Joe Grandja
|
dcea787ebd
|
Enable refresh of JwkSet in X509SelfSignedCertificateVerifier
Closes gh-1599
|
2 years ago |
Steve Riesenberg
|
ef859a3a51
|
Add tests for Token Exchange
Issue gh-60
|
2 years ago |
|
Steve Riesenberg
|
2f1f45bc01
|
Token Exchange review updates
Issue gh-60
|
2 years ago |
|
Joe Grandja
|
c0446c682c
|
Polish gh-1552
|
2 years ago |
MrJovanovic13
|
2b7da9fc5a
|
Provide more flexibility on when to display consent page
Closes gh-1541
|
2 years ago |
|
Joe Grandja
|
f1e6ec1719
|
Use ClientAuthenticationMethod constants tls_client_auth and self_signed_tls_client_auth
Issue gh-1558, gh-1559, gh-1560
|
2 years ago |
|
Joe Grandja
|
b9b0bb751e
|
Add Mutual-TLS client certificate-bound access tokens
Issue gh-101
Closes gh-1560
|
2 years ago |
|
Joe Grandja
|
79fe240d1e
|
Add self-signed certificate Mutual-TLS client authentication method
Issue gh-101
Closes gh-1559
|
2 years ago |
|
Joe Grandja
|
a7035d22bd
|
Update PKCE validation
|
2 years ago |
|
Steve Riesenberg
|
a483db676d
|
Temporarily remove validation logic for jwt token-type
Issue gh-60
|
2 years ago |
|
Steve Riesenberg
|
ddb2cd43ed
|
Use constants from Spring Security 6.3
Issue gh-60
Issue gh-1562
|
2 years ago |
|
Joe Grandja
|
682c1f936e
|
Add PKI Mutual-TLS client authentication method
Issue gh-101
Closes gh-1558
|
2 years ago |
|
Steve Riesenberg
|
726096613d
|
Add token-exchange to grant_types_supported
Issue gh-1525
|
2 years ago |
|
Steve Riesenberg
|
25a785de49
|
Add support for OAuth 2.0 Token Exchange Grant
Issue gh-60
|
2 years ago |
|
Joe Grandja
|
49b199c5b4
|
Polish gh-1429
|
2 years ago |
Dmitriy Dubson
|
d4ae69bfa8
|
Add ability to customize the access token response
Issue gh-925
Closes gh-1429
|
2 years ago |
|
Joe Grandja
|
cce5b3871f
|
Polish gh-1467
|
2 years ago |
smallbun
|
6638181f46
|
Improve logging
Closes gh-1467
|
2 years ago |
|
Joe Grandja
|
9757e33f09
|
Polish gh-1377
|
2 years ago |
adamleantech
|
5c3f1cb691
|
Allow configurable scope validation strategy in OAuth2ClientCredentialsAuthenticationProvider
Closes gh-1377
|
2 years ago |
|
Joe Grandja
|
168077be24
|
Add support for multiple issuers per host using the path component
Closes gh-1342
|
2 years ago |
|
Joe Grandja
|
faad0be153
|
Add test for refresh_token grant with public client
Related gh-1432
|
2 years ago |
|
Joe Grandja
|
4e56073b06
|
Bump next minor version
|
2 years ago |
|
Joe Grandja
|
2aaf6121c3
|
Fix tests
Related gh-1468
|
2 years ago |
|
Joe Grandja
|
c86ddacbca
|
Additional polish gh-1468
|
2 years ago |
|
Joe Grandja
|
f0a6a4c0bf
|
Polish gh-1468
|
2 years ago |
Greg Li
|
4bc0df5ef8
|
Fix to ensure endpoints distinguish between form and query parameters
Closes gh-1451
|
2 years ago |
|
Joe Grandja
|
fb9a13b0ff
|
Allow expired ID tokens on RP-initiated logout
Closes gh-1440
|
2 years ago |
|
Joe Grandja
|
639fe93544
|
Remove unused OAuth2EndpointUtils
|
2 years ago |
|
Joe Grandja
|
30d6129117
|
Revert "Issuer should not support path component"
This reverts commit c3f86d11f86594b6dcff83cfa49bd10e574db8b3.
|
2 years ago |
|
Joe Grandja
|
d52edb8f76
|
Update javadoc for JDBC implementations
|
2 years ago |
|
Joe Grandja
|
7f1cde0117
|
Polish gh-1446
|
2 years ago |
Josh Long
|
0c4df7f419
|
Move AOT hints to main module
Closes gh-1446
|
2 years ago |
|
Joe Grandja
|
a25029e487
|
Add test for requesting refresh_token with offline_access scope
Related gh-1422
|
2 years ago |
|
Joe Grandja
|
71d923575a
|
Allow configurable refresh token strategy for authorization_code grant
Closes gh-1430
|
2 years ago |
Martin Bogusz
|
8f6593ab2a
|
Set default timeout when fetching JWKSet for private_key_jwt
Closes gh-1413
|
2 years ago |
|
Joe Grandja
|
c3f86d11f8
|
Issuer should not support path component
Closes gh-1435
|
2 years ago |
|
Joe Grandja
|
5286affbfe
|
Fix tests for OAuth2 Authorization Server Metadata Endpoint
Closes gh-1419
|
3 years ago |
|
Joe Grandja
|
b0862336d3
|
Fix tests for OIDC Provider Configuration Endpoint
Closes gh-1416
|
3 years ago |
|
Joe Grandja
|
8f2ea490ad
|
Add jti claim to generated JWT
Closes gh-1360
|
3 years ago |
|
Joe Grandja
|
8c08d7b4d7
|
Polish gh-1384
|
3 years ago |
|
Dmitriy Dubson
|
96c90dded7
|
Add OAuth2ErrorAuthenticationFailureHandler
Related gh-1369
Closes gh-1384
|
3 years ago |
|
Joe Grandja
|
75c3a52788
|
Client credentials are not allowed in query parameters
Closes gh-1378
|
3 years ago |
|
Joe Grandja
|
6d21a65ff4
|
Polish gh-1345
|
3 years ago |
Yuta Saito
|
9109d3714b
|
Fix to return hashed client_secret when registering with client_secret_jwt
Closes gh-1344
|
3 years ago |
Tuxzx
|
5fe955afee
|
Add code challenge methods for oidc provider configuration response
Closes gh-1302
|
3 years ago |
|
Joe Grandja
|
05f1371668
|
Polish gh-1326
|
3 years ago |
Dmitriy Dubson
|
3de6a7dfd1
|
Adds ability to inject custom metadata at client registration
Closes gh-1172
|
3 years ago |
Steve Riesenberg
|
215c101c3d
|
Polish gh-1309
|
3 years ago |
|
Martin Bogusz
|
82b70595ad
|
Fix userCode validation
Issue gh-44
|
3 years ago |
