Justin Richer
|
d2ab866810
|
Revert "Enforces minimum Java version 1.6 on the openid-connect-server project."
This reverts commit c007e69974 .
|
2013-10-30 19:20:43 -04:00 |
Megan Boggess
|
c007e69974
|
Enforces minimum Java version 1.6 on the openid-connect-server project.
|
2013-10-30 19:04:39 -04:00 |
Justin Richer
|
bc8984aead
|
[maven-release-plugin] prepare for next development iteration
|
2013-09-23 15:30:17 -04:00 |
Justin Richer
|
c6733d04fb
|
[maven-release-plugin] prepare release mitreid-connect-1.0.12
|
2013-09-23 15:30:13 -04:00 |
Justin Richer
|
ea707903f0
|
added basic support for encrypted request objects, addresses #475
Conflicts:
openid-connect-server/src/main/java/org/mitre/openid/connect/ConnectOAuth2RequestFactory.java
|
2013-09-23 14:36:35 -04:00 |
Justin Richer
|
cc179003c7
|
added missing parts to discovery
|
2013-09-20 11:58:42 -04:00 |
Justin Richer
|
b9f545d75b
|
added encryption/decryption to cached JWK-URI service
Conflicts:
openid-connect-server/src/main/java/org/mitre/openid/connect/ConnectOAuth2RequestFactory.java
|
2013-09-20 11:29:46 -04:00 |
Justin Richer
|
122b0c4e8c
|
wrap errors in saving the client in an HTTP 400 (instead of HTTP 500) error
Conflicts:
openid-connect-server/src/main/java/org/mitre/openid/connect/web/ClientDynamicRegistrationEndpoint.java
|
2013-09-20 11:27:07 -04:00 |
Justin Richer
|
e11c0386d1
|
added transient passthroughs to JOSE algorithms for client
Conflicts:
openid-connect-server/src/main/java/org/mitre/openid/connect/ConnectOAuth2RequestFactory.java
|
2013-09-20 11:22:18 -04:00 |
Justin Richer
|
d83af13ae3
|
services shouldn't be transactional
|
2013-09-20 11:18:16 -04:00 |
Justin Richer
|
b4783e753f
|
clean up unused getter/setter
|
2013-09-20 11:17:13 -04:00 |
Justin Richer
|
1bf560842e
|
cleaned up CORS filter implementation
|
2013-09-19 16:42:31 -04:00 |
Justin Richer
|
9020261d2c
|
added CORS filter
|
2013-09-19 16:42:31 -04:00 |
Justin Richer
|
858be9866a
|
[maven-release-plugin] prepare for next development iteration
|
2013-09-06 15:37:31 -04:00 |
Justin Richer
|
72caaa6d2d
|
[maven-release-plugin] prepare release mitreid-connect-1.0.11
|
2013-09-06 15:37:28 -04:00 |
Justin Richer
|
46e7ed203b
|
if the client doesn't ask for any system scopes, but asks for some non-system scopes, they'll now get the defaults instead of none
addresses #498
|
2013-09-06 15:28:35 -04:00 |
Justin Richer
|
9f444f9eca
|
[maven-release-plugin] prepare for next development iteration
|
2013-09-03 12:43:52 -04:00 |
Justin Richer
|
6e866cd6a6
|
[maven-release-plugin] prepare release mitreid-connect-1.0.10
|
2013-09-03 12:43:49 -04:00 |
Justin Richer
|
926e1ef39c
|
made introspection and revocation work with basic auth (and possible OAuth tokens, but that needs more work)
|
2013-09-03 12:32:49 -04:00 |
Justin Richer
|
bea3a6610c
|
tell spring to not stuff model into the redirects, partially addresses #492
|
2013-08-30 16:38:27 -04:00 |
Justin Richer
|
35e14f0c81
|
removed outdated client credentials filter, addresses #491
|
2013-08-30 11:49:06 -04:00 |
William Kim
|
d30b53ddbf
|
corrected output for badly-formatted timeout date.
|
2013-08-29 17:41:28 -04:00 |
William Kim
|
f871edefed
|
added date format validity check for moment.js usage.
|
2013-08-29 17:41:28 -04:00 |
William Kim
|
3c2662889c
|
null-checking in date display for approved sites.
|
2013-08-29 17:41:27 -04:00 |
William Kim
|
f5408347ec
|
date display logic to use moment.js.
|
2013-08-29 17:41:27 -04:00 |
William Kim
|
cd1871b021
|
initial moment time formatting commit.
|
2013-08-29 17:41:27 -04:00 |
William Kim
|
9736669584
|
importing moment.js library.
|
2013-08-29 17:41:27 -04:00 |
Justin Richer
|
48383d2fe0
|
added basic user profile view implementation
|
2013-08-29 17:40:01 -04:00 |
Justin Richer
|
196138e128
|
hide admin panels from non-admin users, addresses #472
|
2013-08-29 17:40:01 -04:00 |
Justin Richer
|
a59704559a
|
inject user's authorities into javascript context
|
2013-08-29 17:40:01 -04:00 |
Justin Richer
|
5c79a3f94e
|
inject user's email address into contacts on dynamic registration
|
2013-08-29 17:40:01 -04:00 |
Justin Richer
|
61acbbe3b8
|
inject the current user into the javascript context
Conflicts:
openid-connect-server/src/main/webapp/WEB-INF/tags/header.tag
|
2013-08-29 17:39:59 -04:00 |
Justin Richer
|
43fa0ff249
|
added delete function
|
2013-08-29 17:39:19 -04:00 |
Justin Richer
|
1168268287
|
changed display of core client components, added warning
|
2013-08-29 17:39:19 -04:00 |
Justin Richer
|
3fa655a006
|
added create and update functions
|
2013-08-29 17:39:19 -04:00 |
Justin Richer
|
e254c3d851
|
json view and form elements
|
2013-08-29 17:39:19 -04:00 |
Justin Richer
|
b7e3892773
|
added client read and oauth token support for CRUD abilities
|
2013-08-29 17:39:19 -04:00 |
Justin Richer
|
773723feeb
|
fixed panels for client form
|
2013-08-29 17:39:19 -04:00 |
Justin Richer
|
cac0d21894
|
added form editor and control for newly-registered clients
|
2013-08-29 17:39:19 -04:00 |
Justin Richer
|
b0cf84149e
|
added dev page for self-service client registration
Conflicts:
openid-connect-server/src/main/webapp/WEB-INF/tags/footer.tag
|
2013-08-29 17:39:15 -04:00 |
Justin Richer
|
3ee2a75e2e
|
[maven-release-plugin] prepare for next development iteration
|
2013-08-20 16:51:13 -04:00 |
Justin Richer
|
c5edb1ba1e
|
[maven-release-plugin] prepare release mitreid-connect-1.0.9
|
2013-08-20 16:51:10 -04:00 |
Justin Richer
|
897e4cbfed
|
proper null check for client's preferred signature method
|
2013-08-20 16:45:26 -04:00 |
Justin Richer
|
9df10d3871
|
id tokens always expire, addresses #416
Conflicts:
openid-connect-server/src/main/webapp/resources/template/client.html
|
2013-08-20 16:07:25 -04:00 |
William Kim
|
bc4d52dc18
|
unit select box appropriately disabled after saving now.
|
2013-08-20 15:20:13 -04:00 |
William Kim
|
85a8532cc7
|
clear token timeout form fields when disabled and also disable unit selector.
|
2013-08-20 15:20:01 -04:00 |
William Kim
|
95bdf12f4d
|
renamed token expiration form field ids from -seconds to -time.
|
2013-08-20 15:19:52 -04:00 |
William Kim
|
3e45f62360
|
shortened token timeout form fields.
|
2013-08-20 15:19:44 -04:00 |
William Kim
|
33559b1ed9
|
dropdown time unit chooser added for token expiration.
|
2013-08-20 15:19:35 -04:00 |
William Kim
|
11f47e85a9
|
refactor js. getFormTokenValue() -> getFormTokenNumberValue().
|
2013-08-20 15:19:29 -04:00 |
Justin Richer
|
895e257432
|
Disable unsupported JOSE algorithms in UI, addresses #476
|
2013-08-20 14:46:35 -04:00 |
Justin Richer
|
682d9b9406
|
added 'use server default' to JOSE options, addresses #462
|
2013-08-20 14:46:35 -04:00 |
Justin Richer
|
143f1efafb
|
created crypto tab
|
2013-08-20 14:46:35 -04:00 |
Justin Richer
|
b787270ff0
|
removed NYI tag from ID token signing alg
|
2013-08-20 14:46:35 -04:00 |
Amanda Anganes
|
ed7ff435ba
|
Changed client algorithm check to look for null instead of JWSAlgorithm.NONE, which is a valid value.
|
2013-08-20 14:46:35 -04:00 |
Amanda Anganes
|
f866e5addc
|
Use clients preferred algorithm, if any, to sign
|
2013-08-20 14:33:36 -04:00 |
Amanda Anganes
|
99cd6068dc
|
Compare client_ids instead of Client objects
|
2013-08-20 14:33:14 -04:00 |
Justin Richer
|
baac4c4f32
|
load server configuration into JS app
|
2013-08-20 14:24:50 -04:00 |
Justin Richer
|
028f15c039
|
animated loading bar for management console
|
2013-08-20 14:24:28 -04:00 |
Justin Richer
|
ae3ecc2638
|
fixed jquery.on regex to be less aggressive
|
2013-08-20 14:12:01 -04:00 |
Justin Richer
|
60ab2b457e
|
fixed jquery.on syntax bug, addresses #346
|
2013-08-20 14:11:55 -04:00 |
Justin Richer
|
3640f4b02d
|
added back default timeouts and fixed refresh token check
|
2013-08-15 15:51:15 -04:00 |
William Kim
|
f2af7d31bc
|
addresses issue #471. setting default timeout values in the backbone model to null.
|
2013-08-15 15:51:11 -04:00 |
Justin Richer
|
ca01c55f39
|
added prompt=login support, addresses #323
|
2013-08-15 12:13:37 -04:00 |
Justin Richer
|
44f0e89048
|
I can spell "consortium"!
|
2013-08-14 14:15:42 -04:00 |
Justin Richer
|
91b2be284d
|
[maven-release-plugin] prepare for next development iteration
|
2013-08-09 14:13:31 -04:00 |
Justin Richer
|
074ea6f903
|
[maven-release-plugin] prepare release mitreid-connect-1.0.8
|
2013-08-09 14:13:28 -04:00 |
Justin Richer
|
0fcecd27e5
|
renamed JWSUtils -> IdTokenHashUtils, renamed internal variables
Conflicts:
openid-connect-server/src/main/java/org/mitre/openid/connect/token/ConnectTokenEnhancer.java
|
2013-08-09 14:09:52 -04:00 |
William Kim
|
6866d2e428
|
TestJWSUtils done.
|
2013-08-09 14:08:57 -04:00 |
William Kim
|
b6ebde2b15
|
updated hash tests.
|
2013-08-09 14:08:54 -04:00 |
William Kim
|
7acdc47fce
|
changed at_hash/c_hash impl. HMAC-SHA --> regular SHA.
|
2013-08-09 14:08:26 -04:00 |
Amanda Anganes
|
63cf621f2f
|
Had to hand-merge some things; git got confused
Conflicts:
openid-connect-server/src/main/java/org/mitre/openid/connect/token/ConnectTokenEnhancer.java
|
2013-08-09 14:07:52 -04:00 |
Amanda Anganes
|
546fb24019
|
Added c_hash function, added stub of unit test for JWSUtils
|
2013-08-09 14:04:43 -04:00 |
Amanda Anganes
|
b05a34a825
|
JWSUtils uses JWSAlgorithm to match bit length; ConnectTokenEnhancer calls the util method now
Conflicts:
openid-connect-server/src/main/java/org/mitre/openid/connect/token/ConnectTokenEnhancer.java
|
2013-08-09 14:04:26 -04:00 |
Amanda Anganes
|
b6c443c931
|
Added JWSUtils class;
|
2013-08-09 13:56:41 -04:00 |
Amanda Anganes
|
f58141e6a7
|
Fixed token expiration bug by removing jsql queries. Instead expired tokens or approved sites are filtered at the repository level
Moved getExpired to service layers
Used Predicates to filter expired tokens and approved sites;
|
2013-08-09 13:55:41 -04:00 |
Amanda Anganes
|
3134c34606
|
Dyn-reg endpoint now creates the registration access token from scratch instead of calling token services; token services no longer needs to check for RAT scope to avoid expiring RATs
lientDynamicRegistrationEndpoint.java
|
2013-08-09 13:55:33 -04:00 |
Justin Richer
|
5edde48481
|
[maven-release-plugin] prepare for next development iteration
|
2013-07-30 13:10:48 -04:00 |
Justin Richer
|
4de9895d23
|
[maven-release-plugin] prepare release mitreid-connect-1.0.7
|
2013-07-30 13:10:45 -04:00 |
Amanda Anganes
|
e589f608c0
|
Do not expire registration tokens
|
2013-07-30 11:41:53 -04:00 |
Justin Richer
|
023dd440d4
|
[maven-release-plugin] prepare for next development iteration
|
2013-07-29 11:30:08 -04:00 |
Justin Richer
|
5e8f93cf15
|
[maven-release-plugin] prepare release mitreid-connect-1.0.6
|
2013-07-29 11:30:04 -04:00 |
Justin Richer
|
e658ffd7fc
|
format/cleanup and copyright
|
2013-07-29 11:28:51 -04:00 |
Justin Richer
|
d4b544d519
|
disable token API (for now)
|
2013-07-29 11:23:07 -04:00 |
Amanda Anganes
|
906db0ac86
|
Opened token api access to all users; restricted to only show currently-logged-in-users tokens
|
2013-07-29 09:18:08 -04:00 |
Justin Richer
|
71da5b3d94
|
clean up some discovery values
|
2013-07-26 17:07:28 -04:00 |
Justin Richer
|
c62bed37ff
|
convert server to use normalizer
|
2013-07-26 17:07:08 -04:00 |
William Kim
|
93c3e7906f
|
put in line breaks into the extra long comments in DiscoveryEndpoint.java
|
2013-07-25 09:25:06 -04:00 |
Amanda Anganes
|
b397f0ae15
|
First go at adding token API; needs to be tested
|
2013-07-24 09:14:46 -04:00 |
Amanda Anganes
|
88db457fc4
|
Removed .springBeans from tracking; removed initializingbean in favor of @PostConstruct
|
2013-07-18 09:34:52 -04:00 |
Amanda Anganes
|
dfbf01c9e3
|
Added .springBeans to gitignore
|
2013-07-16 15:03:44 -04:00 |
William Kim
|
aad432c5d7
|
replaced stracktrace-printing with logger messages. removed some unused imports.
|
2013-07-16 13:52:32 -04:00 |
William Kim
|
f483d41b88
|
getCustomClaim -> getClaim. Also, removed outdated TODOs.
|
2013-07-16 13:17:25 -04:00 |
William Kim
|
17a96ca122
|
removed resolved TODOs. Fixed by the resolution of issue #345.
|
2013-07-15 14:54:01 -04:00 |
William Kim
|
0d882faeca
|
added a TODO and fixed some comment typos.
|
2013-07-15 14:24:04 -04:00 |
William Kim
|
9a6f345e15
|
yes, allow default scoping if the client doesn't ask for any.
|
2013-07-12 15:05:17 -04:00 |
William Kim
|
3d312b7eb5
|
Deleted PermissionDeniedException class. Unused.
|
2013-07-12 11:40:11 -04:00 |
William Kim
|
c5743dc810
|
updated unit tests to reflect new exception-throwing behavior.
|
2013-07-12 11:36:34 -04:00 |
William Kim
|
ada54c297d
|
addresses issue #382. Throw an exception when client tries to upscope.
|
2013-07-12 11:36:33 -04:00 |
Justin Richer
|
0d8c2442d2
|
[maven-release-plugin] prepare for next development iteration
|
2013-07-12 10:09:41 -04:00 |