ec28327605
A new service for AuthenticationHolder management
...
- The logic to create and query AuthenticationHolder entities have been
moved to a service, and other services that depended on
AuthenticationHolderRepository now depend on
AuthenticationHolderEntityService
- An additionalInfo map collection has been added to
SavedUserAuthentication. This map can be used to store other
information related to user authentication (like authn type,
attributes etc.)
2016-09-03 07:26:46 +02:00
8c5f34a979
Merge remote-tracking branch 'upstream/master' into devel
2016-07-28 10:23:24 +02:00
af7c1f7d45
added PKCE support to discovery endpoint
2016-07-27 20:31:27 -04:00
ba0d0aab0b
use parameter constants for extensions maps in token service
2016-07-24 17:46:04 -04:00
ac0cafe7b3
parse and process PKCE requests
2016-07-24 17:45:43 -04:00
57208ac35d
added software statements to client API
2016-07-24 16:12:56 -04:00
d89257380f
make client assertion auth work again
2016-07-24 15:28:51 -04:00
f9e4d75a4a
use JWT bearer assertion token for assertion processing
2016-07-24 14:55:45 -04:00
bd9932d56f
added assertion processor to token endpoint
2016-07-22 15:31:00 -04:00
a5a12b2f1f
added assertion validation engine
2016-07-22 13:47:20 -04:00
fa63993896
added software statement to client model, added processor to dynamic registration parser
2016-07-21 16:55:46 -04:00
a951a22bf8
explicitly use language and country codes for locale resolution
2016-07-14 18:29:37 -04:00
b8cc0a82b3
fix issue #1061 : auto-detect locale country code
2016-07-14 18:29:37 -04:00
7177854416
inverted boolean for #1033
2016-07-08 13:00:26 -04:00
39bae3a160
make the client auth URL matcher use an existing matcher instead of custom code
2016-07-08 11:42:35 -04:00
01892b6f47
use a request matcher on authorization request filter, closes #1033
2016-07-08 11:00:01 -04:00
ca6e867df6
manage dependency versions in parent
2016-07-07 16:46:38 -04:00
ecb4a9ed53
Check that the underlying cause of the PersistenceException is caused by a duplicate entry.
2016-07-07 16:45:36 -04:00
6fb26856a7
Make apiAddClient in the client api return a HttpStatus.Conflict if you try to create a client with a used client id.
...
This fixes a bug where if you try to create a client with a client id that is already in use, you get an empty error message. Instead, now you get a message that tells you that the client couldn't be created because the client id is already in use.
2016-07-07 16:45:36 -04:00
8e71107f9b
Fix NPE when checking claim extension, Simplify always true expressions
2016-07-07 16:35:50 -04:00
8f81278332
We really should specify an encoding here and not depend on the
...
servers default encoding, shouldn't we? It becomes ISO-8859-1
otherwise in Tomcat as per the Servlet specification.
2016-07-07 16:33:24 -04:00
c31f42c3f3
updated versions to 1.3
2016-07-05 14:39:22 -04:00
641699cd99
Bumped to custom version 1.2.7.cnaf-SNAPSHOT.
...
Fix getAdditionalInformation() method.
2016-05-30 14:13:23 +02:00
58724aa6dc
[maven-release-plugin] prepare for next development iteration
2016-04-06 16:33:45 -04:00
29c9ee2c46
[maven-release-plugin] prepare release mitreid-connect-1.2.6
2016-04-06 16:33:42 -04:00
89316cbab1
fixed default token lifetimes for heart mode
2016-03-18 22:02:28 -04:00
9691f02772
added audience parameter to parser, fixed token generator to match HEART spec
2016-03-11 17:12:36 -05:00
49a8848648
count really weird URIs as "custom scheme"
2016-03-10 12:50:47 -05:00
d75bba218d
forbid password grant type in HEART mode
2016-03-10 12:30:48 -05:00
699e9bff39
testing for multiple classes of redirect URIs
2016-02-24 16:34:58 -05:00
38710bd3d2
unit tests for HEART mode
2016-02-24 15:33:52 -05:00
74ea42851b
added check for HEART mode consistency
2016-02-24 13:09:58 -05:00
028265faa6
pulled scope values to externalized strings
2016-02-24 13:09:39 -05:00
5bccb602d8
always perform strict redirect URI matches in HEART mode
2016-02-24 13:09:00 -05:00
51e3513307
disallow client secret JWT authentication in HEART mode
2016-02-24 13:07:14 -05:00
d0d6ae2ad8
[maven-release-plugin] prepare for next development iteration
2016-02-23 19:02:05 -05:00
7f5b70e9e1
[maven-release-plugin] prepare release mitreid-connect-1.2.5
2016-02-23 19:02:02 -05:00
183a599126
fixed OIDC discovery relation URL
2016-01-29 17:17:35 -05:00
61433cc23a
deepen webfinger, endpoint is looser
...
closes #1008
2016-01-29 15:38:17 -05:00
82a1e49e79
[maven-release-plugin] prepare for next development iteration
2016-01-21 15:55:56 -05:00
e6684fb7a8
[maven-release-plugin] prepare release mitreid-connect-1.2.4
2016-01-21 15:55:53 -05:00
3d14b0d128
rename zone_info claim to zoneinfo
2016-01-21 15:52:59 -05:00
7badfe1d17
Happy new year 2016!
2016-01-21 15:50:37 -05:00
d1033b693f
added privacy-preserving client logo cache
2015-12-21 15:51:39 -05:00
e828f3f18d
[maven-release-plugin] prepare for next development iteration
2015-12-21 10:31:49 -05:00
01ca5ef8e2
[maven-release-plugin] prepare release mitreid-connect-1.2.3
2015-12-21 10:31:47 -05:00
aa878cc3cf
pulled checks for expired tokens into utility functions
2015-12-18 11:22:50 -05:00
698feb49cd
check access token expiration on read. closes #983
2015-12-16 22:46:42 -05:00
7f464c496b
changed copyright to new consortium name
2015-12-16 14:51:12 -05:00
ea77bf2a19
quieted approved site cleanup
2015-12-02 16:51:55 -05:00
Andrea Ceccanti