Justin Richer
|
a3037a18a7
|
system scope service applied to client creation UI
|
12 years ago |
Justin Richer
|
cab36a2b80
|
added appropriate filterered and transformative actions to scope service
|
12 years ago |
Justin Richer
|
ab35186696
|
added scope service, repository, and API
|
12 years ago |
Justin Richer
|
19e7b62a42
|
removed persistence.xml and moved to pure spring-based config, addresses #194
|
12 years ago |
Justin Richer
|
a3619240e6
|
added site scope
|
12 years ago |
Justin Richer
|
a2e548c261
|
fixed claims processor for request object from user info endpoint
|
12 years ago |
Justin Richer
|
899150d636
|
tweak display on auth revoke page
|
12 years ago |
Justin Richer
|
3c190e044a
|
inject parsed parameters to make SECOAUTH happy
|
12 years ago |
Justin Richer
|
1144d511af
|
inject scopes
|
12 years ago |
Justin Richer
|
f9d50db1f1
|
don't treat openid scope special here -- by default client gets access to *all* scopes it's registered for
|
12 years ago |
Justin Richer
|
078342715b
|
moved request object to request manager
|
12 years ago |
Amanda Anganes
|
3399eed45a
|
Added about, contact, and stats pages. Still largely placeholders, but the topbar works correctly now at least.
|
12 years ago |
Justin Richer
|
0be254c99a
|
updated token introspection output to match spec and client filter
|
12 years ago |
Justin Richer
|
e02e08563c
|
changed order or custom filters to make assertions work, added client credentials token granter to default
|
12 years ago |
Justin Richer
|
c1d33bb55b
|
bugfix in assertion processor
|
12 years ago |
Amanda Anganes
|
2e2c0e8e6c
|
Fixed bug in nonce processing
|
12 years ago |
Amanda Anganes
|
3db74100a4
|
working on bug
|
12 years ago |
Amanda Anganes
|
dd8b48e863
|
Reset ConnectAuthorizationRequestManager to version from master
|
12 years ago |
Amanda Anganes
|
06f970e61b
|
Trying to fix nonce service
|
12 years ago |
Amanda Anganes
|
86bf51f0a7
|
Added java reflection code for request object handling, needs to be tested
|
12 years ago |
Amanda Anganes
|
677f0f2d4c
|
Stubbed out required functionality for request object filtering
|
12 years ago |
Amanda Anganes
|
67e8714671
|
Working on request object userinfo parsing
|
12 years ago |
Justin Richer
|
779001a8c8
|
updated copyright year
|
12 years ago |
Justin Richer
|
7269700dc6
|
switched injector from repository to service
|
12 years ago |
Justin Richer
|
f0ee36dad2
|
auth_type -> auth_method (addresses #258)
|
12 years ago |
Justin Richer
|
fd2253303e
|
changed pointer on tabs, addresses #252
|
12 years ago |
Justin Richer
|
899e306683
|
fixed JS crash on "new client" operation
|
12 years ago |
Justin Richer
|
8831bc64a2
|
offline -> offline_access (addresses #248)
|
12 years ago |
Justin Richer
|
27a26e0a35
|
(user_id/prn) -> sub
|
12 years ago |
Justin Richer
|
1ab29882b4
|
fixed user prepoulation table
|
12 years ago |
Justin Richer
|
0ab4ad4bbe
|
added "birthdate", addresses #253
|
12 years ago |
Justin Richer
|
6ef4dc817e
|
genericized nimbus code, added caching
|
12 years ago |
Justin Richer
|
2d21a72e7e
|
switched to nimbus to check JWT signature
|
12 years ago |
Justin Richer
|
60bda31c54
|
updated custom filter
|
12 years ago |
Justin Richer
|
c17bc05b0e
|
wiring configuration
|
12 years ago |
Justin Richer
|
4262be1fd3
|
added jwt processing to client auth provider
|
12 years ago |
Justin Richer
|
abd64eccd6
|
added framework for processing assertions for client auth
|
12 years ago |
Amanda Anganes
|
ad5e77f7ff
|
Made nonce storage duration configurable in application-context.xml;
|
12 years ago |
Amanda Anganes
|
59f1b1f05e
|
Testing, nonce handling seems to be working now
|
12 years ago |
Amanda Anganes
|
a1a117cfde
|
Added default constructor to ConnectAuthorizationRequestManager
|
12 years ago |
Amanda Anganes
|
af81e371fb
|
Updated application-context to use new authorization request manager
|
12 years ago |
Amanda Anganes
|
77b932f5a7
|
Added implementation of AuthorizationRequestManager. Nonce checking will go in here
|
12 years ago |
Amanda Anganes
|
1af6513499
|
Removed nonce checking from token service impl
|
12 years ago |
Amanda Anganes
|
7e7b2527db
|
Added nonce to persistence.xml
|
12 years ago |
Amanda Anganes
|
246ed962bb
|
Added stub of repository test
|
12 years ago |
Amanda Anganes
|
e1dffb959c
|
Added NonceReuseException
|
12 years ago |
Amanda Anganes
|
8f8a3754db
|
Added database tables for Nonce
|
12 years ago |
Amanda Anganes
|
a4637ec395
|
Fleshed out nonce service classes, added code to token service impl to check for and store nonces. Added JodaTime library for working with dates.
|
12 years ago |
Amanda Anganes
|
c7ae315e98
|
Added initial files for nonce service. Repository and service impls are stubs
|
12 years ago |
Justin Richer
|
cbcfe55bb9
|
added introspection flag to client bootstrap
|
12 years ago |
Justin Richer
|
4068952a81
|
fixed well size, added comment
|
12 years ago |
Justin Richer
|
655092a12b
|
added introspection checkbox, added access tab
Signed-off-by: Justin Richer <jricher@mitre.org>
|
12 years ago |
Justin Richer
|
9a1b2d7fac
|
made client edit page tabbable (that was seriously easy)
|
12 years ago |
Justin Richer
|
48866c15f2
|
button display cleanup
|
12 years ago |
Justin Richer
|
a85b1f5d74
|
split approved sites into two tables
|
12 years ago |
Justin Richer
|
198a45369a
|
buttonsize tweak
|
12 years ago |
Justin Richer
|
f12efc1b80
|
added dynreg caution block
|
12 years ago |
Justin Richer
|
231e81a426
|
updated icons
|
12 years ago |
Justin Richer
|
797d521691
|
cleaned up logged-in button
|
12 years ago |
Justin Richer
|
7ebbe3acc4
|
removed mockups
|
12 years ago |
Justin Richer
|
7459767646
|
fixed validation problem with new backbone
|
12 years ago |
Justin Richer
|
37bca0d5fb
|
cleaned out backbone validation plugin
|
12 years ago |
Justin Richer
|
9dd54d47bb
|
updated versions of backbone and underscore
|
12 years ago |
Justin Richer
|
e0672757bf
|
update to bootstrap 2.2.2
|
12 years ago |
Justin Richer
|
8ad28b41aa
|
fixing CSS and collapsing headerbar
|
12 years ago |
Justin Richer
|
67a682d53a
|
added default router to backbone app
|
12 years ago |
Justin Richer
|
87788f0710
|
let users visit home page without logging in
|
12 years ago |
Justin Richer
|
f265347311
|
tweaked error messages
|
12 years ago |
Justin Richer
|
18ddd8333f
|
added flag to allow introspection, relaxed same-client restrictions on introspection and chained tokens
|
12 years ago |
Justin Richer
|
6eabc895b9
|
moved database file to a reasonable name
|
12 years ago |
Justin Richer
|
1f53f41648
|
generic entity view now takes optional HttpStatus argument
|
12 years ago |
Justin Richer
|
a3790f943e
|
cleaned up introspection endpoint to use exceptions
|
12 years ago |
Justin Richer
|
e5206f2b92
|
implemented jwt assertions for id tokens
|
12 years ago |
Justin Richer
|
51b67ebc03
|
added queries to get access token from id token
|
12 years ago |
Justin Richer
|
1853bd7117
|
added assertion token granter
|
12 years ago |
Justin Richer
|
0d6c96f410
|
moved JPA adapter to data-context, addresses #242
|
12 years ago |
Justin Richer
|
2a74be5baf
|
bringing mysql tables up to date
|
12 years ago |
Justin Richer
|
2c104a71e2
|
cleaned up mysql table
|
12 years ago |
Justin Richer
|
cda6163d0d
|
null and blank handling
|
12 years ago |
Justin Richer
|
06fad3a41c
|
moved view for client API
|
12 years ago |
Justin Richer
|
6344a72519
|
missed a few applicationName references, fixed API JSON rendering
|
12 years ago |
Justin Richer
|
dfd8e9c7c7
|
removed unused view
|
12 years ago |
Justin Richer
|
dd04df6a22
|
fixed javascript bugs
|
12 years ago |
Justin Richer
|
f12d3c7d30
|
fixed variable reference
|
12 years ago |
Justin Richer
|
920777128d
|
switched to uncompressed jquery
|
12 years ago |
Justin Richer
|
829c8ae5f4
|
tweaked functionality of grant types and scopes
|
12 years ago |
Justin Richer
|
cc36851bdd
|
propagated field name change to UI
|
12 years ago |
Justin Richer
|
179903b074
|
propagated client changes to service
|
12 years ago |
Justin Richer
|
2f7891d02c
|
updated mysql table to new schema
|
12 years ago |
Justin Richer
|
bcfa37040e
|
missed one
|
12 years ago |
Justin Richer
|
33ceedb283
|
added scope and grant_type, switched to timeunit
|
12 years ago |
Justin Richer
|
e2bc15c2b2
|
beginning of client registration refactor to track IETF dynreg spec
|
12 years ago |
Justin Richer
|
94c37f5815
|
added redelegate scope to client list, fixed inconsistency with refresh token issuance (addresses #239)
|
12 years ago |
Justin Richer
|
510ddb48b7
|
override the correct part of the token granter class
|
12 years ago |
Justin Richer
|
bdcc6af096
|
temporary sanity check for client ID's
|
12 years ago |
Justin Richer
|
cab0839430
|
added workarounds for quirks in SECOAUTH
|
12 years ago |
Justin Richer
|
edc96d646c
|
added chained token grant
|
12 years ago |
Justin Richer
|
54708fb0ac
|
fixed id token scopes (shouldn't inherit from parent token)
|
12 years ago |
Justin Richer
|
2a206654b6
|
added client credential protection to revocation endpoint
|
12 years ago |
Justin Richer
|
e38b2b0ba5
|
shortened revocation endpoint url
|
12 years ago |