659 Commits (930d4884f095084c4b290d02e555111768406b96)

Author SHA1 Message Date
Joe Grandja ccd79a446e Polish gh-1949 4 months ago
Joe Grandja 76ae518d56 Increase request_uri expiry for OAuth2 Pushed Authorization Request 7 months ago
Joe Grandja fe4b5ada8c Polish gh-1997 7 months ago
Antoine Lauzon ce528eed9b Check user code expiry and invalidity 7 months ago
Joe Grandja 5bf66c305d Polish logging in OAuth2ClientAuthenticationFilter 7 months ago
Joe Grandja 90e6a795c4 Add documentation for OAuth 2.0 Pushed Authorization Requests (PAR) 7 months ago
Joe Grandja 3debeb6f65 Add documentation for DPoP support 7 months ago
Joe Grandja 86b5607a03 Fix DPoP jkt claim validation during refresh_token grant for public clients 7 months ago
Joe Grandja 07f9621b02 Fix DPoP jkt claim to be JWK SHA-256 thumbprint 7 months ago
Joe Grandja 23179507d5 Use OAuth2ParameterNames.REQUEST_URI 8 months ago
Joe Grandja c624d0a908 Revert "Fix client_secret_basic authentication failures and return challenge" 8 months ago
Joe Grandja 7e41e87142 Revert "Allow customizing client authentication failures with AuthenticationEntryPoint" 8 months ago
Joe Grandja f415f2a52c Allow customizing client authentication failures with AuthenticationEntryPoint 8 months ago
Joe Grandja 42c18c856f Fix client_secret_basic authentication failures and return challenge 8 months ago
Joe Grandja 2dff08834c Add authorization server metadata for OAuth 2.0 Pushed Authorization Requests (PAR) 8 months ago
Joe Grandja 4b78a5e991 Enforce one-time use for request_uri used in PAR 8 months ago
Joe Grandja c82aace6d4 Polish tests 8 months ago
Joe Grandja 39cb9bfcea Validate expiry for request_uri used in PAR 8 months ago
Joe Grandja 5458e0855a request_uri used in PAR must be bound to the client 8 months ago
Joe Grandja 65e3a5ec9b Add authorization server metadata for DPoP support 9 months ago
Joe Grandja 48fd6ab60f Verify DPoP Proof public key during refresh_token grant for public clients 9 months ago
Joe Grandja 81c25ef6cb Fix test in OAuth2PushedAuthorizationRequestEndpointFilterTests 10 months ago
Joe Grandja 30ebf1ecc6 Polish gh-1908 10 months ago
arefbehboudi bbca6b02b7 Polish JdbcOAuth2AuthorizationService 10 months ago
Joe Grandja 5bd47b6c2d Polish gh-1907 10 months ago
arefbehboudi 2e9fe7e99e Use pattern matching 10 months ago
Joe Grandja 4337884e87 Add support for OAuth 2.0 Pushed Authorization Requests (PAR) 10 months ago
Joe Grandja 629239fde1 Polish gh-1874 10 months ago
sylvain-costanzo b0fca27c7b Support POST for authorization code request flow 10 months ago
Joe Grandja 29472a17a9 Polish gh-1889 10 months ago
Nick Holloway 8d4da24892 Fix device access token response error codes 10 months ago
Joe Grandja 779d87a279 Add support for OAuth 2.0 Demonstrating Proof of Possession (DPoP) 10 months ago
Joe Grandja bf7f4f4af9 Bump next minor version 10 months ago
Loren f1d54279e6 Replace deprecated fromHttpUrl with fromUriString 11 months ago
Loren 1f28280e7b Add Override annotation 11 months ago
Tran Ngoc Nhan d238794229 Polish diamond operator 1 year ago
Tran Ngoc Nhan ed0265bf02 Polish 1 year ago
Leon Linhart e8f627f01e Use empty map for missing additional parameters 1 year ago
Joe Grandja 572255bebe Use toLower/toUpperCase with Locale argument 1 year ago
William Koch c6c20b9dba AOT contributions will be registered for JbcOAuth2AuthorizationService subclasses 1 year ago
Max Batischev 145599b44a Replace DelegatingAuthenticationConverter with one in Spring Security 1 year ago
Joe Grandja 68300d4cf9 Polish gh-1729 1 year ago
Selene Feigl 8c297b1252 Fix verification_uri in device authorization response when context path exists 1 year ago
Joe Grandja 2c7975485f Simplify configuring authorization server using HttpSecurity.with() 1 year ago
Joe Grandja 4d1e2d9711 Polish gh-1723 1 year ago
Daniel Garnier-Moiroux acd4fd0227 Support custom validation in OidcLogoutAuthenticationProvider 1 year ago
Joe Grandja 8edbc26b18 Add convenience method for invalidating an OAuth2Token 1 year ago
Joe Grandja 82413f4a3e Fix tests 1 year ago
Joe Grandja f885df4343 Allow customizing LogoutHandler in OidcLogoutEndpointFilter 1 year ago
Joe Grandja 19dfcd4ba9 Add support for OpenID Connect 1.0 prompt=none parameter 1 year ago