Commit Graph

  • e46ede356a
    Removed unnecessary modules Dominik František Bučík 2020-05-29 10:36:52 +0200
  • 5014043b13 DWN-33305 : upgrade spring security to 4.2.16.RELEASE Harry Smith 2020-05-26 12:46:13 +0100
  • 80eb57402c process transactions and redirect based interactions Justin Richer 2020-05-11 14:08:48 -0400
  • 6c4f25b18b genericize approval controller Justin Richer 2020-05-11 14:08:31 -0400
  • be95f8a781 auto load test client for XYZ Justin Richer 2020-05-11 14:08:20 -0400
  • a943f1a725 data structure and services for transactions Justin Richer 2020-05-11 14:08:07 -0400
  • b299dfcc49 make it run more or less on Java 14 Justin Richer 2020-05-11 14:07:27 -0400
  • 3109ce66ab
    Bump jackson-databind from 2.9.8 to 2.9.10.4 dependabot[bot] 2020-04-23 16:36:51 +0000
  • cacf6a653b
    Fix XSS (CVE-2020-5497) Aaron Bishop 2020-04-10 15:15:49 -0600
  • 3bf3dd05b0 java 11 branch Anuradha G 2020-04-09 15:10:31 +0530
  • 7dc2d470e0 Merge remote-tracking branch 'angelusGJ/master' into java11 Anuradha G 2020-04-09 14:56:06 +0530
  • 8fe754efd1 java 11 branch Anuradha G 2020-04-09 14:47:53 +0530
  • e0c49a3a2f java 11 branch Anuradha G 2020-04-09 14:46:05 +0530
  • 4381342653 updated to work with java 11 Anuradha G 2020-04-09 13:37:53 +0530
  • 1162bf507c
    Merge pull request #4 from dBucik/dev7 Dominik František Bučík 2020-03-31 10:49:27 +0200
  • 1de7e6b853
    refactoring submodule common - part 4 Dominik František Bučík 2020-03-31 09:07:50 +0200
  • 1409aff639
    Merge pull request #3 from dBucik/dev6 Dominik František Bučík 2020-03-31 10:41:07 +0200
  • fdee1bc62c
    refactoring submodule common - part 3 Dominik František Bučík 2020-03-31 08:56:19 +0200
  • 408f56f6ed
    Merge pull request #2 from dBucik/dev5 Dominik František Bučík 2020-03-31 10:29:55 +0200
  • cf9030f3e1
    Refactoring common submodule - part 2 Dominik František Bučík 2020-03-30 20:48:22 +0200
  • 5c5b69b90a
    Merge pull request #1 from dBucik/dev4 Dominik František Bučík 2020-03-31 10:18:19 +0200
  • 09a4101e1b
    refactoring submodule common - part 1 Dominik František Bučík 2020-03-31 09:55:35 +0200
  • e135d67655
    Merge pull request #5 from gresham-computing/sanitseUserName Harry Smith 2020-03-25 13:37:39 +0000
  • 7f75f4d2a6 DWN-31921 : bump open id connect to next version Harry Smith 2020-03-25 13:34:04 +0000
  • 5a88252af5
    Bump jackson-databind from 2.9.8 to 2.9.10.3 dependabot[bot] 2020-03-04 21:41:30 +0000
  • 9af82d42d4 Support OpenJDK 9, 10 and 11. Rafael Campos 2020-02-26 12:11:34 -0600
  • 900316b167
    Merge pull request #1 from irbishop/irbishop-fix_xss Aaron Bishop 2020-02-18 18:19:37 -0700
  • 41f856e84c
    Add files via upload Aaron Bishop 2020-02-18 18:19:15 -0700
  • 2c8c545556 DWN-31929 : add further XSS attacks to test Harry Smith 2020-02-17 13:55:03 +0000
  • acaa64b4d5 DWN-31929 : move whitelist to class level Harry Smith 2020-02-17 12:51:17 +0000
  • dd92d8473e DWN-31929 : updated dependencies and made method void Harry Smith 2020-02-17 10:19:19 +0000
  • 28e69c377f DWN-31929 : mitigate open id common XSS vulnerability Harry Smith 2020-02-17 08:36:39 +0000
  • af50258227
    Merge pull request #2 from Deli82/master Jamie Slome 2020-02-14 16:31:33 +0000
  • c435ff3747 Merge remote-tracking branch 'upstream/master' Jan Singer 2020-02-07 09:04:49 +0100
  • 76cd96de19 Sanitize userInfoJson Kernel32 2020-02-03 22:15:57 +0100
  • be8f32452e Propagate refresh token request to token enhancer Andrea Ceccanti 2020-01-19 21:22:20 +0100
  • 9d0967f529 Enable audience handling in IAM for refresh token flow Andrea Ceccanti 2020-01-15 21:50:34 +0100
  • 2c48a4625c Fix scope checking in refresh token flow Andrea Ceccanti 2020-01-15 16:33:16 +0100
  • 15ae992915 ensure the redirect URI isn't replaced by the AS in a dynamic client registration dynreg-client-check Justin Richer 2019-12-06 16:57:12 -0500
  • d451075fb3
    Merge pull request #4 from gresham-computing/nexusIqUpgrades Harry Smith 2019-12-04 09:04:31 +0000
  • a30b999ea7 No Jira : alter building mechanism to be independent on Jenkins build numbers Harry Smith 2019-12-04 08:57:08 +0000
  • 0d5608344e
    Bump jackson-databind from 2.9.8 to 2.9.10.1 dependabot[bot] 2019-11-13 01:33:45 +0000
  • 991ed790a5 Upgrade nimbus-jose-jwt to latest version to fix #1514. dskiles 2019-11-06 14:06:54 -0500
  • df84942311 DWN-30574 : upgrade nimbus-jose-jwt to 7.9 Harry Smith 2019-10-29 07:52:48 +0000
  • e91a153f49 DWN-30463 : update spring security bom Harry Smith 2019-10-25 10:53:52 +0100
  • 18c7993e75 DWN-30296 : upgrade jackson to 2.10.0 Harry Smith 2019-10-25 10:53:19 +0100
  • caa687f979 Improved DI for client validator Andrea Ceccanti 2019-10-04 13:09:07 +0200
  • 846727e9b3 Move dyn client validation to dedicated service Andrea Ceccanti 2019-10-04 07:40:16 +0200
  • 68b2cc6a8c Bumped version to 1.3.5.cnaf.v20190827 Andrea Ceccanti 2019-08-27 18:00:53 +0200
  • 742620a29c DefaultSystemScopeService: Fix new logic Thomas Meyer 2019-08-03 15:04:23 +0200
  • 7dc3b8ec3a JpaSystemScopeRepository: Fix JPA expectations Thomas Meyer 2019-08-03 14:59:22 +0200
  • e2d182440b ErrorController: instanceof check includes null check. Thomas Meyer 2019-08-03 14:50:25 +0200
  • 8f228e4c8f ErrorController: Move code from view into controller Thomas Meyer 2019-08-03 14:49:01 +0200
  • 6fc1e4cd1d ErrorController: user /error as path for controller and /errorview for view Thomas Meyer 2019-08-03 14:48:27 +0200
  • 0d4ef2cb4f
    Update README.md Justin Richer 2019-08-01 16:41:55 -0400
  • ce1ea638ee SystemScopeService: Optimize SQL access Thomas Meyer 2019-07-27 15:36:31 +0200
  • 3c2ebe30e7 TofuUserApprovalHandler: Refactor setAuthTime. Thomas Meyer 2019-07-27 09:01:47 +0200
  • 4021cfd2e9 * Updated plugin versions to latest compatible * Added release override to use maven-gpg-plugin 1.6 * Whitespace cleanup in poms Guy Pascarella 2019-07-22 22:50:48 -0400
  • 9eeea7ac3e
    Merge pull request #3 from PolarisAlpha/FixCIRelease Guy Pascarella 2019-07-22 15:40:06 -0400
  • e28bd6b6e9 Fixed #2 by specifically stating newer plugin versions; General pom cleanup Guy Pascarella 2019-07-22 13:49:16 -0400
  • a8eb8bb0ed Fix error-page for POST,PUT, etc. Thomas Meyer 2019-07-19 22:41:40 +0200
  • ab859aea5a Restore java version to 1.8 Angel Garcia 2019-07-10 16:04:54 +0200
  • 4de6a9c7e4 Update Spring to 5.1.8.RELEASE and spring-security-oauth2 to 2.3.6.RELEASE Angel Garcia 2019-07-10 15:55:55 +0200
  • 81c1e0ec27 Update mysql-connector to 8.0.13 Marco Descher 2019-07-09 09:55:51 +0200
  • 9683cd6158 Fix device code timeout setting for dynreg clients Andrea Ceccanti 2019-07-05 06:53:07 +0200
  • b35eb26781
    Merge pull request #1 from mobilcom-debitel/session-management Guy Pascarella 2019-06-21 10:24:41 -0600
  • 4897baf8f3 Update CI configuration Andrea Ceccanti 2019-06-21 16:13:55 +0200
  • 7c11e2f14f Force "application/json" in Http Accept header even if jackson-dataformat-xml is present in classpath lgangloff 2019-06-07 10:15:05 +0200
  • fa4e7ef144 remove dangling comma on "saved_user_auth" table jdyer1 2019-05-15 16:09:59 -0500
  • 42baba3cff reduce softwarestaement to 4000, the maximum length for a varchar2. jdyer1 2019-05-15 14:14:56 -0500
  • 1eae28228b fix mistakes in oracle_database_tables.sql jdyer1 2019-05-15 13:48:54 -0500
  • cc6bd4b590 upgrade eclipselink to v. 2.7.4 ruslan 2019-04-10 17:13:20 +0300
  • 621e86e62d [maven-release-plugin] prepare for next development iteration Justin Richer 2019-04-19 16:04:45 -0400
  • 73459f0348 [maven-release-plugin] prepare release mitreid-connect-1.3.3 mitreid-connect-1.3.3 Justin Richer 2019-04-19 16:04:40 -0400
  • 5aa8b2a0a7 updated changelog for release Justin Richer 2019-04-19 16:00:06 -0400
  • dca32d3082 upgrade eclipselink to v. 2.7.4 ruslan 2019-04-10 17:13:20 +0300
  • efbe40e1af added refresh_token into grant_types_supported Martin Kuba 2019-03-06 11:14:52 +0100
  • 9f381217af updated dependencies patchlevels Martin Kuba 2019-03-06 11:35:05 +0100
  • 976d439053
    Merge pull request #3 from gresham-computing/spring-oauth-update Dominic Murch 2019-03-19 10:04:22 +0000
  • 4b11b2366a bumped oauth2 dependency to 2.1.4 because of CVE-2019-3778 hedleyja 2019-03-14 14:52:40 +0000
  • a628162dca Appends our changes to the CHANGELOG Carling Knight 2019-03-14 11:49:24 +0000
  • 6953e02d47 Merge remote-tracking branch 'upstream/master' Jan Singer 2019-03-14 08:09:54 +0100
  • 87b8ad14a5
    Merge 4906fdaabc into ae7debba2f Cleison Ferreira de Melo 2019-03-07 20:20:41 +0000
  • ae7debba2f added refresh_token into grant_types_supported Martin Kuba 2019-03-06 11:14:52 +0100
  • ad64aef0c5 updated dependencies patchlevels Martin Kuba 2019-03-06 11:35:05 +0100
  • d3fc24ee9e
    updated dependencies patchlevels Martin Kuba 2019-03-06 11:35:05 +0100
  • 6efe6ff0ef
    added refresh_token into grant_types_supported Martin Kuba 2019-03-06 11:14:52 +0100
  • 3aa9cb90d3 DWN-27799 - update spring-security-oauth2 for CVE-2019-3778 Dominic Murch 2019-03-06 09:45:36 +0000
  • 79532506ae Add jpa support for saving UserInfo and fix mysql schema bootstrapping Robin Hughes 2019-02-24 11:31:14 -0500
  • e3392dd759 Merge upstream 1.3.5 with our local changes Andrea Ceccanti 2019-02-22 19:20:50 +0100
  • 1d8193a284 removed duplicated index client_details Bartłomiej Poniecki-Klotz 2019-01-18 23:29:37 +0100
  • afdd1225f8 fixed tokens Bartłomiej Poniecki-Klotz 2019-01-18 23:24:52 +0100
  • b94c39bc99 restore missing indexes Bartłomiej Poniecki-Klotz 2019-01-18 23:22:40 +0100
  • c4fa512fb5 Added indexes for frequent operations Removed duplicated indexes Bartłomiej Poniecki-Klotz 2019-01-18 23:17:08 +0100
  • c55bd048bd Changed exceptions for refresh_token grant from InvalidTokenException to InvalidGrantException in order to comply with RFC 6739 section 6 (https://tools.ietf.org/html/rfc6749#section-6) and the referenced section 5.2. Jan Singer 2019-01-07 13:25:28 +0100
  • 12f91b1901
    Merge pull request #2 from gresham-computing/client-secret-security Carling Knight 2018-12-14 10:37:35 +0000
  • a9ea5e62bf Merge remote-tracking branch 'upstream/master' Jan Singer 2018-12-11 07:42:27 +0100
  • 703c341308
    Merge pull request #1436 from blm126/upgrade-guava Justin Richer 2018-12-10 14:26:20 -0500
  • 8430b42ab3 Both approve pages were using pagecontext rather than the configured issuer Stephen Moore 2018-11-12 09:48:50 -0500
  • 2008404afd DWN-27040: Bit of refactoring, Protected Resources now protected Carling Knight 2018-12-05 14:36:38 +0000