Justin Richer
|
914f2e4d93
|
added new call to get the UserInfo in context with the requesting client to allow for pairwise identifiers.
temporary implementation of pairwise identifiers in place
|
2013-09-10 16:01:17 -04:00 |
|
Justin Richer
|
149fb1bac1
|
services shouldn't be transactional
|
2013-09-10 15:26:09 -04:00 |
|
Justin Richer
|
29d1c7d54a
|
userinfo endpoint now uses OAuth2Authentication exclusively
(which is all it was really doing before)
|
2013-09-10 14:16:34 -04:00 |
|
Justin Richer
|
ac42c00062
|
id token now uses userinfo's sub
|
2013-09-10 13:50:49 -04:00 |
|
Justin Richer
|
f139541485
|
added randomized subs to demo users
|
2013-09-10 13:48:37 -04:00 |
|
Justin Richer
|
b9da10d176
|
look up by username instead of subject
|
2013-09-10 11:39:00 -04:00 |
|
Justin Richer
|
9ea82aacf0
|
clean up unused getter/setter
|
2013-09-10 11:38:42 -04:00 |
|
Justin Richer
|
9720b60f05
|
allow loading of structured scopes from scopes.sql file (and temp tables)
|
2013-09-06 16:07:25 -04:00 |
|
Justin Richer
|
5e676e0e59
|
fixed scope UI
|
2013-09-06 16:07:25 -04:00 |
|
Justin Richer
|
2b663bb23c
|
UI for scope editing
|
2013-09-06 16:07:25 -04:00 |
|
Justin Richer
|
469e722f72
|
defer to system scope matcher in approval handler
|
2013-09-06 16:07:25 -04:00 |
|
Justin Richer
|
99ad9b883e
|
added validator that knows how to deal with structured scopes
|
2013-09-06 16:07:25 -04:00 |
|
Justin Richer
|
59187d47e4
|
use new unified parsing for approval page
|
2013-09-06 16:07:25 -04:00 |
|
Justin Richer
|
85533d50cf
|
scope comparison for TofuUserApprovalHandler
|
2013-09-06 16:07:25 -04:00 |
|
Justin Richer
|
1c4c53f252
|
scope comparison for introspection endpoint
|
2013-09-06 16:07:24 -04:00 |
|
Justin Richer
|
6152a943d8
|
serialize structured scopes properly (with tests)
|
2013-09-06 16:07:24 -04:00 |
|
Justin Richer
|
72f0ab631d
|
added transient structured value to system scope, added scope matcher function to scope service
|
2013-09-06 16:07:24 -04:00 |
|
Justin Richer
|
3fc34f15c8
|
added structured scope update to mysql (affects #455)
|
2013-09-06 16:07:24 -04:00 |
|
Josh Mandel
|
b416888b07
|
Structured Scopes from BB+
|
2013-09-06 16:07:24 -04:00 |
|
Justin Richer
|
127507246e
|
if the client doesn't ask for any system scopes, but asks for some non-system scopes, they'll now get the defaults instead of none
addresses #498
|
2013-09-06 13:30:22 -04:00 |
|
Justin Richer
|
64bbb73d1b
|
cleaned up CORS filter implementation
|
2013-09-03 16:01:19 -04:00 |
|
Justin Richer
|
6ff4ae1458
|
added CORS filter
|
2013-09-03 15:17:18 -04:00 |
|
Justin Richer
|
81cb60ad7b
|
made introspection and revocation work with basic auth (and possible OAuth tokens, but that needs more work)
|
2013-09-03 15:17:16 -04:00 |
|
Justin Richer
|
bdbff8d45c
|
tell spring to not stuff model into the redirects, partially addresses #492
|
2013-08-30 16:38:07 -04:00 |
|
Justin Richer
|
84f097edf4
|
removed outdated client credentials filter, addresses #491
|
2013-08-30 11:48:52 -04:00 |
|
Justin Richer
|
d7be122a21
|
added basic user profile view implementation
|
2013-08-29 17:33:42 -04:00 |
|
Justin Richer
|
55ea880396
|
hide admin panels from non-admin users, addresses #472
|
2013-08-29 17:15:13 -04:00 |
|
Justin Richer
|
235029ba0e
|
inject user's authorities into javascript context
|
2013-08-29 16:58:36 -04:00 |
|
Justin Richer
|
eab4563551
|
inject user's email address into contacts on dynamic registration
|
2013-08-29 16:58:24 -04:00 |
|
Justin Richer
|
be6179d1ac
|
inject the current user into the javascript context
|
2013-08-29 16:44:01 -04:00 |
|
Justin Richer
|
5c10eef8b7
|
added delete function
|
2013-08-29 14:18:54 -04:00 |
|
Justin Richer
|
d92b7c4810
|
changed display of core client components, added warning
|
2013-08-29 11:50:05 -04:00 |
|
Justin Richer
|
4009d9ea82
|
added create and update functions
|
2013-08-29 11:11:37 -04:00 |
|
Justin Richer
|
8e6da2b936
|
json view and form elements
|
2013-08-28 16:42:43 -04:00 |
|
Justin Richer
|
36151975c1
|
added client read and oauth token support for CRUD abilities
|
2013-08-28 15:32:18 -04:00 |
|
Justin Richer
|
ead99474be
|
fixed panels for client form
|
2013-08-28 14:38:03 -04:00 |
|
Justin Richer
|
fb66af2071
|
added form editor and control for newly-registered clients
|
2013-08-28 14:20:20 -04:00 |
|
Justin Richer
|
51973ea595
|
added dev page for self-service client registration
|
2013-08-28 14:17:30 -04:00 |
|
William Kim
|
2108311d65
|
Revert "refactored code to use the more generic JWT declaration."
This reverts commit e0b56bc72a.
|
2013-08-26 15:33:08 -04:00 |
|
William Kim
|
e0b56bc72a
|
refactored code to use the more generic JWT declaration.
|
2013-08-26 11:32:46 -04:00 |
|
Justin Richer
|
ca777f7dc4
|
proper null check for client's preferred signature method
|
2013-08-20 16:45:45 -04:00 |
|
William Kim
|
07bec462cc
|
added comment about why we can't use set intersection method.
|
2013-08-20 14:09:14 -04:00 |
|
William Kim
|
b89436d7b9
|
UserInfoView returning intersection of claims request parameter and request object claims in effect now.
|
2013-08-20 08:55:56 -04:00 |
|
Justin Richer
|
bd3d2a5cee
|
created crypto tab
|
2013-08-19 17:35:05 -04:00 |
|
Justin Richer
|
3f66d16236
|
removed NYI tag from ID token signing alg
|
2013-08-19 17:31:13 -04:00 |
|
Justin Richer
|
48a9202f79
|
fixed jquery.on regex to be less aggressive
|
2013-08-19 17:20:29 -04:00 |
|
Amanda Anganes
|
941e9544e2
|
Compare client_ids instead of Client objects
|
2013-08-19 16:55:56 -04:00 |
|
Amanda Anganes
|
3eae6f2789
|
Changed client algorithm check to look for null instead of JWSAlgorithm.NONE, which is a valid value.
|
2013-08-19 16:55:29 -04:00 |
|
Amanda Anganes
|
0059c7b4cc
|
Use clients preferred algorithm, if any, to sign
|
2013-08-19 16:33:18 -04:00 |
|
Justin Richer
|
2fb138aa19
|
fixed jquery.on syntax bug, addresses #346
|
2013-08-19 16:07:34 -04:00 |