Justin Richer
|
ea707903f0
|
added basic support for encrypted request objects, addresses #475
Conflicts:
openid-connect-server/src/main/java/org/mitre/openid/connect/ConnectOAuth2RequestFactory.java
|
2013-09-23 14:36:35 -04:00 |
Amanda Anganes
|
e9c813e3da
|
Fixed typo
|
2013-09-23 14:30:51 -04:00 |
Amanda Anganes
|
a0b7b2dbff
|
Remove @PostConstruct from JWKSetKeyStore
|
2013-09-20 11:59:22 -04:00 |
Justin Richer
|
bfa61fa2d7
|
explcitly set alg and enc instead of trying to guess
|
2013-09-20 11:59:08 -04:00 |
Justin Richer
|
34a81c25dc
|
if there's only one key, return it as the default
|
2013-09-20 11:59:05 -04:00 |
Justin Richer
|
a769c972eb
|
spelling, property access, and cleanup
|
2013-09-20 11:59:01 -04:00 |
Justin Richer
|
2313dda8b7
|
added encrypted request object service to client, addresses #475
|
2013-09-20 11:58:56 -04:00 |
Justin Richer
|
6b96fbb4e9
|
refactored some json utils to their own static class
|
2013-09-20 11:58:48 -04:00 |
Justin Richer
|
cc179003c7
|
added missing parts to discovery
|
2013-09-20 11:58:42 -04:00 |
Justin Richer
|
1e120d90b5
|
added encryption method list to encryption/decryption service
|
2013-09-20 11:58:40 -04:00 |
William Kim
|
20b5adfd23
|
updated comments for jwe service.
|
2013-09-20 11:57:38 -04:00 |
William Kim
|
3b12765b9b
|
Updated nimbusds library version to 2.17.2 and made relevant changes in enc./dec. service and test
|
2013-09-20 11:57:32 -04:00 |
William Kim
|
1bdcf26443
|
changed encrypt/decrypt parameter to use JWEObject instead of EncryptedJWT
|
2013-09-20 11:57:30 -04:00 |
William Kim
|
4192350401
|
RSA encryption service tested.
|
2013-09-20 11:57:27 -04:00 |
William Kim
|
e5d64d8f2e
|
implemented symmetric key encryption.
|
2013-09-20 11:57:24 -04:00 |
William Kim
|
8cb72dc9de
|
encrypt/decrypt implemented. initial commit for unit testing of jwe service.
|
2013-09-20 11:57:22 -04:00 |
William Kim
|
59f13a66b6
|
jwe service accessor methods and private initializing method done.
|
2013-09-20 11:57:20 -04:00 |
William Kim
|
fc146433f9
|
jwe service init commit.
|
2013-09-20 11:57:18 -04:00 |
Justin Richer
|
b9f545d75b
|
added encryption/decryption to cached JWK-URI service
Conflicts:
openid-connect-server/src/main/java/org/mitre/openid/connect/ConnectOAuth2RequestFactory.java
|
2013-09-20 11:29:46 -04:00 |
Justin Richer
|
672efa722c
|
added additional discoverable fields to ServerConfig object
|
2013-09-20 11:27:46 -04:00 |
Amanda Anganes
|
07ac661910
|
Removed @PostConstruct; placed buildSignersAndVerifiers() calls inside both constructors.
|
2013-09-20 11:27:32 -04:00 |
Amanda Anganes
|
452b89414a
|
Added null check;
|
2013-09-20 11:27:30 -04:00 |
Amanda Anganes
|
678b6aa580
|
Testing removing extra method calls
|
2013-09-20 11:27:28 -04:00 |
Justin Richer
|
122b0c4e8c
|
wrap errors in saving the client in an HTTP 400 (instead of HTTP 500) error
Conflicts:
openid-connect-server/src/main/java/org/mitre/openid/connect/web/ClientDynamicRegistrationEndpoint.java
|
2013-09-20 11:27:07 -04:00 |
Justin Richer
|
e11c0386d1
|
added transient passthroughs to JOSE algorithms for client
Conflicts:
openid-connect-server/src/main/java/org/mitre/openid/connect/ConnectOAuth2RequestFactory.java
|
2013-09-20 11:22:18 -04:00 |
Justin Richer
|
edeef5de23
|
added equality checks to data model objects
|
2013-09-20 11:19:17 -04:00 |
Justin Richer
|
aa2ec7ce0d
|
interceptor shouldn't ever overwrite stuff from the base model
|
2013-09-20 11:18:26 -04:00 |
Justin Richer
|
d83af13ae3
|
services shouldn't be transactional
|
2013-09-20 11:18:16 -04:00 |
Justin Richer
|
79c054229f
|
removed old form value from fetcher
|
2013-09-20 11:18:10 -04:00 |
Justin Richer
|
deb6c9210e
|
fixed misleading error message
|
2013-09-20 11:17:31 -04:00 |
Justin Richer
|
b4783e753f
|
clean up unused getter/setter
|
2013-09-20 11:17:13 -04:00 |
Justin Richer
|
1bf560842e
|
cleaned up CORS filter implementation
|
2013-09-19 16:42:31 -04:00 |
Justin Richer
|
9020261d2c
|
added CORS filter
|
2013-09-19 16:42:31 -04:00 |
Justin Richer
|
858be9866a
|
[maven-release-plugin] prepare for next development iteration
|
2013-09-06 15:37:31 -04:00 |
Justin Richer
|
72caaa6d2d
|
[maven-release-plugin] prepare release mitreid-connect-1.0.11
|
2013-09-06 15:37:28 -04:00 |
Justin Richer
|
46e7ed203b
|
if the client doesn't ask for any system scopes, but asks for some non-system scopes, they'll now get the defaults instead of none
addresses #498
|
2013-09-06 15:28:35 -04:00 |
Justin Richer
|
3524350086
|
fixed token expiration parsing
|
2013-09-06 14:44:01 -04:00 |
Justin Richer
|
f56a993ca9
|
fixed scope parsing on token implementation, too
|
2013-09-06 14:28:32 -04:00 |
Justin Richer
|
c98e34fc8f
|
introspected scopes are now space-separated, not arrays
|
2013-09-06 13:53:01 -04:00 |
Justin Richer
|
889ab830f8
|
removed vestigial client config service
|
2013-09-04 14:57:41 -04:00 |
Justin Richer
|
7acb163031
|
refactored token introspection packages to support different client credentials at different services
Conflicts:
openid-connect-client/src/main/java/org/mitre/oauth2/introspectingfilter/IntrospectingTokenService.java
openid-connect-client/src/main/java/org/mitre/oauth2/introspectingfilter/JWTParsingIntrospectionUrlProvider.java
|
2013-09-04 14:56:58 -04:00 |
Justin Richer
|
9f444f9eca
|
[maven-release-plugin] prepare for next development iteration
|
2013-09-03 12:43:52 -04:00 |
Justin Richer
|
6e866cd6a6
|
[maven-release-plugin] prepare release mitreid-connect-1.0.10
|
2013-09-03 12:43:49 -04:00 |
Justin Richer
|
926e1ef39c
|
made introspection and revocation work with basic auth (and possible OAuth tokens, but that needs more work)
|
2013-09-03 12:32:49 -04:00 |
Justin Richer
|
5c38a3393a
|
stopgap to prevent some leaks due to #492
|
2013-08-30 16:38:36 -04:00 |
Justin Richer
|
bea3a6610c
|
tell spring to not stuff model into the redirects, partially addresses #492
|
2013-08-30 16:38:27 -04:00 |
Justin Richer
|
35e14f0c81
|
removed outdated client credentials filter, addresses #491
|
2013-08-30 11:49:06 -04:00 |
William Kim
|
d30b53ddbf
|
corrected output for badly-formatted timeout date.
|
2013-08-29 17:41:28 -04:00 |
William Kim
|
f871edefed
|
added date format validity check for moment.js usage.
|
2013-08-29 17:41:28 -04:00 |
William Kim
|
3c2662889c
|
null-checking in date display for approved sites.
|
2013-08-29 17:41:27 -04:00 |