Amanda Anganes
a79aca906e
Fixed error logging; added ApprovedSite tracking to tokens
12 years ago
Justin Richer
94aa279290
[maven-release-plugin] prepare for next development iteration
12 years ago
Justin Richer
cc92743888
[maven-release-plugin] prepare release mitreid-connect-0.9.2
12 years ago
Justin Richer
d7689152b8
fixed inadvertent consistency bug in granting offline_access to clients
12 years ago
Justin Richer
0e2d5830a4
updated newly-registered clients to not get refresh tokens unless they ask for offline_access scope explicitly
12 years ago
Justin Richer
fb859fc39a
added client dynamic registration service, extracted clientdetails<->json processing into its own static class
12 years ago
Justin Richer
fc1088c841
fixed display of algorithms in discovery endpoint
12 years ago
Amanda Anganes
82fca45412
Removed RequestObjectAuthorizationEndpoint as it is no longer needed with the changes to the AuthorizationEndpoint.
12 years ago
Amanda Anganes
9db8119930
Fixed request object processing, had a small bug
12 years ago
Amanda Anganes
e708f77eb3
Fixed up OIDC code so that it runs with new SECOAUTH changes; removed old AuthorizationRequestImpl class which is no longer needed
12 years ago
Justin Richer
895690df54
added webfinger discovery to server, addresses #279
12 years ago
Justin Richer
9c6b08d919
effectively removed auth_time calculations
12 years ago
Justin Richer
33af3b1ad6
updated discovery endpoint to latest spec, removed surplus specialized view
12 years ago
Justin Richer
8e8e14c638
added at_hash
12 years ago
Justin Richer
3bb43f417a
added auth time tracking
12 years ago
Justin Richer
ce2e630304
fixed login page display (thanks to Jett), addresses #289
12 years ago
Justin Richer
e665aec36f
dependency cleanup
12 years ago
Justin Richer
98fff8fe99
updated error handling on introspection and revocation endpoints
12 years ago
Justin Richer
35cb14a73f
fixed comment
12 years ago
Justin Richer
743a3023dc
removed old error handlers
12 years ago
Justin Richer
31e3c5e5e7
moved user approval page
12 years ago
Justin Richer
694761c026
cleaned up userinfo view
12 years ago
Justin Richer
71d6dc6afe
removed special stats view
12 years ago
Justin Richer
1630648925
updated logo, added large logo
12 years ago
Amanda Anganes
7e59421f33
Commented out XRD endpoint and added TODO reference to webfinger issue
12 years ago
Amanda Anganes
34b243e0e1
Added back discovery endpoint, but renamed to not say SWD
12 years ago
Justin Richer
ac2993c402
[maven-release-plugin] prepare for next development iteration
12 years ago
Justin Richer
f0d75f9144
[maven-release-plugin] prepare release mitreid-connect-0.9.1
12 years ago
Stephen Moore
23c318f6c2
Updating guava to 14.0.1
12 years ago
Amanda Anganes
a723c9d921
Removed references to DefaultAuthorizationRequest in connect code
12 years ago
Amanda Anganes
e17eaa499e
Cleaned up classes affected by SECOAUTH changes; added Connect implementation of AuthorizationRequest and updated manager class to reflect new class & updated interface;
...
;
12 years ago
Justin Richer
5f54777109
[maven-release-plugin] prepare for next development iteration
12 years ago
Justin Richer
620a60ddc2
[maven-release-plugin] prepare release mitreid-connect-0.9.0
12 years ago
Justin Richer
54f1ae972b
Added properties and updated poms for sync to central
12 years ago
Justin Richer
f63ea94b37
fixed bean name
12 years ago
Justin Richer
f101dcc512
moved to released version of SECOAUTH
12 years ago
Justin Richer
c0c1847f38
fixed bean name
12 years ago
Amanda Anganes
72e2c7cb6c
Updated build references
12 years ago
Amanda Anganes
02220a411a
Fixed typo
12 years ago
Amanda Anganes
0f327a772b
Updated js files to use results returned from JsonErrorView; factored out markup into modal definition.
12 years ago
Amanda Anganes
2265a3f8c3
Updated error handling messages for scope, approved site, blacklist, whitelist, and client APIs using new JsonErrorView
12 years ago
Amanda Anganes
ee5b21b542
Added JsonErrorView
12 years ago
Amanda Anganes
07686d8e00
Removed superfluous try/catch around save call in ScopeAPI.
12 years ago
Justin Richer
4538d8fb14
made signing and verification service construction safe for public-only keys
12 years ago
Justin Richer
6cc50e7cd5
switched signing & validation service to use JWK natively for keys
12 years ago
Justin Richer
f54dddd8c0
fixed blacklisted field name, addresses #295
12 years ago
Justin Richer
5a04198eac
moved to JPSK based key store
12 years ago
Justin Richer
e2ad4d2e8f
cleaned up spurious nosuchalgorithm exceptions, addresses #285
12 years ago
Amanda Anganes
5b321b9c86
Updated whitelist api for ui error handling
12 years ago
Amanda Anganes
666573cd34
Updated blacklist and client api for ui error handling
12 years ago
Amanda Anganes
218fe9328c
Updated approved site API for error handling
12 years ago
Amanda Anganes
435fff3b1c
Updated scope API for error handling
12 years ago
Amanda Anganes
18e319379e
Got bootstrap modal alert working, but not sure if it is the right approach. It looks different than the confirmation window.
12 years ago
Amanda Anganes
49863e70ae
Got scope "value" error handling set
12 years ago
Amanda Anganes
d24ecd2e7c
Removed extra scope validation endpoint
12 years ago
Amanda Anganes
96e333afa6
Working on error handling
12 years ago
Amanda Anganes
fa0a6a7b4e
Finding my way around Backbone, Underscore, and Bootstrap
12 years ago
Amanda Anganes
5704271973
Fixed client error: added all client fields to model in client.js; lined them up with the fields in ClientDetailsEntity.java for easier comparison
12 years ago
Amanda Anganes
36b08dcd6e
Removed SWD code
12 years ago
Amanda Anganes
fcc95f8a0a
Moved nonce processing stuff into nonce service and out of ConnectAuthorizationRequestManager
12 years ago
Amanda Anganes
d38c5b4200
Pared down nonce reuse exception message to just say that the nonce has already been used
12 years ago
Amanda Anganes
b28b0615fa
removed vestigial ClientDetailsEntityService references
12 years ago
Justin Richer
08eaaa0a12
updated repository to use proper concrete class
12 years ago
Justin Richer
8fccbf3483
added Id field to DefaultUserInfo object, switched "userId" terminology to "subject"
12 years ago
Justin Richer
f44c704472
major refactor of client filter
...
Collapsed filter into single class
pulled server config and client config management into service classes
created service for issuer (will handle account chooser)
created auth request services (handle signed and unsigned requests)
12 years ago
Justin Richer
2b45dd1104
cleaned up stats display
12 years ago
Amanda Anganes
8992506a1d
Fixing up logging changes
12 years ago
Amanda Anganes
f9b0670ae9
Merged ClientAPI and ClientDynamicRegistrationEndpoitn by hand
12 years ago
Amanda Anganes
5cac7055a9
Standardized error handling and added logging for error conditions in endpoints
12 years ago
Amanda Anganes
dbc68e4074
Working on error handling
12 years ago
Amanda Anganes
1630814b9f
Marked classes where error handling needs to be added/changed
12 years ago
Justin Richer
0f6faf3609
removed old namespace config files
12 years ago
Justin Richer
6320fce9fd
url -> uri in approval page
12 years ago
Justin Richer
7c36f9fb38
made sidebar size-responsive, added sticky footer
12 years ago
Justin Richer
ad3a22e5d4
changed client defaults for JOSE bits
12 years ago
Justin Richer
3268726747
changed to dict-based model for saving
12 years ago
Justin Richer
8f4ecac8d5
forgot a field
12 years ago
Justin Richer
27a8bcf440
now with more documentation and actual deletion
12 years ago
Justin Richer
eaa9e1ded4
typo for grant types in parser
12 years ago
Justin Richer
a6a2d43e8f
added Read, Update, and Delete operations to dynreg endpoint
12 years ago
Justin Richer
d37bac1775
simplification and documentation of client api views
12 years ago
Justin Richer
4c3c2dce52
removed sessions from endpoints, properly mapped registration endpoint
12 years ago
Justin Richer
217916603f
cleaned out broken unit tests -- now we can start fresh
12 years ago
Justin Richer
c9bdba3f3a
API now bound to USER for read, ADMIN for write, addresses #267
12 years ago
Justin Richer
1daf5bd357
dispatch to different views based on user role
12 years ago
Justin Richer
70b2342864
fixed split client views, fixed typos in various places
12 years ago
Justin Richer
f07c31bbe2
JOSE selectors
12 years ago
Justin Richer
51a7ccc397
entity -> embed
12 years ago
Justin Richer
7b8623edbb
typo
12 years ago
Justin Richer
93851ab94d
request URIs and default ACR values
12 years ago
Justin Richer
6c136b5696
contacts
12 years ago
Justin Richer
79bf862924
added Not Yet Implemented tags
12 years ago
Justin Richer
9b6dfd4e1d
require auth time, reuse refresh token, and default max age
12 years ago
Justin Richer
ff53d71e6f
sector identifier, initiate login, and post logout URIs ; reuse refresh tokens
12 years ago
Justin Richer
23bd6a2ffb
response types
12 years ago
Justin Richer
82ecef144d
token endpoint auth method
12 years ago
Justin Richer
c9b769818e
changed script loading methods to help debugging, fixed subjectype data pull
12 years ago
Justin Richer
1fcb67e885
JWKS and subject type
12 years ago
Justin Richer
29b46bfd58
stupid javascript templates
12 years ago
Justin Richer
0d25d4cb17
null-preserving static parsers instead of constructors
12 years ago
Justin Richer
9244d6413c
application type
12 years ago
Justin Richer
e7282d53fe
added client URI bits
12 years ago
Justin Richer
6a88c13675
split client view into two classes
12 years ago
Justin Richer
4095f2179c
added custom client view for API
12 years ago
Justin Richer
a0c2e94922
added in all extra fields to JS processor
12 years ago
Justin Richer
ac44020305
grant types rename
12 years ago
Justin Richer
33c488d9ae
logo url -> uri
12 years ago
Justin Richer
7c3ddd0a86
redirect uri with new name
12 years ago
Justin Richer
9aebca2e97
fixed gson parser in client API
12 years ago
Justin Richer
23efdf9f51
fix viewbean name, nullsafe client creation time, fixed default scope handling
12 years ago
Justin Richer
26f03ec070
timestamp for creation date
12 years ago
Justin Richer
ea034f7d4a
database preload fixed to match new schema
12 years ago
Justin Richer
1f5f7c8aac
updates for java 7
12 years ago
Justin Richer
235a3bf2c4
added client information response view
12 years ago
Justin Richer
fc978ac994
made require_auth_time nullable again
12 years ago
Justin Richer
a2d6894f62
started serialization for client information view
12 years ago
Justin Richer
db24c203ec
added parser to client registration endpoint
12 years ago
Justin Richer
5c044b9eff
added extra client fields to DB model, moved services to use new client model object
12 years ago
Justin Richer
3f8d7d70e5
updated client model to match OAuth Dyn Reg and OIDC Reg
12 years ago
Justin Richer
5b9422ffdf
cleaned up old unit tests
12 years ago
Justin Richer
f8f925c08f
removed exploded war (no longer needed), addresses #260
12 years ago
Justin Richer
bd877dde82
added signature checking to request objects
12 years ago
Justin Richer
6c1e6b2d74
refactored signing and validation, added jwk-based cache, removed keyfetcher, refactored client side class structure
12 years ago
Justin Richer
385853fa1f
refactored signing and validation, added jwk-based cache, removed keyfetcher, refactored client side class structure
12 years ago
Justin Richer
7e64c4bffc
deleted duplicate login button, addresses #276
12 years ago
Justin Richer
13a3e97113
updated request object forwarding hack
12 years ago
Justin Richer
0712d8c340
updated spring version
12 years ago
Amanda Anganes
42ea2468c9
Split up about, contact, stats tags into two each and removed logic from the *Content tag files
12 years ago
Amanda Anganes
8677f6516d
Template-ized most of the home page UI
12 years ago
Amanda Anganes
987a05302d
Added configured logo url
12 years ago
Amanda Anganes
60b679e942
First steps towards adding display variables to config bean
12 years ago
Justin Richer
4d725b88dd
more updates to track nimbus-jose-jwt classes and use them properly
12 years ago
Justin Richer
9a98d241e8
updates to track Nimbus JOSE API changes to audience and date fields
12 years ago
Justin Richer
cc727cee3e
patched unit test to new format
12 years ago
Justin Richer
03e7337b9f
client registration endpoint needs general rewrite to fit new spec.
...
Most of the problematic references will change with the rewrite, so this is a slapdash patch to make things compile for now.
12 years ago
Justin Richer
25b9940a68
request object endpoint is a placeholder, cleaning out for now
12 years ago
Justin Richer
e5732da857
added system default signing algorithm, converted token provider and enhancer to use nimbus-jose
12 years ago
Justin Richer
c01e873019
request object processor moved to nimbus-jose
12 years ago
Justin Richer
0f99e0e06d
assertion token granter moved to nimbus-jose
12 years ago
Justin Richer
10ab55a7e2
moved jwk/x509 publishing over to nimbus-jose (mostly)
12 years ago
Justin Richer
fca30cd13f
added provisions to bootstrap signing and validation service from config files
12 years ago
Justin Richer
a078f7d202
patched userinfo view to use nimbus
12 years ago
Justin Richer
c7d1b47b38
converted bearer assertion framework to nimbus-jose
12 years ago
Justin Richer
910a6cf1a0
remvoed idtoken repository that was never used
12 years ago
Justin Richer
46a3e70377
removed idtoken class, removed all jwe/jwt tests
12 years ago
Justin Richer
46f0e6f3cb
restyled login page
12 years ago
Justin Richer
b840b31c74
added cleaner login/logout failure handling and processing
12 years ago
Amanda Anganes
1398575061
Added additional joda time dependency
12 years ago
Justin Richer
58ea01f0f8
added hints to login form to discourage mobile browsers from trying to do something clever like autocorrect
12 years ago
Justin Richer
991f37a1e6
refactored javascript and template files into components
12 years ago
Justin Richer
137e5e5ca1
added placeholder blocks in place of empty tables, addresses #244
12 years ago
Justin Richer
62b931ee0d
scope icons now show up everywhere
12 years ago
Justin Richer
d0fdf8140e
sorting on approval page
12 years ago
Justin Richer
328fa221bd
scope bootstrapping
12 years ago
Justin Richer
02846c0a8d
typo fix, DB constraints
12 years ago
Justin Richer
88f2ea3e7e
icon selector
12 years ago
Justin Richer
e622202e9e
display scopes based on request, pull scope information dynamically, addresses #208
12 years ago
Justin Richer
eb4773ce46
beginning dynamic scopes on auth page
12 years ago
Justin Richer
c2b9fd4db1
system scope ordering consistency
12 years ago
Justin Richer
173281f039
DB consistency fix
12 years ago
Justin Richer
801a45cc49
several bugfixes to scopes UI, works now
12 years ago
Justin Richer
e5171a196a
minor bugfixes
12 years ago
Justin Richer
d1968f624a
scope ui bugfixes
12 years ago
Justin Richer
fbfc977f3b
system scope ui updates
12 years ago
Justin Richer
9dc603a759
scope management UI
12 years ago
Justin Richer
1ceee853f9
scope management UI
12 years ago
Justin Richer
a3037a18a7
system scope service applied to client creation UI
12 years ago
Justin Richer
cab36a2b80
added appropriate filterered and transformative actions to scope service
12 years ago
Justin Richer
ab35186696
added scope service, repository, and API
12 years ago
Justin Richer
19e7b62a42
removed persistence.xml and moved to pure spring-based config, addresses #194
12 years ago
Justin Richer
a3619240e6
added site scope
12 years ago
Justin Richer
a2e548c261
fixed claims processor for request object from user info endpoint
12 years ago
Justin Richer
899150d636
tweak display on auth revoke page
12 years ago
Justin Richer
3c190e044a
inject parsed parameters to make SECOAUTH happy
12 years ago
Justin Richer
1144d511af
inject scopes
12 years ago
Justin Richer
f9d50db1f1
don't treat openid scope special here -- by default client gets access to *all* scopes it's registered for
12 years ago
Justin Richer
078342715b
moved request object to request manager
12 years ago
Amanda Anganes
3399eed45a
Added about, contact, and stats pages. Still largely placeholders, but the topbar works correctly now at least.
12 years ago
Justin Richer
0be254c99a
updated token introspection output to match spec and client filter
12 years ago
Justin Richer
e02e08563c
changed order or custom filters to make assertions work, added client credentials token granter to default
12 years ago
Justin Richer
c1d33bb55b
bugfix in assertion processor
12 years ago
Amanda Anganes
2e2c0e8e6c
Fixed bug in nonce processing
12 years ago
Amanda Anganes
3db74100a4
working on bug
12 years ago
Amanda Anganes
dd8b48e863
Reset ConnectAuthorizationRequestManager to version from master
12 years ago
Amanda Anganes
06f970e61b
Trying to fix nonce service
12 years ago
Amanda Anganes
86bf51f0a7
Added java reflection code for request object handling, needs to be tested
12 years ago
Amanda Anganes
677f0f2d4c
Stubbed out required functionality for request object filtering
12 years ago
Amanda Anganes
67e8714671
Working on request object userinfo parsing
12 years ago
Justin Richer
779001a8c8
updated copyright year
12 years ago
Justin Richer
7269700dc6
switched injector from repository to service
12 years ago
Justin Richer
f0ee36dad2
auth_type -> auth_method (addresses #258 )
12 years ago
Justin Richer
fd2253303e
changed pointer on tabs, addresses #252
12 years ago
Justin Richer
899e306683
fixed JS crash on "new client" operation
12 years ago
Justin Richer
8831bc64a2
offline -> offline_access (addresses #248 )
12 years ago
Justin Richer
27a26e0a35
(user_id/prn) -> sub
12 years ago
Justin Richer
1ab29882b4
fixed user prepoulation table
12 years ago
Justin Richer
0ab4ad4bbe
added "birthdate", addresses #253
12 years ago
Justin Richer
6ef4dc817e
genericized nimbus code, added caching
12 years ago
Justin Richer
2d21a72e7e
switched to nimbus to check JWT signature
12 years ago
Justin Richer
60bda31c54
updated custom filter
12 years ago
Justin Richer
c17bc05b0e
wiring configuration
12 years ago
Justin Richer
4262be1fd3
added jwt processing to client auth provider
12 years ago
Justin Richer
abd64eccd6
added framework for processing assertions for client auth
12 years ago
Amanda Anganes
ad5e77f7ff
Made nonce storage duration configurable in application-context.xml;
12 years ago
Amanda Anganes
59f1b1f05e
Testing, nonce handling seems to be working now
12 years ago
Amanda Anganes
a1a117cfde
Added default constructor to ConnectAuthorizationRequestManager
12 years ago
Amanda Anganes
af81e371fb
Updated application-context to use new authorization request manager
12 years ago
Amanda Anganes
77b932f5a7
Added implementation of AuthorizationRequestManager. Nonce checking will go in here
12 years ago
Amanda Anganes
1af6513499
Removed nonce checking from token service impl
12 years ago
Amanda Anganes
7e7b2527db
Added nonce to persistence.xml
12 years ago
Amanda Anganes
246ed962bb
Added stub of repository test
12 years ago
Amanda Anganes
e1dffb959c
Added NonceReuseException
12 years ago
Amanda Anganes
8f8a3754db
Added database tables for Nonce
12 years ago
Amanda Anganes
a4637ec395
Fleshed out nonce service classes, added code to token service impl to check for and store nonces. Added JodaTime library for working with dates.
12 years ago
Amanda Anganes
c7ae315e98
Added initial files for nonce service. Repository and service impls are stubs
12 years ago
Justin Richer
cbcfe55bb9
added introspection flag to client bootstrap
12 years ago
Justin Richer
4068952a81
fixed well size, added comment
12 years ago
Justin Richer
655092a12b
added introspection checkbox, added access tab
...
Signed-off-by: Justin Richer <jricher@mitre.org>
12 years ago
Justin Richer
9a1b2d7fac
made client edit page tabbable (that was seriously easy)
12 years ago
Justin Richer
48866c15f2
button display cleanup
12 years ago
Justin Richer
a85b1f5d74
split approved sites into two tables
12 years ago
Justin Richer
198a45369a
buttonsize tweak
12 years ago
Justin Richer
f12efc1b80
added dynreg caution block
12 years ago
Justin Richer
231e81a426
updated icons
12 years ago
Justin Richer
797d521691
cleaned up logged-in button
12 years ago
Justin Richer
7ebbe3acc4
removed mockups
12 years ago
Justin Richer
7459767646
fixed validation problem with new backbone
12 years ago
Justin Richer
37bca0d5fb
cleaned out backbone validation plugin
12 years ago
Justin Richer
9dd54d47bb
updated versions of backbone and underscore
12 years ago
Justin Richer
e0672757bf
update to bootstrap 2.2.2
12 years ago
Justin Richer
8ad28b41aa
fixing CSS and collapsing headerbar
12 years ago
Justin Richer
67a682d53a
added default router to backbone app
12 years ago
Justin Richer
87788f0710
let users visit home page without logging in
12 years ago
Justin Richer
f265347311
tweaked error messages
12 years ago
Justin Richer
18ddd8333f
added flag to allow introspection, relaxed same-client restrictions on introspection and chained tokens
12 years ago
Justin Richer
6eabc895b9
moved database file to a reasonable name
12 years ago
Justin Richer
1f53f41648
generic entity view now takes optional HttpStatus argument
12 years ago
Justin Richer
a3790f943e
cleaned up introspection endpoint to use exceptions
12 years ago
Justin Richer
e5206f2b92
implemented jwt assertions for id tokens
12 years ago
Justin Richer
51b67ebc03
added queries to get access token from id token
12 years ago
Justin Richer
1853bd7117
added assertion token granter
12 years ago
Justin Richer
0d6c96f410
moved JPA adapter to data-context, addresses #242
12 years ago
Justin Richer
2a74be5baf
bringing mysql tables up to date
12 years ago
Justin Richer
2c104a71e2
cleaned up mysql table
12 years ago
Justin Richer
cda6163d0d
null and blank handling
12 years ago
Justin Richer
06fad3a41c
moved view for client API
12 years ago
Justin Richer
6344a72519
missed a few applicationName references, fixed API JSON rendering
12 years ago
Justin Richer
dfd8e9c7c7
removed unused view
12 years ago
Justin Richer
dd04df6a22
fixed javascript bugs
12 years ago
Justin Richer
f12d3c7d30
fixed variable reference
12 years ago
Justin Richer
920777128d
switched to uncompressed jquery
12 years ago
Justin Richer
829c8ae5f4
tweaked functionality of grant types and scopes
12 years ago
Justin Richer
cc36851bdd
propagated field name change to UI
12 years ago
Justin Richer
179903b074
propagated client changes to service
12 years ago
Justin Richer
2f7891d02c
updated mysql table to new schema
12 years ago
Justin Richer
bcfa37040e
missed one
12 years ago
Justin Richer
33ceedb283
added scope and grant_type, switched to timeunit
12 years ago
Justin Richer
e2bc15c2b2
beginning of client registration refactor to track IETF dynreg spec
12 years ago
Justin Richer
94c37f5815
added redelegate scope to client list, fixed inconsistency with refresh token issuance (addresses #239 )
12 years ago
Justin Richer
510ddb48b7
override the correct part of the token granter class
12 years ago
Justin Richer
bdcc6af096
temporary sanity check for client ID's
12 years ago
Justin Richer
cab0839430
added workarounds for quirks in SECOAUTH
12 years ago
Justin Richer
edc96d646c
added chained token grant
12 years ago
Justin Richer
54708fb0ac
fixed id token scopes (shouldn't inherit from parent token)
12 years ago
Justin Richer
2a206654b6
added client credential protection to revocation endpoint
12 years ago
Justin Richer
e38b2b0ba5
shortened revocation endpoint url
12 years ago
Justin Richer
fbc3c46128
Introspection now draft spec compliant, requires client auth
...
Currently this is the client that originally sent the token, we want to have a way to bind other "clients" to this token as well, like resource services. Also want to let open calls, sometimes.
12 years ago
Justin Richer
544e3d7b43
added copy constructors because Dave likes to use unmodifiable sets for no apparent reason
12 years ago
Justin Richer
64ef752f08
added refresh token granter for testing
12 years ago
Justin Richer
7561ac9e8c
client dynamic registration now protected by access token, addresses #199
12 years ago
Justin Richer
7342da6a51
completed making id tokens into access tokens
12 years ago
Justin Richer
e4f9fa2bbf
labeled introspection endpoint
12 years ago
Justin Richer
17374a57e0
added ISO date format to generic entity view, addresses #232
12 years ago
Justin Richer
3378cd5c4c
cleaned table
12 years ago
Justin Richer
b8f701d9d8
switched id tokens to entities, they're now access tokens also
...
still needs some work to get the auth object right, for now we're just copying from the access token
12 years ago
Justin Richer
2ef8d16e9c
typo, formatting
12 years ago
Justin Richer
ba7ddf17f9
added bootstrapping for clients, cleaned up sql files
12 years ago
Justin Richer
cf7ceb74f3
betterer logout button
12 years ago
Justin Richer
2f1a6864b8
made a better logout button
12 years ago
Justin Richer
838e029db1
added logout button
12 years ago
Justin Richer
d7d9e84e70
fixed user_id mapping
12 years ago
Justin Richer
f091343d84
moved back to in-memory database by default
12 years ago
Justin Richer
49e216412e
Added bootstrapped users set.
12 years ago
Justin Richer
dcc56ec9dd
temporary tables to prevent casts from leaking
12 years ago
Justin Richer
8b37011244
added casts to varchar to avoid extraneous spaces
12 years ago
Justin Richer
e305d3b16b
Making stable in-memory and in-file database with HSQL
12 years ago
Justin Richer
061c0f0814
minor cleanup
12 years ago
Stephen Moore
250432ce7f
Added information into the user_info table
12 years ago
Stephen Moore
1bcaa68cb4
Added user_info stuff... and changed serverconfig for issuer...
12 years ago
Stephen Moore
47b34d2b1b
Added blacklist table to HSQLDB sql script
12 years ago
Stephen Moore
4fdb0816eb
Moved DB to use in memory HSQLDB. Made authentication-provider use a jdbc-user-service in that in-memory hsqldb.
12 years ago
Justin Richer
fce47c239a
added slashes to patterns what needed them, removed vestigial intercept from user-context
12 years ago
Justin Richer
122a2de074
First attempt at making API not redirect to /login, failed
12 years ago
Justin Richer
d07f67bd76
let user select when grants time out
12 years ago
Justin Richer
84401531ae
tie refresh token generation to "offline" scope tag
12 years ago
Justin Richer
50040a8ef4
fixed checkbox labels
12 years ago
Justin Richer
667c3abc8a
dynamic scope display/selection on approval page
12 years ago
Justin Richer
1281d75aa9
stopped re-parsing scopes
12 years ago
Justin Richer
9c3a40779b
updated to SECOAUTH's horrible new object-breaking authorization request paradigm.
...
Bonus: it works!
12 years ago
Justin Richer
3e327b9df6
reverted to original controller behavior
12 years ago
Justin Richer
cf4581a5eb
updated configuration to reflect secoauth changes
12 years ago
Justin Richer
45ca4e565e
updated to SECOAUTH-1.0.1-BUILD-SNAPSHOT
12 years ago
Amanda Anganes
cf1ddf0457
Determined that init binder was not needed to fix default for Boolean require_auth_time; instead use defaultValue=\"true\" in the RequestParam declaration. Also fixed bug in ClientDetails service so that it will not blow up if the client has no redirect uris registered
12 years ago
Amanda Anganes
2084639828
Working on init binder for ClientDynamicRegistrationEndpoint
12 years ago
Amanda Anganes
8b0c520534
Issue 213, writing init binder to convert null Boolean values to false before calling setters
12 years ago
Justin Richer
a2a29e7b76
trying out new confirmation controller
12 years ago
Justin Richer
d9b6918bc2
softened error from scope checker -- returns false now, allows things to pass through
12 years ago
Justin Richer
9c08944a02
Changed arity on approved sites (now can have many per user/site combo)
12 years ago
Justin Richer
58b97f7371
stupid javascript
12 years ago
Justin Richer
fda86e23e9
moved everything to use the consumes/produces framework of Spring 3.1
12 years ago
Justin Richer
51920ee381
switched to using "uneditable-input" classes instead of disabled input fields
12 years ago
Justin Richer
e303319701
got rid of postrender
12 years ago
Justin Richer
5b0c17c5de
added in checks to blacklist service upon client registration and update
12 years ago
Justin Richer
7a6c96a759
fixed links
12 years ago
Justin Richer
e9d1ed270d
service layer cleanups
12 years ago
Justin Richer
4e18fb4525
blacklist management UI
12 years ago
Justin Richer
d576df4b31
fixed render length limits on list widget
12 years ago
Justin Richer
757e21a722
added blacklist API
12 years ago
Justin Richer
1f4b97bc7e
fixed icon and variable reference
12 years ago
Justin Richer
e86f19bd7c
added dynamic icons to whitelist table
12 years ago
Justin Richer
2beff07d4b
added icons and tooltips to approved site table
12 years ago
Justin Richer
20b73ea0c4
tooltip works!
12 years ago
Justin Richer
8ecdb8a4ab
added icon to template, popover doesn't work yet
12 years ago
Justin Richer
9064b49a54
added refresh buttons to all tables, fixed loading behavior to a proper cascading function call
12 years ago
Justin Richer
a88ae8258a
Updated plus and minus buttons in list views, addresses #202
12 years ago
Justin Richer
150c4032fd
WTF MYSQL!!
...
Added "NULL" option to all appropriate TIMESTAMP columns so that they behave how we expect them to.
12 years ago
Justin Richer
f9aafb5edd
approved sites UI
12 years ago
Justin Richer
f4605ef2fc
cleaned out startAfter function
12 years ago
Justin Richer
845c11ad3a
methods for creating, editing, and deleting whitelist sites all function
12 years ago
Justin Richer
321172c40c
fixed load/fetch order, fixed edit form display, robustified whitelist views against missing client IDs
12 years ago
Justin Richer
f39c254353
updated variables for consistency, tracking down a data-loading bug
12 years ago
Justin Richer
51cfe1746d
whitelist editing
12 years ago
Justin Richer
bb589fc29a
fixed logic error in script inclusion
12 years ago
Justin Richer
cccbad2ca1
added whitelist button to table view
12 years ago
Justin Richer
7a9d7e6363
Fixed sidebar menu
12 years ago
Justin Richer
7b1a2529dc
added whitelist model and template
12 years ago
Justin Richer
ee0fe4a9d3
applied placeholder CSS hack to header CSS
12 years ago
Justin Richer
86ebdff82b
Revert "Placeholder UI updates"
...
This reverts commit fd89312b0c
.
12 years ago
Justin Richer
030e2ce2df
fixed link scanner
12 years ago
Justin Richer
706858c41f
added comments, fixed paths, uncommented logo hide function
12 years ago
Justin Richer
f2e1317365
added purl.js library for URL parsing
12 years ago
Justin Richer
33f11cb98f
cleanly applied pushstate changes, new URL structure
12 years ago
Justin Richer
1d8254bf2f
changed target of approve form
12 years ago
Michael Jett
be506ae952
Moved fonts local, fixed loading indicator
12 years ago
Michael Jett
84cedbb45e
Support the "Enter" key on list widget
12 years ago
Michael Jett
8fc6b2b680
Removing the rest of Justin's load hack
12 years ago
Michael Jett
fd89312b0c
Placeholder UI updates
12 years ago
Michael Jett
48941f1713
Dynamic JS loading and UI updates
12 years ago
Michael Jett
2311cdf1f2
Revert "Dynamic Client Loading Initial Commit"
...
This reverts commit a4e5335eda02cdb6b32a966d194035429ca52915.
12 years ago
Michael Jett
d7455dba14
Dynamic Client Loading Initial Commit
12 years ago
Amanda Anganes
29862f15bd
Removed a bunch of commented-out configuration
12 years ago
Amanda Anganes
51073a7f8d
Refactor part 3
12 years ago
Amanda Anganes
ef80676dc1
Cleaned up web package a bit - lots of unused imports and variables
12 years ago
Amanda Anganes
dd2abd94d1
Refactoring part 2
12 years ago
Amanda Anganes
c40efda6b5
Refactor part 1
12 years ago
Justin Richer
0b6aebfefe
Revert "removed postrender function, use render function instead"
...
This reverts commit 2b1e78d195
.
12 years ago
Justin Richer
ebf77bea68
Updated timeout functions
12 years ago
Justin Richer
6fdd088125
Updated client secret panel display
12 years ago
Justin Richer
be17133a99
Changed "submit" label to "save"
12 years ago
Justin Richer
2b1e78d195
removed postrender function, use render function instead
12 years ago
Justin Richer
ece1b56095
added missing brackets
12 years ago
Justin Richer
fe3e890bb3
changed to table head for input control
12 years ago
Justin Richer
d8221a2a35
added missing semicolon
12 years ago
Justin Richer
ed75b38ecc
changed list view table styling
12 years ago
Justin Richer
a4a40ffae5
unit test for x509 endpoint
12 years ago
Michael Jett
d9771f2322
Timout Bugfixes
12 years ago
Michael Jett
26c3cf5989
Timout UI refactor
12 years ago
Michael Jett
19df5ae032
Timeout form updates. Logo URL updates
12 years ago
Michael Jett
cb6767dfb4
Timout form updates
12 years ago
Justin Richer
a9d1799eda
added getter/setter to UIE schema-to-view map
12 years ago
Justin Richer
920b2a59ba
Fixed error logging
12 years ago
Justin Richer
2d24435365
Created custom resolver, handler mapper
...
moved endpoint back to server
12 years ago
Justin Richer
7eb0a6f3d2
Moved JWK to commons
12 years ago
Amanda Anganes
f3c225d8f2
Updated SECOAUTH reference, made required alterations to our configuration
12 years ago
Stephen Moore
ea16f4e2b6
Fixed merge weirdness
12 years ago
Stephen Moore
b58ed8b616
Added logoURL stuff
12 years ago
Amanda Anganes
61b828e182
Fixed bug - removed service layer @Transactional annotations, which negated need for flush at repository level; moved @Transactional annotations.
12 years ago
Michael Jett
c8f9a3de76
Merge remote-tracking branch 'origin/UI-form-updates'
12 years ago
Justin Richer
ee7a5fd2e1
added registration URL to discovery endpoint
12 years ago
Michael Jett
332fe282be
List Widget UI values cannot be null
12 years ago
Michael Jett
fe837c4fa5
comment edit
12 years ago
Michael Jett
4fcbbe639f
visual error indicators for redirect uri and scope
12 years ago
Michael Jett
15359a236a
Scope UI Auto-complete
12 years ago
Justin Richer
11b35267b4
Refactored stats processor into a service, made home page into a smart page.
12 years ago
Michael Jett
85e13bd11d
Initial Scope UI updates
12 years ago
Justin Richer
bc0ee4cbab
force id consistency
12 years ago
Justin Richer
8876217baf
Added cleanups to client service
12 years ago
Justin Richer
d041ddb0e1
Added approvedSite API and support structure
12 years ago
Justin Richer
2bf5cfc041
service bug fix
12 years ago
Justin Richer
b462d6dd96
added empty http code view
12 years ago
Justin Richer
8ae1b376fe
updated whitelist service and repository
12 years ago
Justin Richer
6a180acf3c
added preliminary whitelist api
12 years ago
Michael Jett
59e2f0e127
Backbone List View Widget Initial Commit
12 years ago
Justin Richer
4af3dd89be
cleaned up client api
12 years ago
Justin Richer
72c125ba64
refactored binder into two parts
12 years ago
Justin Richer
be54696603
Generic GSON entity printer
12 years ago
Michael Jett
0aa6da67de
Bootstrap JS Upgrade
12 years ago
Michael Jett
306e07bc36
UI Dynamic List updates
12 years ago
Michael Jett
5377a2bac4
Redirect URI UI updates
12 years ago
Justin Richer
0b1bb4f8aa
call the right service api
12 years ago
Justin Richer
407c14d0dc
added missing bean annotation
12 years ago
Justin Richer
3e423e9e04
explicitly exposed registration url
12 years ago
Justin Richer
a674589db0
added client editing capability
12 years ago
Justin Richer
a45c8bf96d
upped default client secret strength
12 years ago
Justin Richer
e39dcb63dd
added views, fixed registration for SECOAUTH required parameter
12 years ago
Michael Jett
d8037c0513
Redirect URL UI initial commit
12 years ago
Justin Richer
83873f8ae2
added defaults for SECOAUTH
12 years ago
Justin Richer
9f84126cb8
more dynamic registration
12 years ago
Justin Richer
aeb6644d38
exploded version of attribute binding/processing
12 years ago
Justin Richer
e4470c9361
mapped the invalid scope exception, addresses #102
...
Still can't access userinfo if you're not using OAuth2
12 years ago
Justin Richer
259e84c871
put null check into interceptor, addresses #183
12 years ago
Michael Jett
8361f74932
removed innocuous change
12 years ago
Michael Jett
42287edc9b
junk comentt showwhich brnach we'ron
12 years ago
Michael Jett
a61d94e07e
Cancel buttons on client forms
12 years ago
Michael Jett
149080f776
Breadcrumbs are now fully dynamic.
12 years ago
Justin Richer
37d6d63772
inject userinfo into context for use in JSPs
...
addresses #99 (for real this time)
12 years ago
Justin Richer
b5ce8d5e8b
added getByUsername to userinfo repositories and supporting classes, updated calling classes to use this
...
fixed namedquery
12 years ago
Michael Jett
6cb0269629
Merge remote branch 'origin/master'
12 years ago
Michael Jett
dc1f1965af
Refactoring breadcrumbs. The breadcrumb bar will disappear momentarily.
12 years ago
Amanda Anganes
ba5572b28a
Tidied up a bit, added javadoc comments to new classes
12 years ago
Amanda Anganes
c23b176567
Database backed authorization-code-service now works.
12 years ago
Amanda Anganes
4b76cc514b
Added a database-backed authorization-code system. Untested; needs to be injected into configuration in the place of the in-memory one and tested
12 years ago
Amanda Anganes
dc61068702
Split approved site and whitelisted site scope tables.
12 years ago
Justin Richer
e5b62e8935
fixed patterns and expressions on http blocks
12 years ago
Justin Richer
9eb328831f
changed to proper prefix
12 years ago
Stephen Moore
af01e26e10
Split up permitAll on enpoints
12 years ago
Stephen Moore
d2f7e8edf9
Moved SPEL to app-context, and added enpoint permitAlls
12 years ago
Justin Richer
bdfdbbadbc
stats summary, addresses #62
12 years ago
Justin Richer
6cb7e74046
updated default handling to user proper backbone model handling
12 years ago
Justin Richer
74b4fab58c
Client secret processing
12 years ago
Justin Richer
05fa7b148c
added checks for generated client secret
12 years ago
Justin Richer
9e60da2675
added controls for client secret processing
12 years ago
Justin Richer
a02f37cec3
added generators to client service API
12 years ago
Justin Richer
8520fcbf72
removed deprecated granted authority reference
12 years ago
Justin Richer
a65504c0cb
added new exception for userinfo, addresses #133
12 years ago
Justin Richer
209fc2d249
refactored request object endpoint to avoid urlspace conflict with SECOAUTH
12 years ago
Mike Derryberry
d1218efb2a
cleaned up imports
12 years ago
Mike Derryberry
55e7a4d707
moved request object auth endpoint in project setup
12 years ago
Mike Derryberry
ec286b9644
removed auth bean from application-context. Added extra parameter checks in request object auth endpoint
12 years ago
Mike Derryberry
04d8faa90a
updated autowired annotation
12 years ago
Mike Derryberry
20a7ebc576
autowired all member variables in request object auth endpoint
12 years ago
Mike Derryberry
694074ee58
moved endpoint, added param processing
12 years ago
Mike Derryberry
36b9c805d9
added reference to abstract endpoint class to get token granter
12 years ago
Mike Derryberry
2bdbb283b7
removed dependency on abstract endpoint class. added methods needed to authRequestObjectEndpoint (afterPropertiesSet())
12 years ago
Mike Derryberry
51ec529861
readded implementation of initializingBean
12 years ago
Mike Derryberry
638ebf2010
cleaned up AuthRequestObjectEndpoint class
12 years ago
Mike Derryberry
d93f5f18e5
added state value to jwt that gets passed as request object. certain methods from SECOAUTH use this
12 years ago
Mike Derryberry
3486ea28f1
updated mimicked methods to not use jwt, but rather a jwt in an auth request
12 years ago
Mike Derryberry
1a20dcbc6e
added methods that mimic behavior of private SECOATH methods
12 years ago
Mike Derryberry
d5caa0b543
changed server endpoint to act like an endpoint. WIP to accept request objects, validate, and redirect
12 years ago