a951a22bf8
explicitly use language and country codes for locale resolution
2016-07-14 18:29:37 -04:00
b8cc0a82b3
fix issue #1061 : auto-detect locale country code
2016-07-14 18:29:37 -04:00
7177854416
inverted boolean for #1033
2016-07-08 13:00:26 -04:00
39bae3a160
make the client auth URL matcher use an existing matcher instead of custom code
2016-07-08 11:42:35 -04:00
01892b6f47
use a request matcher on authorization request filter, closes #1033
2016-07-08 11:00:01 -04:00
ecb4a9ed53
Check that the underlying cause of the PersistenceException is caused by a duplicate entry.
2016-07-07 16:45:36 -04:00
6fb26856a7
Make apiAddClient in the client api return a HttpStatus.Conflict if you try to create a client with a used client id.
...
This fixes a bug where if you try to create a client with a client id that is already in use, you get an empty error message. Instead, now you get a message that tells you that the client couldn't be created because the client id is already in use.
2016-07-07 16:45:36 -04:00
8e71107f9b
Fix NPE when checking claim extension, Simplify always true expressions
2016-07-07 16:35:50 -04:00
8f81278332
We really should specify an encoding here and not depend on the
...
servers default encoding, shouldn't we? It becomes ISO-8859-1
otherwise in Tomcat as per the Servlet specification.
2016-07-07 16:33:24 -04:00
89316cbab1
fixed default token lifetimes for heart mode
2016-03-18 22:02:28 -04:00
9691f02772
added audience parameter to parser, fixed token generator to match HEART spec
2016-03-11 17:12:36 -05:00
49a8848648
count really weird URIs as "custom scheme"
2016-03-10 12:50:47 -05:00
d75bba218d
forbid password grant type in HEART mode
2016-03-10 12:30:48 -05:00
699e9bff39
testing for multiple classes of redirect URIs
2016-02-24 16:34:58 -05:00
38710bd3d2
unit tests for HEART mode
2016-02-24 15:33:52 -05:00
74ea42851b
added check for HEART mode consistency
2016-02-24 13:09:58 -05:00
028265faa6
pulled scope values to externalized strings
2016-02-24 13:09:39 -05:00
5bccb602d8
always perform strict redirect URI matches in HEART mode
2016-02-24 13:09:00 -05:00
51e3513307
disallow client secret JWT authentication in HEART mode
2016-02-24 13:07:14 -05:00
183a599126
fixed OIDC discovery relation URL
2016-01-29 17:17:35 -05:00
61433cc23a
deepen webfinger, endpoint is looser
...
closes #1008
2016-01-29 15:38:17 -05:00
3d14b0d128
rename zone_info claim to zoneinfo
2016-01-21 15:52:59 -05:00
7badfe1d17
Happy new year 2016!
2016-01-21 15:50:37 -05:00
d1033b693f
added privacy-preserving client logo cache
2015-12-21 15:51:39 -05:00
aa878cc3cf
pulled checks for expired tokens into utility functions
2015-12-18 11:22:50 -05:00
698feb49cd
check access token expiration on read. closes #983
2015-12-16 22:46:42 -05:00
7f464c496b
changed copyright to new consortium name
2015-12-16 14:51:12 -05:00
ea77bf2a19
quieted approved site cleanup
2015-12-02 16:51:55 -05:00
1ed3e2c47a
quieted logging on database cleanup tasks when no expired elements are found
2015-11-25 15:55:16 -05:00
fcfc620d51
updated client API with more useful errors, removed unused service reference
2015-11-25 15:42:09 -05:00
2496dc114c
allow language system to be loaded from multiple files. closes #817 closes #876
2015-11-24 20:33:55 -05:00
e255fc1a10
change default behavior of message source, closes #964
2015-11-24 20:33:54 -05:00
7b34a666d9
Make the dual client support configurable
2015-11-24 12:10:27 -05:00
a80953a2d4
Allow both flows authorization code and client credentials. This scenario might be found when the same client supports user authentication as well as service to service authentication. Such a client is trusted (whitelisted).
2015-11-24 12:10:27 -05:00
dce80d488b
Clean up ScopeClaimTranslationService
...
`getFieldNameForClaim` method is never used.
2015-11-23 21:35:16 -05:00
96f4d5e8a8
fixed use of wrong constant, closes #940
2015-10-13 18:08:56 -04:00
c9358f348a
added transactional annotations, finally closes #926 addresses #862
2015-10-13 16:59:11 -04:00
e1e892377f
added cleaner for duplicate refresh tokens
2015-10-13 15:38:07 -04:00
542afca459
cleans duplicate access tokens from DB before other cleanup happens
2015-10-13 15:33:23 -04:00
ebb4f2c3d4
Upgraded to nimbus 4.2, closes #934
2015-10-13 04:40:01 -04:00
c67611e975
added qualifier name to persistence unit and transaction manager, closes #883
2015-10-12 21:15:30 -04:00
d280ca40a4
login hints now handled in a slightly smarter (and more pluggable) manner, closes #851
2015-10-12 20:04:02 -04:00
b5c298e0ca
Remove legacy CSRF protection for approve page
...
Instead, we rely on the Spring Security CSRF protection, like we already do for the login page. Additionally, we remove the authentication check in`isApproved`, because this is already done by Spring Security (and if not, we have bigger problems to worry about).
2015-10-09 17:09:46 +02:00
4063f7f94f
user info endpoint response uses correct client algorithms, addresses #921
2015-10-02 18:48:11 -04:00
acb3d03052
added 'kid' to all signed tokens, closes #899
2015-10-01 18:54:38 -04:00
d3f8ff2855
added JTI to ID tokens, closes #900
2015-10-01 17:24:47 -04:00
9822748209
grabbed additional places that mention updated_time/updated_at
2015-10-01 15:53:21 -04:00
31ea96ce27
Update DefaultOIDCTokenService.java
...
fixed typo
2015-10-01 15:34:01 -04:00
489450b1c2
automated code format cleanup
2015-08-05 12:04:14 -04:00
0740443768
added claims redirect uri set to client model for UMA usage
2015-07-30 13:56:14 -04:00
Justin Richer