Commit Graph

950 Commits (f194622b9a699a88e8a5d26cd4f8e0340cf42ff1)

Author SHA1 Message Date
Justin Richer d2ab866810 Revert "Enforces minimum Java version 1.6 on the openid-connect-server project."
This reverts commit c007e69974.
2013-10-30 19:20:43 -04:00
Megan Boggess c007e69974 Enforces minimum Java version 1.6 on the openid-connect-server project. 2013-10-30 19:04:39 -04:00
Justin Richer bc8984aead [maven-release-plugin] prepare for next development iteration 2013-09-23 15:30:17 -04:00
Justin Richer c6733d04fb [maven-release-plugin] prepare release mitreid-connect-1.0.12 2013-09-23 15:30:13 -04:00
Justin Richer ea707903f0 added basic support for encrypted request objects, addresses #475
Conflicts:

	openid-connect-server/src/main/java/org/mitre/openid/connect/ConnectOAuth2RequestFactory.java
2013-09-23 14:36:35 -04:00
Justin Richer cc179003c7 added missing parts to discovery 2013-09-20 11:58:42 -04:00
Justin Richer b9f545d75b added encryption/decryption to cached JWK-URI service
Conflicts:

	openid-connect-server/src/main/java/org/mitre/openid/connect/ConnectOAuth2RequestFactory.java
2013-09-20 11:29:46 -04:00
Justin Richer 122b0c4e8c wrap errors in saving the client in an HTTP 400 (instead of HTTP 500) error
Conflicts:

	openid-connect-server/src/main/java/org/mitre/openid/connect/web/ClientDynamicRegistrationEndpoint.java
2013-09-20 11:27:07 -04:00
Justin Richer e11c0386d1 added transient passthroughs to JOSE algorithms for client
Conflicts:

	openid-connect-server/src/main/java/org/mitre/openid/connect/ConnectOAuth2RequestFactory.java
2013-09-20 11:22:18 -04:00
Justin Richer d83af13ae3 services shouldn't be transactional 2013-09-20 11:18:16 -04:00
Justin Richer b4783e753f clean up unused getter/setter 2013-09-20 11:17:13 -04:00
Justin Richer 1bf560842e cleaned up CORS filter implementation 2013-09-19 16:42:31 -04:00
Justin Richer 9020261d2c added CORS filter 2013-09-19 16:42:31 -04:00
Justin Richer 858be9866a [maven-release-plugin] prepare for next development iteration 2013-09-06 15:37:31 -04:00
Justin Richer 72caaa6d2d [maven-release-plugin] prepare release mitreid-connect-1.0.11 2013-09-06 15:37:28 -04:00
Justin Richer 46e7ed203b if the client doesn't ask for any system scopes, but asks for some non-system scopes, they'll now get the defaults instead of none
addresses #498
2013-09-06 15:28:35 -04:00
Justin Richer 9f444f9eca [maven-release-plugin] prepare for next development iteration 2013-09-03 12:43:52 -04:00
Justin Richer 6e866cd6a6 [maven-release-plugin] prepare release mitreid-connect-1.0.10 2013-09-03 12:43:49 -04:00
Justin Richer 926e1ef39c made introspection and revocation work with basic auth (and possible OAuth tokens, but that needs more work) 2013-09-03 12:32:49 -04:00
Justin Richer bea3a6610c tell spring to not stuff model into the redirects, partially addresses #492 2013-08-30 16:38:27 -04:00
Justin Richer 35e14f0c81 removed outdated client credentials filter, addresses #491 2013-08-30 11:49:06 -04:00
William Kim d30b53ddbf corrected output for badly-formatted timeout date. 2013-08-29 17:41:28 -04:00
William Kim f871edefed added date format validity check for moment.js usage. 2013-08-29 17:41:28 -04:00
William Kim 3c2662889c null-checking in date display for approved sites. 2013-08-29 17:41:27 -04:00
William Kim f5408347ec date display logic to use moment.js. 2013-08-29 17:41:27 -04:00
William Kim cd1871b021 initial moment time formatting commit. 2013-08-29 17:41:27 -04:00
William Kim 9736669584 importing moment.js library. 2013-08-29 17:41:27 -04:00
Justin Richer 48383d2fe0 added basic user profile view implementation 2013-08-29 17:40:01 -04:00
Justin Richer 196138e128 hide admin panels from non-admin users, addresses #472 2013-08-29 17:40:01 -04:00
Justin Richer a59704559a inject user's authorities into javascript context 2013-08-29 17:40:01 -04:00
Justin Richer 5c79a3f94e inject user's email address into contacts on dynamic registration 2013-08-29 17:40:01 -04:00
Justin Richer 61acbbe3b8 inject the current user into the javascript context
Conflicts:

	openid-connect-server/src/main/webapp/WEB-INF/tags/header.tag
2013-08-29 17:39:59 -04:00
Justin Richer 43fa0ff249 added delete function 2013-08-29 17:39:19 -04:00
Justin Richer 1168268287 changed display of core client components, added warning 2013-08-29 17:39:19 -04:00
Justin Richer 3fa655a006 added create and update functions 2013-08-29 17:39:19 -04:00
Justin Richer e254c3d851 json view and form elements 2013-08-29 17:39:19 -04:00
Justin Richer b7e3892773 added client read and oauth token support for CRUD abilities 2013-08-29 17:39:19 -04:00
Justin Richer 773723feeb fixed panels for client form 2013-08-29 17:39:19 -04:00
Justin Richer cac0d21894 added form editor and control for newly-registered clients 2013-08-29 17:39:19 -04:00
Justin Richer b0cf84149e added dev page for self-service client registration
Conflicts:

	openid-connect-server/src/main/webapp/WEB-INF/tags/footer.tag
2013-08-29 17:39:15 -04:00
Justin Richer 3ee2a75e2e [maven-release-plugin] prepare for next development iteration 2013-08-20 16:51:13 -04:00
Justin Richer c5edb1ba1e [maven-release-plugin] prepare release mitreid-connect-1.0.9 2013-08-20 16:51:10 -04:00
Justin Richer 897e4cbfed proper null check for client's preferred signature method 2013-08-20 16:45:26 -04:00
Justin Richer 9df10d3871 id tokens always expire, addresses #416
Conflicts:

	openid-connect-server/src/main/webapp/resources/template/client.html
2013-08-20 16:07:25 -04:00
William Kim bc4d52dc18 unit select box appropriately disabled after saving now. 2013-08-20 15:20:13 -04:00
William Kim 85a8532cc7 clear token timeout form fields when disabled and also disable unit selector. 2013-08-20 15:20:01 -04:00
William Kim 95bdf12f4d renamed token expiration form field ids from -seconds to -time. 2013-08-20 15:19:52 -04:00
William Kim 3e45f62360 shortened token timeout form fields. 2013-08-20 15:19:44 -04:00
William Kim 33559b1ed9 dropdown time unit chooser added for token expiration. 2013-08-20 15:19:35 -04:00
William Kim 11f47e85a9 refactor js. getFormTokenValue() -> getFormTokenNumberValue(). 2013-08-20 15:19:29 -04:00
Justin Richer 895e257432 Disable unsupported JOSE algorithms in UI, addresses #476 2013-08-20 14:46:35 -04:00
Justin Richer 682d9b9406 added 'use server default' to JOSE options, addresses #462 2013-08-20 14:46:35 -04:00
Justin Richer 143f1efafb created crypto tab 2013-08-20 14:46:35 -04:00
Justin Richer b787270ff0 removed NYI tag from ID token signing alg 2013-08-20 14:46:35 -04:00
Amanda Anganes ed7ff435ba Changed client algorithm check to look for null instead of JWSAlgorithm.NONE, which is a valid value. 2013-08-20 14:46:35 -04:00
Amanda Anganes f866e5addc Use clients preferred algorithm, if any, to sign 2013-08-20 14:33:36 -04:00
Amanda Anganes 99cd6068dc Compare client_ids instead of Client objects 2013-08-20 14:33:14 -04:00
Justin Richer baac4c4f32 load server configuration into JS app 2013-08-20 14:24:50 -04:00
Justin Richer 028f15c039 animated loading bar for management console 2013-08-20 14:24:28 -04:00
Justin Richer ae3ecc2638 fixed jquery.on regex to be less aggressive 2013-08-20 14:12:01 -04:00
Justin Richer 60ab2b457e fixed jquery.on syntax bug, addresses #346 2013-08-20 14:11:55 -04:00
Justin Richer 3640f4b02d added back default timeouts and fixed refresh token check 2013-08-15 15:51:15 -04:00
William Kim f2af7d31bc addresses issue #471. setting default timeout values in the backbone model to null. 2013-08-15 15:51:11 -04:00
Justin Richer ca01c55f39 added prompt=login support, addresses #323 2013-08-15 12:13:37 -04:00
Justin Richer 44f0e89048 I can spell "consortium"! 2013-08-14 14:15:42 -04:00
Justin Richer 91b2be284d [maven-release-plugin] prepare for next development iteration 2013-08-09 14:13:31 -04:00
Justin Richer 074ea6f903 [maven-release-plugin] prepare release mitreid-connect-1.0.8 2013-08-09 14:13:28 -04:00
Justin Richer 0fcecd27e5 renamed JWSUtils -> IdTokenHashUtils, renamed internal variables
Conflicts:

	openid-connect-server/src/main/java/org/mitre/openid/connect/token/ConnectTokenEnhancer.java
2013-08-09 14:09:52 -04:00
William Kim 6866d2e428 TestJWSUtils done. 2013-08-09 14:08:57 -04:00
William Kim b6ebde2b15 updated hash tests. 2013-08-09 14:08:54 -04:00
William Kim 7acdc47fce changed at_hash/c_hash impl. HMAC-SHA --> regular SHA. 2013-08-09 14:08:26 -04:00
Amanda Anganes 63cf621f2f Had to hand-merge some things; git got confused
Conflicts:

	openid-connect-server/src/main/java/org/mitre/openid/connect/token/ConnectTokenEnhancer.java
2013-08-09 14:07:52 -04:00
Amanda Anganes 546fb24019 Added c_hash function, added stub of unit test for JWSUtils 2013-08-09 14:04:43 -04:00
Amanda Anganes b05a34a825 JWSUtils uses JWSAlgorithm to match bit length; ConnectTokenEnhancer calls the util method now
Conflicts:

	openid-connect-server/src/main/java/org/mitre/openid/connect/token/ConnectTokenEnhancer.java
2013-08-09 14:04:26 -04:00
Amanda Anganes b6c443c931 Added JWSUtils class; 2013-08-09 13:56:41 -04:00
Amanda Anganes f58141e6a7 Fixed token expiration bug by removing jsql queries. Instead expired tokens or approved sites are filtered at the repository level
Moved getExpired to service layers

Used Predicates to filter expired tokens and approved sites;
2013-08-09 13:55:41 -04:00
Amanda Anganes 3134c34606 Dyn-reg endpoint now creates the registration access token from scratch instead of calling token services; token services no longer needs to check for RAT scope to avoid expiring RATs
lientDynamicRegistrationEndpoint.java
2013-08-09 13:55:33 -04:00
Justin Richer 5edde48481 [maven-release-plugin] prepare for next development iteration 2013-07-30 13:10:48 -04:00
Justin Richer 4de9895d23 [maven-release-plugin] prepare release mitreid-connect-1.0.7 2013-07-30 13:10:45 -04:00
Amanda Anganes e589f608c0 Do not expire registration tokens 2013-07-30 11:41:53 -04:00
Justin Richer 023dd440d4 [maven-release-plugin] prepare for next development iteration 2013-07-29 11:30:08 -04:00
Justin Richer 5e8f93cf15 [maven-release-plugin] prepare release mitreid-connect-1.0.6 2013-07-29 11:30:04 -04:00
Justin Richer e658ffd7fc format/cleanup and copyright 2013-07-29 11:28:51 -04:00
Justin Richer d4b544d519 disable token API (for now) 2013-07-29 11:23:07 -04:00
Amanda Anganes 906db0ac86 Opened token api access to all users; restricted to only show currently-logged-in-users tokens 2013-07-29 09:18:08 -04:00
Justin Richer 71da5b3d94 clean up some discovery values 2013-07-26 17:07:28 -04:00
Justin Richer c62bed37ff convert server to use normalizer 2013-07-26 17:07:08 -04:00
William Kim 93c3e7906f put in line breaks into the extra long comments in DiscoveryEndpoint.java 2013-07-25 09:25:06 -04:00
Amanda Anganes b397f0ae15 First go at adding token API; needs to be tested 2013-07-24 09:14:46 -04:00
Amanda Anganes 88db457fc4 Removed .springBeans from tracking; removed initializingbean in favor of @PostConstruct 2013-07-18 09:34:52 -04:00
Amanda Anganes dfbf01c9e3 Added .springBeans to gitignore 2013-07-16 15:03:44 -04:00
William Kim aad432c5d7 replaced stracktrace-printing with logger messages. removed some unused imports. 2013-07-16 13:52:32 -04:00
William Kim f483d41b88 getCustomClaim -> getClaim. Also, removed outdated TODOs. 2013-07-16 13:17:25 -04:00
William Kim 17a96ca122 removed resolved TODOs. Fixed by the resolution of issue #345. 2013-07-15 14:54:01 -04:00
William Kim 0d882faeca added a TODO and fixed some comment typos. 2013-07-15 14:24:04 -04:00
William Kim 9a6f345e15 yes, allow default scoping if the client doesn't ask for any. 2013-07-12 15:05:17 -04:00
William Kim 3d312b7eb5 Deleted PermissionDeniedException class. Unused. 2013-07-12 11:40:11 -04:00
William Kim c5743dc810 updated unit tests to reflect new exception-throwing behavior. 2013-07-12 11:36:34 -04:00
William Kim ada54c297d addresses issue #382. Throw an exception when client tries to upscope. 2013-07-12 11:36:33 -04:00
Justin Richer 0d8c2442d2 [maven-release-plugin] prepare for next development iteration 2013-07-12 10:09:41 -04:00