OpenID-Connect-Java-Spring-Server

Commit Graph

Author	SHA1	Message	Date
Mark Janssen	903168a949	Decrease log level of trailing slash warning Having an issuer without trailing slash configured is just fine, so there is no reason to log a warning for this every time the discovery endpoint is called.	8 years ago
Justin Richer	835a326627	allow polling of device codes, fixed UI for device code input	8 years ago
Justin Richer	32ce21b5cd	automated code formatting and cleanup	8 years ago
Justin Richer	dd0f69ba6d	[maven-release-plugin] prepare for next development iteration	8 years ago
Justin Richer	80358566a5	[maven-release-plugin] prepare release mitreid-connect-1.3.0-RC2	8 years ago
Justin Richer	2a75535dce	fix unit tests and downstream calls	8 years ago
Justin Richer	a926a8f0ab	cleaned up server-side stats service, UI now uses per-client calls	8 years ago
Justin Richer	256b79ae51	lazy load client stats in UI	8 years ago
Justin Richer	02928b048f	added software ID and version to data API	8 years ago
Justin Richer	8406a89fd1	added device flow expiration	8 years ago
Justin Richer	f54d44cd9d	added device code to discovery, moved device endpoints	8 years ago
Justin Richer	f915196c2e	fix approval display	8 years ago
Justin Richer	cbf5bf742b	added messages for display pages, better error handling in user-facing pages	8 years ago
Justin Richer	153776ecb5	Don’t catch OAuth2 errors, let the framework handle them here	8 years ago
Justin Richer	44b24af466	database storage for device flow	8 years ago
Justin Richer	548dad4e29	added expiration to device codes	8 years ago
Justin Richer	9cb5377ce8	added device code validity seconds to client model	8 years ago
Justin Richer	a5b4115169	functioning device code flow	8 years ago
Justin Richer	3326eee934	shell for device flow	8 years ago
Justin Richer	c42fe57367	changed task operations to print out name of operation on run	8 years ago
Justin Richer	72fd3c2b99	added ID Token Validity Seconds to data import/export API	8 years ago
Justin Richer	3e5e7a0f0b	[maven-release-plugin] prepare for next development iteration	8 years ago
Justin Richer	0d84db49af	[maven-release-plugin] prepare release mitreid-connect-1.3.0-RC1	8 years ago
Justin Richer	98a4d56cdd	made extraction function less side-effect-ful	8 years ago
Leonard Brünings	00ecd3dd22	Fix NPE if no claims are requested for the userinfo object This happens if clients only requests id_token claims, or just send an empty claims parameter. Change-Id: I8bd176ad271bda8a1e2f26b6221bd8e2d0a3ebfb	8 years ago
Justin Richer	141f4da7f1	added PKCE editing capabilities to UI	8 years ago
Justin Richer	c79b6da9d9	Javascript files for UI functionality loaded from configuration bean	8 years ago
Justin Richer	b176d4d77e	cleaned up old endpoints	8 years ago
Justin Richer	8178af87f0	further modularized data import/export service	8 years ago
Justin Richer	52d2298f99	begin modularization of data import/export API	8 years ago
Justin Richer	db50a88fe5	Happy New Year 2017	8 years ago
Justin Richer	b17a7f43ae	removed structured scopes	8 years ago
strangeweaver	46046b574a	Implemented paged operations and used for database cleanup tasks.	8 years ago
strangeweaver	099211593c	Fix high load performance issue in token expiration task	8 years ago
Justin Richer	0e703ef9f9	update a few dependency versions, closes #1145	8 years ago
Justin Richer	91da3935f5	Made ID tokens ephemeral, made access token’s “additional information” extensible	8 years ago
Mikko Tommila	4f4c8de1c8	Fix JPA issues to allow using Hibernate	8 years ago
Justin Richer	22fa3605ef	Patched unit tests, still needs updates for checking approved site to token mapping on data import/export	8 years ago
Justin Richer	55b1b00b73	Updated relationship between approved sites and access tokens, closes #874	8 years ago
Justin Richer	d875d52be7	updated data import/export services for 1.3	8 years ago
HeXetic	7725fcfa2b	createAuthorizationCode should be @Transactional An Authentication should not exist without its matching AuthorizationCode, but typically an AuthorizationCode will have a foreign key on an Authentication, meaning it can't be saved first. This block should be wrapped in a transaction so that other DB clients (say, for example, clearExpiredAuthorizationCodes) don't see an inconsistent snapshot and then misbehave.	8 years ago
Julian Schlichtholz	c3d0c18af5	make HttpClient configurable, closes #1071	8 years ago
Sofia Ang	bb6bb81dbc	Add new tests which asserts that `user_id` should not be present in the introspection response if there's no user authentication available	8 years ago
Sofia Ang	52da5e769a	Fix test by returning a new OAuth2Authentication instead of mocking it	8 years ago
Sofia Ang	b2fab9642e	Fix such that `user_id` is only added if user authentication is available OAuth2Authentication#getPrincipal() used by OAuth2Authentication#getName() defaults to the client id if user authentication is not available. Prior to this fix, an introspection of a client-only access token would result to the user_id also being the client_id. This causes problems when this introspection result is converted into an OAuth2Authentication by a resource server's IntrospectingTokenService -- the user_id is populated with the client_id and so OAuth2Authentication's userAuthentication is populated falsely.	8 years ago
Nicolas Liampotis	dea6044e77	Set the encoding of the UserInfo response body to UTF-8 See http://openid.net/specs/openid-connect-core-1_0.html#UserInfoResponse	8 years ago
Justin Richer	af7c1f7d45	added PKCE support to discovery endpoint	8 years ago
Justin Richer	ba0d0aab0b	use parameter constants for extensions maps in token service	8 years ago
Justin Richer	ac0cafe7b3	parse and process PKCE requests	8 years ago
Justin Richer	57208ac35d	added software statements to client API	8 years ago

1 2 3 4 5 ...

1488 Commits (808e337cdd575d30362569fb3d69f484d5988e30)