8f81278332
We really should specify an encoding here and not depend on the
...
servers default encoding, shouldn't we? It becomes ISO-8859-1
otherwise in Tomcat as per the Servlet specification.
9 years ago
c31f42c3f3
updated versions to 1.3
9 years ago
58724aa6dc
[maven-release-plugin] prepare for next development iteration
9 years ago
29c9ee2c46
[maven-release-plugin] prepare release mitreid-connect-1.2.6
9 years ago
89316cbab1
fixed default token lifetimes for heart mode
9 years ago
9691f02772
added audience parameter to parser, fixed token generator to match HEART spec
9 years ago
49a8848648
count really weird URIs as "custom scheme"
9 years ago
d75bba218d
forbid password grant type in HEART mode
9 years ago
699e9bff39
testing for multiple classes of redirect URIs
9 years ago
38710bd3d2
unit tests for HEART mode
9 years ago
74ea42851b
added check for HEART mode consistency
9 years ago
028265faa6
pulled scope values to externalized strings
9 years ago
5bccb602d8
always perform strict redirect URI matches in HEART mode
9 years ago
51e3513307
disallow client secret JWT authentication in HEART mode
9 years ago
d0d6ae2ad8
[maven-release-plugin] prepare for next development iteration
9 years ago
7f5b70e9e1
[maven-release-plugin] prepare release mitreid-connect-1.2.5
9 years ago
183a599126
fixed OIDC discovery relation URL
9 years ago
61433cc23a
deepen webfinger, endpoint is looser
...
closes #1008
9 years ago
82a1e49e79
[maven-release-plugin] prepare for next development iteration
9 years ago
e6684fb7a8
[maven-release-plugin] prepare release mitreid-connect-1.2.4
9 years ago
3d14b0d128
rename zone_info claim to zoneinfo
9 years ago
7badfe1d17
Happy new year 2016!
9 years ago
d1033b693f
added privacy-preserving client logo cache
9 years ago
e828f3f18d
[maven-release-plugin] prepare for next development iteration
9 years ago
01ca5ef8e2
[maven-release-plugin] prepare release mitreid-connect-1.2.3
9 years ago
aa878cc3cf
pulled checks for expired tokens into utility functions
9 years ago
698feb49cd
check access token expiration on read. closes #983
9 years ago
7f464c496b
changed copyright to new consortium name
9 years ago
ea77bf2a19
quieted approved site cleanup
9 years ago
1ed3e2c47a
quieted logging on database cleanup tasks when no expired elements are found
9 years ago
fcfc620d51
updated client API with more useful errors, removed unused service reference
9 years ago
2496dc114c
allow language system to be loaded from multiple files. closes #817 closes #876
9 years ago
e255fc1a10
change default behavior of message source, closes #964
9 years ago
7b34a666d9
Make the dual client support configurable
9 years ago
a80953a2d4
Allow both flows authorization code and client credentials. This scenario might be found when the same client supports user authentication as well as service to service authentication. Such a client is trusted (whitelisted).
9 years ago
dce80d488b
Clean up ScopeClaimTranslationService
...
`getFieldNameForClaim` method is never used.
9 years ago
2deec98b58
[maven-release-plugin] prepare for next development iteration
9 years ago
d96b2dc130
[maven-release-plugin] prepare release mitreid-connect-1.2.2
9 years ago
96f4d5e8a8
fixed use of wrong constant, closes #940
9 years ago
c9358f348a
added transactional annotations, finally closes #926 addresses #862
9 years ago
e1e892377f
added cleaner for duplicate refresh tokens
9 years ago
542afca459
cleans duplicate access tokens from DB before other cleanup happens
9 years ago
ebb4f2c3d4
Upgraded to nimbus 4.2, closes #934
9 years ago
c67611e975
added qualifier name to persistence unit and transaction manager, closes #883
9 years ago
d280ca40a4
login hints now handled in a slightly smarter (and more pluggable) manner, closes #851
9 years ago
b5c298e0ca
Remove legacy CSRF protection for approve page
...
Instead, we rely on the Spring Security CSRF protection, like we already do for the login page. Additionally, we remove the authentication check in`isApproved`, because this is already done by Spring Security (and if not, we have bigger problems to worry about).
9 years ago
8b362f23f3
[maven-release-plugin] prepare for next development iteration
9 years ago
e384a6257b
[maven-release-plugin] prepare release mitreid-connect-1.2.1
9 years ago
4063f7f94f
user info endpoint response uses correct client algorithms, addresses #921
9 years ago
acb3d03052
added 'kid' to all signed tokens, closes #899
9 years ago
d3f8ff2855
added JTI to ID tokens, closes #900
9 years ago
9822748209
grabbed additional places that mention updated_time/updated_at
9 years ago
31ea96ce27
Update DefaultOIDCTokenService.java
...
fixed typo
9 years ago
22c05ec51b
[maven-release-plugin] prepare for next development iteration
9 years ago
e6b64cd9cd
[maven-release-plugin] prepare release mitreid-connect-1.2.0
9 years ago
489450b1c2
automated code format cleanup
9 years ago
15c2b57730
[maven-release-plugin] prepare for next development iteration
9 years ago
8317c759f1
[maven-release-plugin] prepare release mitreid-connect-1.2.0-RC2
9 years ago
0740443768
added claims redirect uri set to client model for UMA usage
9 years ago
a4e75ed733
[maven-release-plugin] prepare for next development iteration
10 years ago
58a47d0e46
[maven-release-plugin] prepare release mitreid-connect-1.2.0-RC1
10 years ago
0714ed514e
fixed errant unit test
...
why do they always get away like that??
10 years ago
064f36ef6c
clean up resource sets when clients are deleted
10 years ago
d1c069ad1e
clean up permissions and access tokens when a resource set is revoked
10 years ago
7345a03aaa
added UMA import, closes #811 even harder
10 years ago
bcd8a96b5d
UMA data export, closes #811
10 years ago
a3360e9561
externalized strings in data API (1.2)
10 years ago
4a382f2b1c
updated unit tests to new structure
10 years ago
8c822c0f54
detached whitelist from approved sites, closes #781
10 years ago
c4aaa29ffc
updated unit tests for new refresh token mode
10 years ago
d9efeb3b67
added clear access tokens to export/import
10 years ago
2f4d9ce54b
clearing out refresh tokens is now configurable, closes #409
10 years ago
8359ac2813
fixed refresh token lookup
10 years ago
d2a393f7f9
converted error handlers to a single @ControllerAdvice class, closes #788
10 years ago
f4a1b27e2e
better handling of HTTP and JSON errors on network fetches, added http-forcing behavior for webfinger client and sector URL service
10 years ago
f7a082d4b8
wrapped timestamp injection in a null-safe block, with warning; closes #849
10 years ago
9e74e40453
Use diamond syntax instead of explicit types
10 years ago
6dc2b2cb5e
Various small improvements/bugfixes
10 years ago
d1e8529a7b
expose ID Token and UserInfo to the AuthoritiesProvider and AuthoritiesMapper, both extensible
...
closes #699
closes #761
10 years ago
4655650a68
added OAuth error display page, closes #559
10 years ago
dfc8df42f5
moved server configuration injection to pre-request
10 years ago
79317d5b70
JWK Set by value added to admin UI, addresses #826
10 years ago
e43600494a
minor automated code cleanup
10 years ago
642942b5cf
Generalized client key handling into a single cache service
10 years ago
032d41e5ed
added JWKs-by-value support to client data model and API, closes #826
10 years ago
8d3a8471aa
updated refresh token to use converter instead of dummy field
10 years ago
9662f3e8b3
switched access token to using converter instead of dummy field
10 years ago
9ba1a78d09
removed binary objects from data API importers, removed binary object JSON utility entirely
10 years ago
c974267cde
return prompt=none error to client, closes #667
10 years ago
cbf6316050
cleaned up logic on user info interceptor to fix detection of redirects
10 years ago
fe6d2f8a6e
updated and expanded unit tests to account for new data layer
10 years ago
d5a08d4996
cleaned up vestigial service component, to be fixed (maybe) in #825
10 years ago
d9e03b769b
fixed auth holder reference handling, import/export works now
10 years ago
3d1aee77b4
updated 1.2 import to reflect new objects
10 years ago
441b19f0c5
fixed data export to comply with new auth holder
10 years ago
a7905c9f82
only save strings in the Extensions map
10 years ago
cb8abca0f6
removed embedded JOSE classes in favor of converters
10 years ago
6be2b4f65e
added ES* and PS* support for signed objects
10 years ago
04dc037f9e
fixed unit tests to account for refresh token rotation
10 years ago
aeed2fa003
issue new refresh tokens for clients who are configured for it, closes #408
10 years ago
Fredrik Jönsson