a97f3e2d65
don't throw away creation time on protected resource update (oops)
11 years ago
e0fe22e4ba
don't regenerate client secrets every single time
11 years ago
53148f2c87
better auth method checking in dynamic registration and resource registration
11 years ago
f15b4a0f74
resource registration returned the wrong URL
11 years ago
47cc005fe5
more sanity checking for client secrets
11 years ago
cac645484f
client API now generates client secret only for clients that require a client secret
11 years ago
52e53ba219
extracted validation exception, refactored protected resource registration endpoint to use this format
11 years ago
b7a8bbdddc
cleanup, error wrappers on protected resource registration
11 years ago
deaccf437e
refactored dynamic registration endpoint's checks for client consistency
11 years ago
04f7a698ea
added response type consistency checking, closes #430
11 years ago
32101ff7b2
added parsing checks, fixed inverted logic, cleaned up redundant settings, closes #597
11 years ago
ab083c0963
added checks to dynamic registration endpoint that disallow registration of multiple incompatible grant types
11 years ago
cdd23df7ee
token introspection now returns user "sub" when available in addition to "user_id", closes #507 (might cause incompatibility problems)
11 years ago
85acfa90db
[maven-release-plugin] prepare for next development iteration
11 years ago
d5e4cb45a2
[maven-release-plugin] prepare release mitreid-connect-1.1.7
11 years ago
8861220632
stats on home page are now loaded in the background (makes main site load much faster)
11 years ago
3e4aae6c8a
hash tests now pass on Java8
11 years ago
dfdc4ed52d
fixed information leaks from approved site API
11 years ago
a84c10fc1c
Change copyright from Netcetera to MITRE/MIT-KIT.
11 years ago
2797731597
fixed unit test to account for cascading tokens
11 years ago
d2c83104fb
cascade token saves
11 years ago
7f8cbcea39
Use return value from TokenEnhancer.enhance
11 years ago
be98b9cd0b
[maven-release-plugin] prepare for next development iteration
11 years ago
8320f0eefe
[maven-release-plugin] prepare release mitreid-connect-1.1.6
11 years ago
0c8cacd59a
added missing copyright headers
11 years ago
525f3aa2a8
Cleaned up indentation, whitespace, and imports.
11 years ago
8185171119
minor clean up
11 years ago
5ab516de48
prevent clients from registering with special resource scope
11 years ago
c34357a433
added resource registration endpoint with basic functionality and specialized tokens
11 years ago
960319b796
improved logging configuration, removed transactional from service
11 years ago
85fd4e71ce
typo in error message
11 years ago
2af51dc77a
better URI check for prompt filter short circuit
11 years ago
f4a1a2acff
fixed prompt filter coding error
11 years ago
89d55e3d33
added support for default max auth age and require auth time, made prompt filter only work on authorization endpoint
11 years ago
5c6e75bd53
cleaned up UI for client editing
11 years ago
05e9624ae3
added support for encrypted and symmetrically signed id tokens and user info responses
11 years ago
ffe1b29906
Added Signed JWT support to UserInfo endpoint response, closes #593
11 years ago
e4d5f4a540
added system wide cache for all symmetric validators, closes # 557
11 years ago
ca333d256b
Appropriately catch runtime exceptions in all guava caches, closes #603
11 years ago
df9c9747ce
more reasonable check for whether or not a user auth is present, addresses #602
11 years ago
4e890a4d7d
enforce clients using a redirect flow have at least one redirect uri registered when using dynamic registration, made error handling more consistent across all APIs
...
closes #596
11 years ago
a225b00920
added null check and permissions check to ID token generation, closes #602
11 years ago
880014176f
[maven-release-plugin] prepare for next development iteration
11 years ago
ca8a003e3d
[maven-release-plugin] prepare release mitreid-connect-1.1.5
11 years ago
dcf36234c4
moved CSRF generator to request parser instead of confirmation controller
11 years ago
a253ebc908
added CSRF protection to approval page
11 years ago
fcfbf1080f
renamed auth request variable
11 years ago
7cd36b471f
Make introspection endpoint access authorization pluggable.
11 years ago
4b697ba909
webfinger checks host on acct: URIs, closes #404
11 years ago
b8129bf60d
[maven-release-plugin] prepare for next development iteration
11 years ago
a9e34ac9bd
[maven-release-plugin] prepare release mitreid-connect-1.1.4
11 years ago
376403fa4a
account for registration time in approval page, closes #550
11 years ago
1d2f968bd1
configuration cleanup, closes #568
11 years ago
318a28ddf8
added stats mock to unit tests
11 years ago
521017c5c2
updated stats service to have a resettable cache triggered by other service events
11 years ago
7f310400b1
simple cache for stats
11 years ago
39509bfdc4
Performance improvement of token cleanup:
...
an alternative token cleanup mechanism designed to maintain a very compact memory footprint while performing cleanup in consecutive runs of the cleanup thread. This serves to address OutOfMemoryException issues of the original token cleanup mechanism when process is under load. Also, added cleanup of the authentication_holder table.
11 years ago
265624b285
a fix for a NullPointerException whenever a client requests a client scope to be granted.
11 years ago
97cd00e06c
[maven-release-plugin] prepare for next development iteration
11 years ago
23c7cf6996
[maven-release-plugin] prepare release mitreid-connect-1.1.3
11 years ago
ad5ffb64e8
[maven-release-plugin] prepare for next development iteration
11 years ago
1635cf957d
[maven-release-plugin] prepare release mitreid-connect-1.1.2
11 years ago
53cc7ef447
Fixed audience claim on client auth assertion
11 years ago
1fcef858c6
updated server discovery document to reflect new capabilities
11 years ago
b67121f0cd
added client_secret_jwt auth method support, closes #174
11 years ago
15b017992c
added DELETE to token api because revocation endpoint doesn't work for this kind of management, closes #191
11 years ago
89f015cf1c
Updated Token API to be less leaky
11 years ago
dd391ebf3c
Display contacts, popup for image, cleanup of more info
11 years ago
dab52ca8a0
enhancements to approval page
11 years ago
ec6a78c1ba
made prompt pluralizable to comply with spec, closes #519
11 years ago
9395c3802d
[maven-release-plugin] prepare for next development iteration
11 years ago
4f8311962a
[maven-release-plugin] prepare release mitreid-connect-1.1.1
11 years ago
19dbe92d4e
initial support for displaying claim values for requested scopes
11 years ago
3b52ce8201
happy new year!
11 years ago
ebbc7209aa
automated code formatting and cleanup
11 years ago
e1e7f7a579
[maven-release-plugin] prepare for next development iteration
11 years ago
42fe973f7b
[maven-release-plugin] prepare release mitreid-connect-1.1.0
11 years ago
4a8d693746
fixed prompt filter map mismatch (I hate type erasure)
11 years ago
ce1f3f2f94
updated mockito, fixed some unit tests
11 years ago
d330bd1c9b
cleanup, added revocation uri to server config
11 years ago
ed06b14406
publish revocation endpoint, addresses #520
11 years ago
b7011f508e
urlencode client IDs in client registration URIs, addresses #422
11 years ago
8c1bfb7e0c
set current user's email address to owner when using admin UI
11 years ago
6c4d2a8e8d
vestigial comment cleanup
11 years ago
db5532e9bf
comment cleanup
11 years ago
39fb96a802
pull request from extensions map
11 years ago
86e0f0c7ee
cleaned up old comments
11 years ago
a24eadeb11
cleaned up responseType calls, addresses #451
11 years ago
df511a81cc
override from #465 no longer needed
11 years ago
d3dbb00e77
ensure clients and tokens don't get special system scopes, addresses #320
11 years ago
ef01de168d
Moved special token scopes to scope service interface
11 years ago
4f986d6a38
clean up some auto generated functions
11 years ago
f56135810c
Fixed request object precedence order
11 years ago
447df56947
removed unused nonce exception
11 years ago
27f391ef01
Fixed compilation errors for SECOAUTH milestone updates
11 years ago
190caee9a1
refactored userinfo serializer
11 years ago
46be502ed1
Enforces minimum Java version 1.6 on the openid-connect-server project.
11 years ago
2a34994383
cleanup view
11 years ago
7a4366c083
collapsed two serialization functions into one
11 years ago
65a7e1d724
Added UserInfo.toJson method; added ScopeClaimTranslationService; rewrote UserInfoSerializer to use both
11 years ago
Justin Richer