github
/
OpenID-Connect-Java-Spring-Server
mirror of https://github.com/mitreid-connect/OpenID-Connect-Java-Spring-Server
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
2698 Commits
17 Branches
69 Tags
78 MiB
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from 'ad64aef0c5'
${ noResults }
Commit Graph

700 Commits (ad64aef0c58545a034cb855950d763495235efb3)

Author SHA1 Message Date
Justin Richer 4878e88d4f added list all by owner
10 years ago
Justin Richer 8d22ad03e2 implemented remove verb
10 years ago
Justin Richer 89114dcf74 implemented update
10 years ago
Justin Richer 0b480bac10 implemented get
10 years ago
Justin Richer 3076da1ed8 functioning resource set repository layer
10 years ago
Justin Richer efeead52b6 fixed typos in data layer, added blank service layer to resource set
10 years ago
Justin Richer 99bf19e21b removed policy uri from data model
10 years ago
Justin Richer e7bf75e9a4 moved and consolidated json utilities
10 years ago
Justin Richer 90a7304b4e resource set registration endpoint and service shells
10 years ago
Justin Richer 8992841ffa added missing copyright
10 years ago
Justin Richer 071ea579a3 added resource set class
10 years ago
Justin Richer b670f44138 added UMA to version number
10 years ago
Justin Richer 593fac83cf scopes can now be set as "restricted" instead of needing to be set "allowDynReg", closes #747
10 years ago
Justin Richer b376bc6059 removed some vestigial service/repository calls, closes #513
10 years ago
Justin Richer cef6cf17b6 externalized a number of strings, closes #385
10 years ago
Justin Richer 05f03f7c90 yet more year updates
10 years ago
Justin Richer 994ce6c743 consistently named JOSE-based classes, closes #529
10 years ago
Justin Richer 685960358c formatting cleanup
10 years ago
Justin Richer e2349984b8 happy new year 2015!
10 years ago
Justin Richer cc02f8fbe8 pluralized post-logout redirect URI on client, closes #654
10 years ago
Justin Richer bedc101637 import cleanup
10 years ago
Justin Richer 587d4b2db6 further pom file cleanup
10 years ago
Justin Richer 377d8cb884 moved dependency version management to parent pom, closes #666
10 years ago
Justin Richer ef3a696972 removed getBySubject and getAll from user info repository and service layers, closes #760
10 years ago
Justin Richer d25602fbe7 created a locale resolved tied in with the existing server configuration bean, removed locale interceptor (it doesn't work with fixed resolvers), cleaned up comments and files
10 years ago
Justin Richer 6c88d7c54b removed old owner_id field, closes #636
10 years ago
Charif Belhaffef e8015051d2 add @Transient to function getAuthorizedGrantTypes() so it does not persist
10 years ago
Justin Richer c6c09b9c6c made default user info parser more robust against null values
10 years ago
Justin Richer bbeaeb06e3 added option to send skip sending nonce if desired, closes #704, closes #683,
10 years ago
Justin Richer 0e776762c2 set up data API for 1.2 format (currently the same as 1.1 format)
10 years ago
Justin Richer c600787f1c added key id to id token, closes #725
10 years ago
Justin Richer d87bdb2120 added ROLE_CLIENT to assertion client authentication, cleaned up roles on client secret authentication, closes #728, closes #401
10 years ago
Justin Richer b50facd4c2 explicitly added Jackson2 to support secoauth serialization, added string converter to work with our API
10 years ago
Justin Richer e6d10b67a4 update to Spring 4 and other related libraries
10 years ago
Justin Richer f0e2fc6700 make user info classes serializable, closes #714
10 years ago
Justin Richer a59fe0604e generate random fake password for private key clients and shared secret crypto clients to avoid accidentally using client secret authentication and bypassing authentication, closes #715
10 years ago
Alexander Imfeld 9dfac35912 Introduce introspection result assembler to allow for customized introspection results
10 years ago
Pascal Bruckert bf00c1f5e0 update spring-security-oauth2 2.0.3 , closes #663
10 years ago
Justin Richer db052f11ca Moved development branch to 1.2
10 years ago
Justin Richer 134909a82f import cleanup
10 years ago
Justin Richer 1e71749c23 added more generic rotation capability
10 years ago
arielak 8495617aed Added support for whitelisted and blacklisted site import from a 1.0 config
10 years ago
arielak 03f2d8f8a0 Added service interface for data import/export service and modified AuthenticationHolderEntity and Repository to allow getting all objects
10 years ago
Justin Richer ec8f708472 swapped exception class for existing BeanCreationException, added example flag in config file (commented out)
10 years ago
John Brooks 3e3613f471 Corrected bean setup for checkForHttps case tests.
10 years ago
John Brooks acc4cf16bd Separated checkForHttps cases into separate test methods.
10 years ago
John Brooks cf2837f678 Initialized forceHttps to false.
10 years ago
John Brooks 0461e51ddc Changed parent class from Exception to RuntimeException; added copyright
10 years ago
John Brooks e1015e1194 Create flag to force HTTPS of value of issuer on server startup, addresses #528
10 years ago
Justin Richer c683131f12 externalized view name strings and tied them to view beans
10 years ago
Justin Richer a704277652 Removed exceptions from @PostConstruct methods, closes #663
10 years ago
Justin Richer 81634e6165 added API for getting tokens by clientid
10 years ago
Justin Richer 1a79949d51 made user info less transient
10 years ago
James Agnew e0b84069d4 Update to latest spring-security-oauth2 module
10 years ago
Justin Richer 6f2f807b0b [maven-release-plugin] prepare for next development iteration
10 years ago
Justin Richer 93ae1516a5 [maven-release-plugin] prepare release mitreid-connect-1.1.9
10 years ago
Justin Richer b0cce924a2 JsonFileRegisteredClientService now writes out entire client registration to disk, closes #651
10 years ago
Justin Richer 78f3e68e8b update unit test for Windows environment, closes #647
10 years ago
ksahlmann 4ca9a593f5 update nimbus-jose-jwt to 2.26.1 due to base64 encoding issue
10 years ago
Justin Richer 62a43165f0 added json member type checking for json utils, won't die if a string is found where an array was expected
11 years ago
Justin Richer 325a200f16 added configurable support for different token presentation methods in user info fetcher, closes #632
11 years ago
Justin Richer 1db4227ce5 reformat / reorder
11 years ago
Justin Richer f997049eff key service can now deal with missing 'kid' fields in JWKs
11 years ago
tsitkov 5c2cb75407 Better test coverage for JWS/EAlgorithmEmbed, JWEEncryptionMethodEmbed
11 years ago
Justin Richer 3412c1877e removed unnecessary unit test
11 years ago
tsitkov e1b4df74f0 Added tests for DefaultJwtEncryptionAndDecryptionService
11 years ago
Justin Richer 5223d88e0a updated unit test to fit new nimbus version
11 years ago
Kristina Sahlmann 7bf8e2ad08 change the OctetSequenceKey constructor in SymmetricCacheService
11 years ago
Kristina Sahlmann 306c8cff17 update nimbus-jose-jwt dependency to 2.26 and fix the affected files
11 years ago
tsitkov 48431fd5c7 Unit test for JWKSetKeyStore class
11 years ago
Justin Richer adf477c64e [maven-release-plugin] prepare for next development iteration
11 years ago
Justin Richer 8d97ed61ec [maven-release-plugin] prepare release mitreid-connect-1.1.8
11 years ago
Justin Richer acf039a1f7 wrapped auth method check, added SECRET_JWT, closes #621
11 years ago
Christopher Elkins a465559ac5 Revert incorrect key-encoding change in SymmetricCacheService
11 years ago
Christopher Elkins 1dc204f975 Validate HMAC-signed ID tokens
11 years ago
tjain 276d846f4c Configuration Property Bean to load the OP wide registration token life
11 years ago
Justin Richer 71fa796b42 Allow public clients to use token endpoint, closes #611, closes #613
11 years ago
Justin Richer 85acfa90db [maven-release-plugin] prepare for next development iteration
11 years ago
Justin Richer d5e4cb45a2 [maven-release-plugin] prepare release mitreid-connect-1.1.7
11 years ago
Justin Richer 257312d5da made user info interceptor more null safe for client side
11 years ago
Justin Richer 943fae25a1 make user info interceptor more compatible with standalone OIDC client software (with no user info service)
11 years ago
Justin Richer be98b9cd0b [maven-release-plugin] prepare for next development iteration
11 years ago
Justin Richer 8320f0eefe [maven-release-plugin] prepare release mitreid-connect-1.1.6
11 years ago
Justin Richer 0c8cacd59a added missing copyright headers
11 years ago
Justin Richer 525f3aa2a8 Cleaned up indentation, whitespace, and imports.
11 years ago
Justin Richer c34357a433 added resource registration endpoint with basic functionality and specialized tokens
11 years ago
Justin Richer 05e9624ae3 added support for encrypted and symmetrically signed id tokens and user info responses
11 years ago
Justin Richer e4d5f4a540 added system wide cache for all symmetric validators, closes # 557
11 years ago
Justin Richer ca333d256b Appropriately catch runtime exceptions in all guava caches, closes #603
11 years ago
Justin Richer 880014176f [maven-release-plugin] prepare for next development iteration
11 years ago
Justin Richer ca8a003e3d [maven-release-plugin] prepare release mitreid-connect-1.1.5
11 years ago
Alexander Imfeld 7cd36b471f Make introspection endpoint access authorization pluggable.
11 years ago
Justin Richer b8129bf60d [maven-release-plugin] prepare for next development iteration
11 years ago
Justin Richer a9e34ac9bd [maven-release-plugin] prepare release mitreid-connect-1.1.4
11 years ago
Justin Richer 521017c5c2 updated stats service to have a resettable cache triggered by other service events
11 years ago
Justin Richer 26c464e440 fixed bad JPQL in auth holder cleanup class
11 years ago
kangelov 39509bfdc4 Performance improvement of token cleanup:
11 years ago
Justin Richer aa9a25a2d7 updated to even newer versions of eclipselink and JPA, closes #580 even harder
11 years ago
Justin Richer 8f13410e42 updated JPA and eclipselink to remove eclipselink repository dependency, closes #580
11 years ago
Justin Richer 97cd00e06c [maven-release-plugin] prepare for next development iteration
11 years ago
Justin Richer 23c7cf6996 [maven-release-plugin] prepare release mitreid-connect-1.1.3
11 years ago
Justin Richer ad5ffb64e8 [maven-release-plugin] prepare for next development iteration
11 years ago
Justin Richer 1635cf957d [maven-release-plugin] prepare release mitreid-connect-1.1.2
11 years ago
Justin Richer b67121f0cd added client_secret_jwt auth method support, closes #174
11 years ago
Justin Richer 9395c3802d [maven-release-plugin] prepare for next development iteration
11 years ago
Justin Richer 4f8311962a [maven-release-plugin] prepare release mitreid-connect-1.1.1
11 years ago
Justin Richer 1289d4737a Changed references of DefaultHttpClient to SystemDefaultHttpClient to inherit system proxy settings, should address #548
11 years ago
Justin Richer e9d4acfd03 upgraded nimbus jose jwt library
11 years ago
Justin Richer 11064b540a upgrade guava to 16
11 years ago
Justin Richer 3b52ce8201 happy new year!
11 years ago
Justin Richer ebbc7209aa automated code formatting and cleanup
11 years ago
Justin Richer e1e7f7a579 [maven-release-plugin] prepare for next development iteration
11 years ago
Justin Richer 42fe973f7b [maven-release-plugin] prepare release mitreid-connect-1.1.0
11 years ago
Justin Richer d330bd1c9b cleanup, added revocation uri to server config
11 years ago
Justin Richer a24eadeb11 cleaned up responseType calls, addresses #451
11 years ago
Justin Richer d3dbb00e77 ensure clients and tokens don't get special system scopes, addresses #320
11 years ago
Justin Richer ef01de168d Moved special token scopes to scope service interface
11 years ago
Justin Richer 4f986d6a38 clean up some auto generated functions
11 years ago
Justin Richer 27f391ef01 Fixed compilation errors for SECOAUTH milestone updates
11 years ago
Justin Richer 61f0db20f6 updated to secoauth 2.0.0.M2
11 years ago
Justin Richer 190caee9a1 refactored userinfo serializer
11 years ago
Justin Richer 7a4366c083 collapsed two serialization functions into one
11 years ago
Justin Richer d919e2e330 change from lists to sets
11 years ago
Amanda Anganes 65a7e1d724 Added UserInfo.toJson method; added ScopeClaimTranslationService; rewrote UserInfoSerializer to use both
11 years ago
Amanda Anganes 952acccbf3 Removed address fields
11 years ago
Amanda Anganes 78fa5f9b1d Started to write ScopeClaimTranslationService
11 years ago
Amanda Anganes cb449c25b1 Made a UserInfoSerializer class, attempted to switch UserInfoInterceptor over to use it, but it requires a bad hack. I might be missing something.
11 years ago
Justin Richer 59da1960eb added token_endpoint_auth_signing_alg, addresses #511
11 years ago
Justin Richer f227724caa dependency juggling
11 years ago
Justin Richer 998b00fd38 moved repo references to parent, added dependencies for webapp
11 years ago
Justin Richer d9ad6d20e8 added spring core, moved servlet and test dependencies up to parent
11 years ago
Justin Richer 38f20afe04 added necessary dependencies to common
11 years ago
Justin Richer 8a5a16f374 refactored project into four modules:
11 years ago
Amanda Anganes 47d304851d Created token service for OIDC special tokens; removed creation of id tokens and registration_access_tokens to the new service.
11 years ago
Amanda Anganes 26a7d0b8a8 Fixed typo
11 years ago
Amanda Anganes c98f77c405 Remove @PostConstruct from JWKSetKeyStore
11 years ago
Justin Richer b75d77495a if there's only one key, return it as the default
11 years ago
Justin Richer fb2f2f9792 spelling, property access, and cleanup
11 years ago
Justin Richer 1d0560edbc refactored some json utils to their own static class
11 years ago
Justin Richer aeab1ac3cb added encryption method list to encryption/decryption service
11 years ago
Justin Richer 6605877a1b added encryption/decryption to cached JWK-URI service
11 years ago
Justin Richer 2b0d02dc72 added additional discoverable fields to ServerConfig object
11 years ago
Amanda Anganes 85d9e07a94 Removed @PostConstruct; placed buildSignersAndVerifiers() calls inside both constructors.
11 years ago
Amanda Anganes c22cd62977 Added null check;
11 years ago
Amanda Anganes aecf4958ed Testing removing extra method calls
11 years ago
Justin Richer e67a41c556 added transient passthroughs to JOSE algorithms for client
11 years ago
Justin Richer f9ca15139d added phone-number verified, addresses #505
11 years ago
Justin Richer 0281cf02fe calculate pairwise based on redirect uri rather than client id
11 years ago
Justin Richer b1a6127d06 added equality checks to data model objects
11 years ago
Justin Richer dbdc2e777d added pairwise identifier service and repository
11 years ago
Justin Richer 914f2e4d93 added new call to get the UserInfo in context with the requesting client to allow for pairwise identifiers.
11 years ago
Justin Richer 596b385d2a interceptor shouldn't ever overwrite stuff from the base model
11 years ago
Justin Richer b9da10d176 look up by username instead of subject
11 years ago
Justin Richer 61544ed774 cleanup
11 years ago
Justin Richer 72f0ab631d added transient structured value to system scope, added scope matcher function to scope service
11 years ago
Justin Richer 1ef18a3a93 missed a service definition
11 years ago
Josh Mandel b416888b07 Structured Scopes from BB+
11 years ago
Justin Richer 0a962e17fa stopgap to prevent some leaks due to #492
11 years ago
Justin Richer 235029ba0e inject user's authorities into javascript context
11 years ago
Justin Richer be6179d1ac inject the current user into the javascript context
11 years ago
William Kim 6276ec8e66 Revert "PlainSigner and PlainVerifier created for alg:none JWS support."
11 years ago
William Kim 2108311d65 Revert "refactored code to use the more generic JWT declaration."
11 years ago
William Kim 1514b2d2e0 Revert "placeholder"
11 years ago
William Kim dd35dc60df Revert "implemented alg:none at the signing service."
11 years ago
William Kim 78559b625a Revert "removed the plain verifer. validating a no-signature is simply handled as a special case in validateSignature(). Also, doing some type safety checks."
11 years ago
William Kim 15ec027505 Revert "junit test added for signing service."
11 years ago
William Kim 9f89f84da1 junit test added for signing service.
11 years ago
William Kim c957d59f7c removed the plain verifer. validating a no-signature is simply handled as a special case in validateSignature(). Also, doing some type safety checks.
11 years ago
William Kim 02078ebccb implemented alg:none at the signing service.
11 years ago
William Kim d763a954da placeholder
11 years ago
William Kim e0b56bc72a refactored code to use the more generic JWT declaration.
11 years ago
William Kim 30d7aaa66a PlainSigner and PlainVerifier created for alg:none JWS support.
11 years ago
Justin Richer da915d8b35 explicitly try to initialize the JWK set if it's null by the time the getter is called
11 years ago
Amanda Anganes 0059c7b4cc Use clients preferred algorithm, if any, to sign
11 years ago
Justin Richer a80c19384f added 'use server default' to JOSE options, addresses #462
11 years ago
Justin Richer ba0c3c5d78 id tokens always expire, addresses #416
11 years ago
Justin Richer 21068f57e6 cached jwk services expire after an hour
11 years ago
William Kim 6e2baa3ec4 updated comments for jwe service.
11 years ago
William Kim e1b072c991 Updated nimbusds library version to 2.17.2 and made relevant changes in enc./dec. service and test
11 years ago
William Kim 372675fd2a changed encrypt/decrypt parameter to use JWEObject instead of EncryptedJWT
11 years ago
William Kim f0b77f8614 RSA encryption service tested.
11 years ago
William Kim 3a1c551ff7 implemented symmetric key encryption.
11 years ago
William Kim dfbefe0780 encrypt/decrypt implemented. initial commit for unit testing of jwe service.
11 years ago
William Kim ae6721dd10 jwe service accessor methods and private initializing method done.
11 years ago
William Kim 887338b2d9 jwe service init commit.
11 years ago
Amanda Anganes be97aedbc7 Used Predicates to filter expired tokens and approved sites;
11 years ago
Amanda Anganes b3bb43881d Moved getExpired to service layers
11 years ago
Amanda Anganes eea37cf79c Fixed token expiration bug by removing jsql queries. Instead expired tokens or approved sites are filtered at the repository level
11 years ago
Amanda Anganes 2f711c88a7 Removed nonce service
11 years ago
Amanda Anganes d4fbb4f599 Removed Event class
11 years ago
Justin Richer beaeaa4ccc I can spell "consortium", I promise
12 years ago
Justin Richer b2b6fd6448 further cleanup
12 years ago
Justin Richer 856c0ea0b5 Merge commit '023dd440d4a0e6e59a14c88013837d79a77c74e0' into 1.1-merge
12 years ago
Justin Richer 023dd440d4 [maven-release-plugin] prepare for next development iteration
12 years ago
Justin Richer 5e8f93cf15 [maven-release-plugin] prepare release mitreid-connect-1.0.6
12 years ago
Justin Richer e658ffd7fc format/cleanup and copyright
12 years ago
Amanda Anganes 906db0ac86 Opened token api access to all users; restricted to only show currently-logged-in-users tokens
12 years ago
Justin Richer fb448a246a converted test data to map, use new serializer
12 years ago
Justin Richer 8edd6da136 added serializer for non-heirarchical URIs
12 years ago
Justin Richer 5893d8f8f8 fixed up parsing regular expression
12 years ago
William Kim f565688e59 changed name issuer->normalized. the result of normalization is not necessarily the issuer.
12 years ago
William Kim d80aaced9a reorganized test data and test methods.
12 years ago
William Kim 809a243b64 tests for webfinger url normalization.
12 years ago
William Kim eaa7298ef1 init commit for Webfinger normilizer utility class.
12 years ago
Justin Richer 20871852c0 updated dependencies for secoauth 1.1
12 years ago
Amanda Anganes b397f0ae15 First go at adding token API; needs to be tested
12 years ago
Amanda Anganes 88db457fc4 Removed .springBeans from tracking; removed initializingbean in favor of @PostConstruct
12 years ago
Justin Richer a4a18fd54c externalized introspection URL from client's introspecting token service, addresses #435
12 years ago
William Kim aad432c5d7 replaced stracktrace-printing with logger messages. removed some unused imports.
12 years ago
Amanda Anganes 15aea61fbe Applied code cleanup
12 years ago
William Kim e00d696c60 deleted auto-generated TODO.
12 years ago
William Kim e9c246808f only our entity version may be stored in our storage layer. removed TODO.
12 years ago
Justin Richer 0d8c2442d2 [maven-release-plugin] prepare for next development iteration
12 years ago
Justin Richer 9bf5f70957 [maven-release-plugin] prepare release mitreid-connect-1.0.5
12 years ago
William Kim 77be0d0ea8 implemented getExpiresIn() for oauth access token entities.
12 years ago
Amanda Anganes 2d3f43e3b8 Added task scheduling for deleting expired tokens and approved sites. Configuration is all done in application-context.xml so that it is easy to configure
12 years ago
Justin Richer 936f581a0b [maven-release-plugin] prepare for next development iteration
12 years ago
Justin Richer 27edec1a56 [maven-release-plugin] prepare release mitreid-connect-1.0.4
12 years ago
William Kim a668fb964d changed String comparison implementation for better readability
12 years ago
William Kim ab4d1da9d4 added logger warning if issuer url does not use http scheme.
12 years ago
William Kim b438e87f98 passed wire testing and updated unit tests.
12 years ago
William Kim e74444e3d1 addresses issue #366
12 years ago
Amanda Anganes 530c3a75ee Applyed refactoring
12 years ago
William Kim f0f2fbea40 updated secoauth library version in poms
12 years ago
Justin Richer 2b3376e0ed [maven-release-plugin] prepare for next development iteration
12 years ago
Justin Richer 7fe4bc3b56 [maven-release-plugin] prepare release mitreid-connect-1.0.3
12 years ago
William Kim d6109fd1ae explicitly mapped missing JPA columns in common->openid.connect.model #317
12 years ago
William Kim 46641a2fa1 explicitly mapped missing JPA columns in common-oauth2.model #317
12 years ago
Justin Richer c577b691c7 moved OIDC auth token and userinfo interception filter to common package, addresses #353
12 years ago
Justin Richer 6ed7477bc0 added stats to admin UI page, restyled scopes and dynamically registered flags
12 years ago
Justin Richer 567a3314d6 [maven-release-plugin] prepare for next development iteration
12 years ago
Justin Richer 1286726188 [maven-release-plugin] prepare release mitreid-connect-1.0.2
12 years ago
Justin Richer de77f2c75a commentary!
12 years ago
Justin Richer d0eb98b8ff tests for embedded JOSE objects
12 years ago
Justin Richer 8ee299aab3 added tests for ClientDetailsEntity and RegisteredClient data objects
12 years ago
Justin Richer c760ebf4a4 changed expires_at -> client_secret_expires_at, issued_at -> client_id_issued_at
12 years ago
Justin Richer 317526b1ad unit tests for basic data classes
12 years ago
Justin Richer cc1da67639 fixed expires_at property, hid helper functions
12 years ago
Amanda Anganes 3c5025c52b Updated version number for secoauth
12 years ago
Justin Richer 25d75a1b30 [maven-release-plugin] prepare for next development iteration
12 years ago
Justin Richer 5418bdef5a [maven-release-plugin] prepare release mitreid-connect-1.0.1
12 years ago
Justin Richer 81cd13f6d3 added RegisteredClient class to facilitate client configuration and dynamic registration, addresses #335
12 years ago
Justin Richer defa5b8fbc [maven-release-plugin] prepare for next development iteration
12 years ago
Justin Richer dbdc99361e [maven-release-plugin] prepare release mitreid-connect-1.0.0
12 years ago
Justin Richer 1e870703f8 added licence/copyright header
12 years ago
Justin Richer 8afab04544 whitespace, import, brace, annotation, and format cleanups
12 years ago
Justin Richer b8c385e5c9 pom file cleanups
12 years ago
Justin Richer 9b03801f9d [maven-release-plugin] prepare for next development iteration
12 years ago
Justin Richer d76304b9a6 [maven-release-plugin] prepare release mitreid-connect-0.9.3
12 years ago
Amanda Anganes c80b1081cc Cleaning up approvedsite => token linkage
12 years ago