Justin Richer
|
269c2c9835
|
fixed nonce cookie handling
|
2012-08-14 12:11:51 -04:00 |
Mike Derryberry
|
d1218efb2a
|
cleaned up imports
|
2012-08-14 10:55:08 -04:00 |
Mike Derryberry
|
55e7a4d707
|
moved request object auth endpoint in project setup
|
2012-08-14 10:55:08 -04:00 |
Mike Derryberry
|
ec286b9644
|
removed auth bean from application-context. Added extra parameter checks in request object auth endpoint
|
2012-08-14 10:55:08 -04:00 |
Mike Derryberry
|
04d8faa90a
|
updated autowired annotation
|
2012-08-14 10:55:08 -04:00 |
Mike Derryberry
|
20a7ebc576
|
autowired all member variables in request object auth endpoint
|
2012-08-14 10:55:08 -04:00 |
Mike Derryberry
|
694074ee58
|
moved endpoint, added param processing
|
2012-08-14 10:55:08 -04:00 |
Mike Derryberry
|
36b9c805d9
|
added reference to abstract endpoint class to get token granter
|
2012-08-14 10:55:08 -04:00 |
Mike Derryberry
|
2bdbb283b7
|
removed dependency on abstract endpoint class. added methods needed to authRequestObjectEndpoint (afterPropertiesSet())
|
2012-08-14 10:55:08 -04:00 |
Mike Derryberry
|
51ec529861
|
readded implementation of initializingBean
|
2012-08-14 10:55:08 -04:00 |
Mike Derryberry
|
638ebf2010
|
cleaned up AuthRequestObjectEndpoint class
|
2012-08-14 10:55:08 -04:00 |
Mike Derryberry
|
d93f5f18e5
|
added state value to jwt that gets passed as request object. certain methods from SECOAUTH use this
|
2012-08-14 10:55:08 -04:00 |
Mike Derryberry
|
3486ea28f1
|
updated mimicked methods to not use jwt, but rather a jwt in an auth request
|
2012-08-14 10:55:08 -04:00 |
Mike Derryberry
|
1a20dcbc6e
|
added methods that mimic behavior of private SECOATH methods
|
2012-08-14 10:55:08 -04:00 |
Mike Derryberry
|
d5caa0b543
|
changed server endpoint to act like an endpoint. WIP to accept request objects, validate, and redirect
|
2012-08-14 10:55:08 -04:00 |
Mike Derryberry
|
7d6211afd7
|
cleaned up some imports, added serverEndpointRequest class
|
2012-08-14 10:55:08 -04:00 |
Mike Derryberry
|
eff7a2c504
|
changed nonce claim addition
|
2012-08-14 10:55:08 -04:00 |
Mike Derryberry
|
28344a3c91
|
auth endpoint got into client code. removed
|
2012-08-14 10:55:08 -04:00 |
Mike Derryberry
|
9d73cd2243
|
cleaned up imports in filter class
|
2012-08-14 10:55:07 -04:00 |
Mike Derryberry
|
2888c08083
|
changed cookie claim to include the response
|
2012-08-14 10:55:07 -04:00 |
Mike Derryberry
|
bc216785b8
|
added cookie to response in auth filter for request objects
|
2012-08-14 10:55:07 -04:00 |
Mike Derryberry
|
f7cfb39777
|
updated imports of signed request filter
|
2012-08-14 10:55:07 -04:00 |
Mike Derryberry
|
c0d353d7ce
|
removed state parameter from claims. added way to create random nonce value
|
2012-08-14 10:55:07 -04:00 |
Mike Derryberry
|
8e95734f22
|
changed response-type to code rather than token
|
2012-08-14 10:55:07 -04:00 |
Mike Derryberry
|
f8d938630e
|
added passthrough parameters to server config
|
2012-08-14 10:55:07 -04:00 |
Mike Derryberry
|
c4ebf5c145
|
updated signer service
|
2012-08-14 10:55:07 -04:00 |
Mike Derryberry
|
d6b0b87769
|
added state parameter to reqeuest object
|
2012-08-14 10:55:07 -04:00 |
Mike Derryberry
|
1efe7a1fc3
|
updated check of algorithm in signing method"
|
2012-08-14 10:55:07 -04:00 |
Mike Derryberry
|
99bc1294e3
|
removed repetative check of "token" parameter in signed request object
|
2012-08-14 10:55:07 -04:00 |
Mike Derryberry
|
685734ce35
|
updated signing request object in OIDC client by pulling out construction of JWT to its own method.
|
2012-08-14 10:55:07 -04:00 |
Mike Derryberry
|
76c91ea79f
|
removed encrypted request object for OIDC client. will deal with it at a later point
|
2012-08-14 10:55:07 -04:00 |
Mike Derryberry
|
8f22517c81
|
encrypted request object wip. need to add header parameters to allow encryption. also need to get public key for encryption
|
2012-08-14 10:55:07 -04:00 |
Mike Derryberry
|
70c4c25fa3
|
finished signed request object for client, created encrypted request object for client
|
2012-08-14 10:55:07 -04:00 |
Mike Derryberry
|
42a9b67f5e
|
updated signed request filter to create jwt from parameters, sign it, create url for request, and send a redirect
|
2012-08-14 10:55:07 -04:00 |
Mike Derryberry
|
b0eca780d1
|
changed class to request filter rather than jwt filter
|
2012-08-14 10:55:07 -04:00 |
Mike Derryberry
|
5f0ea41e0e
|
added class for signed request object
|
2012-08-14 10:55:07 -04:00 |
Justin Richer
|
c0a61fe47a
|
moved jquery to page header instead of footer, added focus call on login form
|
2012-08-14 10:48:38 -04:00 |
Justin Richer
|
484abc4915
|
fixed client delete
|
2012-08-10 17:24:21 -04:00 |
Michael Jett
|
5e898a7b0b
|
Id toke timeout binding for UI
|
2012-08-10 17:20:23 -04:00 |
Michael Jett
|
aaa38a761d
|
Mis-type for client secret
|
2012-08-10 17:18:43 -04:00 |
Michael Jett
|
b99d2ed9dc
|
Client Id null fix
|
2012-08-10 17:15:35 -04:00 |
Michael Jett
|
935b5ed43a
|
Client Id is now editable
|
2012-08-10 17:11:13 -04:00 |
Michael Jett
|
0f9d4ef255
|
Id refactor UI
|
2012-08-10 17:05:28 -04:00 |
Justin Richer
|
155974d8e3
|
moved services and api over to using new client Id field (instead of client_id)
|
2012-08-10 16:53:31 -04:00 |
Justin Richer
|
eb5a24690f
|
added method to get client by its (new) Long id
|
2012-08-10 16:29:16 -04:00 |
Michael Jett
|
480fb8e593
|
Id refactor UI
|
2012-08-10 16:26:54 -04:00 |
Michael Jett
|
ae5e1ca859
|
Merge remote branch 'origin/master'
|
2012-08-10 16:12:54 -04:00 |
Michael Jett
|
3f9e2cfa52
|
Horizontal UI refactor
|
2012-08-10 15:29:11 -04:00 |
Justin Richer
|
47ff885032
|
removed unnecessary cached token values
|
2012-08-10 14:26:47 -04:00 |
Justin Richer
|
74a40fc973
|
changed auth holder reference, moved dates to timestamps
|
2012-08-10 14:26:47 -04:00 |