505 Commits (3d4f2df493ea99661182c49fdf940b00e4b6070f)

Author SHA1 Message Date
Joe Grandja a7035d22bd Update PKCE validation 2 years ago
Joe Grandja c86ddacbca Additional polish gh-1468 2 years ago
Joe Grandja f0a6a4c0bf Polish gh-1468 2 years ago
Greg Li 4bc0df5ef8 Fix to ensure endpoints distinguish between form and query parameters 2 years ago
Joe Grandja fb9a13b0ff Allow expired ID tokens on RP-initiated logout 2 years ago
Joe Grandja 639fe93544 Remove unused OAuth2EndpointUtils 2 years ago
Joe Grandja 30d6129117 Revert "Issuer should not support path component" 2 years ago
Joe Grandja d52edb8f76 Update javadoc for JDBC implementations 2 years ago
Martin Bogusz 8f6593ab2a Set default timeout when fetching JWKSet for private_key_jwt 2 years ago
Joe Grandja c3f86d11f8 Issuer should not support path component 2 years ago
Joe Grandja 5286affbfe Fix tests for OAuth2 Authorization Server Metadata Endpoint 2 years ago
Joe Grandja b0862336d3 Fix tests for OIDC Provider Configuration Endpoint 2 years ago
Joe Grandja 75c3a52788 Client credentials are not allowed in query parameters 2 years ago
Joe Grandja 6d21a65ff4 Polish gh-1345 2 years ago
Yuta Saito 9109d3714b Fix to return hashed client_secret when registering with client_secret_jwt 2 years ago
Steve Riesenberg 215c101c3d
Polish gh-1309 2 years ago
Martin Bogusz 82b70595ad
Fix userCode validation 2 years ago
Joe Grandja 2895169b30 Polish gh-1289 3 years ago
cbilodeau b6f3b5cc45 Fix generating ID token with null sid when refresh_token grant 3 years ago
Joe Grandja 1cffa18c32 Polish gh-1252 3 years ago
Martin Lindström 980d75325a Fix to save all values for multi-valued device grant parameters 3 years ago
Joe Grandja 2b3b5d2531 Polish gh-1252 3 years ago
Martin Lindström 890b1ef0ed Fix to save all values for multi-valued request parameters 3 years ago
Joe Grandja bdc0b4de5f Polish gh-1233 3 years ago
Pavel Efros 6e1ed9fd87 Fix NPE on access token in OAuth2AuthorizationCodeAuthenticationProvider 3 years ago
Joe Grandja 27a893fbee Validate authorized principal instead of sub during logout 3 years ago
heartape a73181153d Use substring instead of replaceFirst in OAuth2AuthorizationConsent 3 years ago
Joe Grandja 00c114cc12 ID Token contains sid claim after refresh_token grant 3 years ago
Joe Grandja 878a75d6ed Revert serialVersionUID to 1.1.0 3 years ago
Joe Grandja 04da0129f9 Revert serialVersionUID to 1.0.0 3 years ago
Joe Grandja 4bb741b0ba Revert serialVersionUID to 0.4.0 3 years ago
Joe Grandja 6eeca49428 Next Development Version 3 years ago
Steve Riesenberg 2f6de73a06
Polish tests 3 years ago
Joe Grandja a70783e6e7 Hash the sid claim in the ID Token 3 years ago
Joe Grandja 64ddcfc3ec Polish gh-1152 3 years ago
neochae 51317141b9 Invalidate tokens previously issued when code is reused 3 years ago
Steve Riesenberg e0340f7b81
Add integration tests for device grant 3 years ago
Joe Grandja b6ff06d6fe Add test for dynamic client registration with custom metadata 3 years ago
Joe Grandja 5b2b42f71c Next Development Version 3 years ago
Joe Grandja 089096a835 Next Development Version 3 years ago
Joe Grandja 213048b780 Polish gh-1127 3 years ago
Steve Riesenberg 13a61034ed
Add tests and update examples in docs 3 years ago
Steve Riesenberg 5c6879d979
Polish gh-1143 3 years ago
Xu Xiaowei cf7ecc161d
JDBC device_code authorization 3 years ago
Steve Riesenberg 8e04da773d
Add tests for OAuth 2.0 Device Authorization Grant 3 years ago
Steve Riesenberg 1bfc54fe6a
Do not require authorizationRequest for device grant 3 years ago
HuiYeong 25bc45cdff Fix refresh token error code INVALID_CLIENT to INVALID_GRANT 3 years ago
Joe Grandja ef4c5d7b6f Allow localhost in redirect_uri 3 years ago
Joe Grandja 597abe18c3 Ensure ID Token is active before processing logout request 3 years ago
Joe Grandja 3b1958e4df Add OidcLogoutAuthenticationToken.isPrincipalAuthenticated() 3 years ago