github
/
OpenID-Connect-Java-Spring-Server
mirror of https://github.com/mitreid-connect/OpenID-Connect-Java-Spring-Server
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

Updated Features (markdown)

master
jricher 2012-07-23 11:19:49 -07:00
parent ee81938a83
commit 0ab0f73c0e
1 changed files with 20 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

27
Features.md

@ -9,19 +9,32 @@ The following features are fully supported in our current implementation.
* UserInfo endpoint * UserInfo endpoint
* Manual client management through an administrator console * Manual client management through an administrator console
* HTTP Basic Auth for client authentication * HTTP Basic Auth for client authentication
* SWD endpoint * SWD discovery endpoint
* XRD discovery endpoint
... * JWK public key endpoint
* Standard scopes: openid, phone, address, email, profile
* Additional arbitrary scopes
* Signed JWT access tokens
* RSA Signing
* HMAC Signing
* RSA Encryption
* Client filter with static single-server configuration
* Client filter with static multi-server configuration (using our Account Chooser)
## Currently unsupported / pending implementation / incomplete ## Currently unsupported / pending implementation / incomplete
The following features are not supported yet, but will be at some point. If we have a projected target for a given feature it will be listed here; if there is no projected target, that only means that we haven't set a target yet, not that it won't happen. The following features are not supported yet, but will be at some point. If we have a projected target for a given feature it will be listed here; if there is no projected target, that only means that we haven't set a target yet, not that it won't happen.
* Dynamic Client Registration * Dynamic Client Registration (Fall FY12)
* Session management * Session management (FY13)
* X509 (Currently investigating how to publish our public keys as X509 certs) * X509 (Currently investigating how to publish our public keys as X509 certs)
* Request File * Request Object (Signed - in the works / Encrypted)
* Request File (Signed / Encrypted)
* Introspection endpoint (stubbed out, pending community standardization)
* Revocation endpoint (somewhat functional)
## Not targeted ## Not targeted
The following features are things that we are not planning on supporting with out implementation. The following features are things that we are not planning on supporting with our implementation, though we welcome pull requests and patches to incorporate these features:
* Dynamic client filter configuration (full server discovery)