider to call the userinfo endpoint and provide info inside the auth token.
|
2012-08-17 14:40:13 -04:00 |
Justin Richer
|
6ccbf480b3
|
added token values into the OpenIDConnectAuthToken class and authenticator, still need to do authuserdetailsservice
|
2012-08-15 16:11:57 -04:00 |
Justin Richer
|
c5244db1a2
|
moved nonce from cookie to session, added state processing, cleaned up unused classes
|
2012-08-15 14:52:49 -04:00 |
Justin Richer
|
269c2c9835
|
fixed nonce cookie handling
|
2012-08-14 12:11:51 -04:00 |
Mike Derryberry
|
d93f5f18e5
|
added state value to jwt that gets passed as request object. certain methods from SECOAUTH use this
|
2012-08-14 10:55:08 -04:00 |
Mike Derryberry
|
eff7a2c504
|
changed nonce claim addition
|
2012-08-14 10:55:08 -04:00 |
Mike Derryberry
|
9d73cd2243
|
cleaned up imports in filter class
|
2012-08-14 10:55:07 -04:00 |
Mike Derryberry
|
2888c08083
|
changed cookie claim to include the response
|
2012-08-14 10:55:07 -04:00 |
Mike Derryberry
|
bc216785b8
|
added cookie to response in auth filter for request objects
|
2012-08-14 10:55:07 -04:00 |
Mike Derryberry
|
f7cfb39777
|
updated imports of signed request filter
|
2012-08-14 10:55:07 -04:00 |
Mike Derryberry
|
c0d353d7ce
|
removed state parameter from claims. added way to create random nonce value
|
2012-08-14 10:55:07 -04:00 |
Mike Derryberry
|
8e95734f22
|
changed response-type to code rather than token
|
2012-08-14 10:55:07 -04:00 |
Mike Derryberry
|
f8d938630e
|
added passthrough parameters to server config
|
2012-08-14 10:55:07 -04:00 |
Mike Derryberry
|
c4ebf5c145
|
updated signer service
|
2012-08-14 10:55:07 -04:00 |
Mike Derryberry
|
d6b0b87769
|
added state parameter to reqeuest object
|
2012-08-14 10:55:07 -04:00 |
Mike Derryberry
|
99bc1294e3
|
removed repetative check of "token" parameter in signed request object
|
2012-08-14 10:55:07 -04:00 |
Mike Derryberry
|
685734ce35
|
updated signing request object in OIDC client by pulling out construction of JWT to its own method.
|
2012-08-14 10:55:07 -04:00 |
Mike Derryberry
|
76c91ea79f
|
removed encrypted request object for OIDC client. will deal with it at a later point
|
2012-08-14 10:55:07 -04:00 |
Mike Derryberry
|
8f22517c81
|
encrypted request object wip. need to add header parameters to allow encryption. also need to get public key for encryption
|
2012-08-14 10:55:07 -04:00 |
Mike Derryberry
|
70c4c25fa3
|
finished signed request object for client, created encrypted request object for client
|
2012-08-14 10:55:07 -04:00 |
Mike Derryberry
|
42a9b67f5e
|
updated signed request filter to create jwt from parameters, sign it, create url for request, and send a redirect
|
2012-08-14 10:55:07 -04:00 |
Mike Derryberry
|
b0eca780d1
|
changed class to request filter rather than jwt filter
|
2012-08-14 10:55:07 -04:00 |
Mike Derryberry
|
5f0ea41e0e
|
added class for signed request object
|
2012-08-14 10:55:07 -04:00 |
Jon Kranes
|
1fd4d8a4b8
|
fixed signer map in client/AbstractOIDCAuthenticationFilter.java
|
2012-07-31 12:17:01 -04:00 |
Mike Derryberry
|
4deaffd686
|
updated hmac and rsa signer to use afterPropertiesSet(), abstract oidc auth filter now adds multiple signers to map and then picks the one it needs, and key fetcher now gets jwk
|
2012-07-23 18:31:27 -04:00 |
Mike Derryberry
|
caf2a7b494
|
updated encryption service to encrypt key and claims and then sign the jwe. decryption updated to decrypt encrypted key and ciphertext
|
2012-07-17 10:49:29 -04:00 |
Mike Derryberry
|
e252951612
|
added encrypter/decrypter for claims to get ciphertext
|
2012-07-17 10:48:07 -04:00 |
Mike Derryberry
|
33cc3fa899
|
Added spring simple web app for testing, encryption and decryption classes for rsa and hmac, still WIP
|
2012-07-17 10:47:41 -04:00 |
Justin Richer
|
a03129f70a
|
added documentation updates
|
2012-07-02 14:18:25 -04:00 |
Justin Richer
|
c619e736f9
|
removed eclipse files from repository
|
2012-06-29 15:13:52 -04:00 |
Justin Richer
|
5c1b07ae65
|
don't overwrite an existing JWT nonce
|
2012-06-28 17:04:21 -04:00 |
Justin Richer
|
29731d52f6
|
Merge branch 'refreshtokens' of file:///home/jricher/Projects/workspace-sts/OpenIDConnect-MITRE/OpenID-Connect-Java-Spring-Server into refreshtokens
|
2012-06-28 17:00:17 -04:00 |
Justin Richer
|
d4b45006d5
|
settings file, will be removed shortly
|
2012-06-28 16:55:37 -04:00 |