Spring/spring-authorization-server
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
1,023 Commits 8 Branches 0 Tags
056fe502e241663ee70f7d3c1a888e7be4f5ab2b
Commit Graph

477 Commits

Author SHA1 Message Date
Joe Grandja
ae016cdde4 Merge branch '1.0.x' into 1.1.x 
Closes gh-1390
 2023-10-16 07:31:25 -04:00
Joe Grandja
ec32aa9138 Merge branch '0.4.x' into 1.0.x 
Closes gh-1389
 2023-10-16 07:26:00 -04:00
Joe Grandja
75c3a52788 Client credentials are not allowed in query parameters 
Closes gh-1378
 2023-10-16 07:15:16 -04:00
Joe Grandja
0c4dcf5ff2 Merge branch '1.0.x' into 1.1.x 
Closes gh-1383
 2023-10-11 13:07:40 -04:00
Joe Grandja
88447bd608 Merge branch '0.4.x' into 1.0.x 
Closes gh-1382
 2023-10-11 12:38:58 -04:00
Joe Grandja
6d21a65ff4 Polish gh-1345 2023-10-11 12:20:57 -04:00
Yuta Saito
9109d3714b Fix to return hashed client_secret when registering with client_secret_jwt 
Closes gh-1344
 2023-10-11 11:53:13 -04:00
Steve Riesenberg
215c101c3d Polish gh-1309 2023-07-27 14:03:01 -05:00
Martin Bogusz
82b70595ad Fix userCode validation 
Issue gh-44
 2023-07-27 14:03:00 -05:00
Joe Grandja
2895169b30 Polish gh-1289 2023-06-30 06:27:26 -04:00
cbilodeau
b6f3b5cc45 Fix generating ID token with null sid when refresh_token grant 
Closes gh-1283
 2023-06-30 06:24:20 -04:00
Joe Grandja
1cffa18c32 Polish gh-1252 2023-06-16 11:58:22 -04:00
Martin Lindström
980d75325a Fix to save all values for multi-valued device grant parameters 
Fixes gh-1269
 2023-06-16 11:57:34 -04:00
Joe Grandja
b39771d8b5 Merge branch '1.0.x' into 1.1.x 
Closes gh-1268
 2023-06-16 10:59:37 -04:00
Joe Grandja
b713d30203 Merge branch '0.4.x' into 1.0.x 
Closes gh-1267
 2023-06-16 10:53:35 -04:00
Joe Grandja
2b3b5d2531 Polish gh-1252 2023-06-16 10:27:44 -04:00
Martin Lindström
890b1ef0ed Fix to save all values for multi-valued request parameters 
Fixes gh-1250
 2023-06-16 06:11:01 -04:00
Joe Grandja
bdc0b4de5f Polish gh-1233 2023-06-15 15:55:00 -04:00
Pavel Efros
6e1ed9fd87 Fix NPE on access token in OAuth2AuthorizationCodeAuthenticationProvider 
Closes gh-1233
 2023-06-15 15:53:49 -04:00
Joe Grandja
27a893fbee Validate authorized principal instead of sub during logout 
Closes gh-1235
 2023-05-29 11:15:15 -04:00
heartape
a73181153d Use substring instead of replaceFirst in OAuth2AuthorizationConsent 
Closes gh-1222
 2023-05-29 09:17:53 -04:00
Joe Grandja
00c114cc12 ID Token contains sid claim after refresh_token grant 
Closes gh-1224
 2023-05-26 16:02:16 -04:00
Joe Grandja
878a75d6ed Revert serialVersionUID to 1.1.0 
Closes gh-1220
 2023-05-19 15:51:36 -04:00
Joe Grandja
04da0129f9 Revert serialVersionUID to 1.0.0 
Closes gh-1219
 2023-05-19 15:29:53 -04:00
Joe Grandja
4bb741b0ba Revert serialVersionUID to 0.4.0 
Closes gh-1218
 2023-05-19 14:50:28 -04:00
Joe Grandja
6eeca49428 Next Development Version 2023-05-16 13:00:27 -04:00
Steve Riesenberg
2f6de73a06 Polish tests 2023-05-12 15:06:47 -05:00
Joe Grandja
a70783e6e7 Hash the sid claim in the ID Token 
Closes gh-1207
 2023-05-10 13:46:20 -04:00
Joe Grandja
64ddcfc3ec Polish gh-1152 2023-05-09 09:42:28 -04:00
neochae
51317141b9 Invalidate tokens previously issued when code is reused 
Closes gh-1152
 2023-05-09 09:41:15 -04:00
Steve Riesenberg
e0340f7b81 Add integration tests for device grant 
Issue gh-1116
 2023-05-02 11:08:32 -05:00
Joe Grandja
b6ff06d6fe Add test for dynamic client registration with custom metadata 
Issue gh-1172
 2023-04-24 12:05:46 -04:00
Joe Grandja
5b2b42f71c Next Development Version 2023-04-18 07:14:59 -04:00
Joe Grandja
089096a835 Next Development Version 2023-04-18 06:56:49 -04:00
Joe Grandja
213048b780 Polish gh-1127 2023-04-13 10:53:42 -04:00
Steve Riesenberg
13a61034ed Add tests and update examples in docs 
Closes gh-1156
 2023-04-12 09:39:27 -05:00
Steve Riesenberg
5c6879d979 Polish gh-1143 2023-04-12 09:20:20 -05:00
Xu Xiaowei
cf7ecc161d JDBC device_code authorization 
Issue gh-1156
 2023-04-12 09:20:18 -05:00
Steve Riesenberg
8e04da773d Add tests for OAuth 2.0 Device Authorization Grant 
This commit adds tests for the following components:
* AuthenticationConverters
* AuthenticationProviders
* Endpoint Filters

Issue gh-44
Closes gh-1127
 2023-04-11 14:59:45 -05:00
Steve Riesenberg
1bfc54fe6a Do not require authorizationRequest for device grant 
Issue gh-1127
 2023-04-11 13:41:35 -05:00
Joe Grandja
8c63c7dbaf Merge branch '1.0.x' 2023-04-06 08:05:22 -04:00
Joe Grandja
e134b77e2c Merge branch '0.4.x' into 1.0.x 
Closes gh-1153
 2023-04-06 08:01:34 -04:00
HuiYeong
25bc45cdff Fix refresh token error code INVALID_CLIENT to INVALID_GRANT 
Closes gh-1139
 2023-04-06 07:53:45 -04:00
Joe Grandja
2a69bcfeeb Merge branch '1.0.x' 2023-04-05 17:27:45 -04:00
Joe Grandja
fa7b44e61d Merge branch '0.4.x' into 1.0.x 
Closes gh-1150
 2023-04-05 17:19:17 -04:00
Joe Grandja
ef4c5d7b6f Allow localhost in redirect_uri 
Closes gh-651
 2023-04-05 15:44:54 -04:00
Joe Grandja
597abe18c3 Ensure ID Token is active before processing logout request 
Issue gh-1077
 2023-03-30 12:30:01 -04:00
Joe Grandja
3b1958e4df Add OidcLogoutAuthenticationToken.isPrincipalAuthenticated() 
Issue gh-1077
 2023-03-30 11:19:23 -04:00
Joe Grandja
5f39c85264 Polish gh-1068 
Issue gh-1077
 2023-03-30 09:19:04 -04:00
Joe Grandja
5b690dfb3a Avoid persisting client principal in device authorization request 
Issue gh-1106
 2023-03-27 11:49:11 -04:00