Commit Graph

275 Commits

Author SHA1 Message Date
HuiYeong
25bc45cdff Fix refresh token error code INVALID_CLIENT to INVALID_GRANT
Closes gh-1139
2023-04-06 07:53:45 -04:00
Joe Grandja
ef4c5d7b6f Allow localhost in redirect_uri
Closes gh-651
2023-04-05 15:44:54 -04:00
Joe Grandja
addd6e13d5 Polish gh-1056 2023-03-07 04:26:13 -05:00
Yuta Saito
63aa5d8933 Fix client secret encoding when client dynamically registered
Closes gh-1056
2023-03-06 17:39:36 -05:00
Joe Grandja
0cd594082e Polish authorization error response encoding
Issue gh-1011
2023-02-21 03:47:53 -05:00
Joe Grandja
30927ad5e7 Polish gh-1011 2023-02-15 16:58:28 -05:00
Andreas Fleig
26205a2d8d Preserve encoding for authorization request redirect_uri parameter
Closes gh-1011
2023-02-15 15:27:02 -05:00
Joe Grandja
1783bf7611 Polish gh-1013 2023-02-15 09:46:40 -05:00
Joe Grandja
8ed0194744 client_id authentication parameter must have printable ASCII characters
Closes gh-889
2022-11-18 14:30:06 -05:00
Joe Grandja
fcbb5c1197 Polish OAuth2AuthorizationCodeGrantTests 2022-11-16 04:27:45 -05:00
Joe Grandja
8b0e7578df Upgrade to JUnit 5
Closes gh-964
2022-11-08 11:35:27 -05:00
Joe Grandja
0e509333bc Assert unique identifiers in JdbcRegisteredClientRepository
Closes gh-959
2022-11-03 16:29:12 -04:00
Joe Grandja
6dc3944eef Add OidcClientRegistrationAuthenticationProvider.setRegisteredClientConverter()
Closes gh-696
2022-10-31 14:45:39 -04:00
Joe Grandja
4eb25c163f Polish gh-920 2022-10-31 11:56:03 -04:00
Jonah Back
356d669a78 Fix URL encoding for authorization request state parameter
Closes gh-875
2022-10-31 11:38:25 -04:00
Joe Grandja
bfd7a09c3b Polish gh-946 2022-10-28 17:36:14 -04:00
Daniel Garnier-Moiroux
efbfdc234c Improve customizing OIDC Client Registration endpoint
Related gh-696

Closes gh-946
2022-10-28 17:35:11 -04:00
Joe Grandja
2ba711c83a Polish gh-929 2022-10-28 14:23:16 -04:00
Daniel Garnier-Moiroux
8d7f8b3420 Improve customizing OIDC UserInfo endpoint
Closes gh-785
2022-10-27 13:55:02 -04:00
Joe Grandja
8c2b095195 Extract JwtDecoderFactory from JwtClientAssertionAuthenticationProvider
Closes gh-944
2022-10-27 10:12:35 -04:00
Joe Grandja
72804be45b Extract OIDC client configuration implementation
Closes gh-941
2022-10-25 15:13:14 -04:00
Joe Grandja
629e220c2f Use Boolean field for OidcUserInfo.phoneNumberVerified
Related https://github.com/spring-projects/spring-security/issues/11315

Closes gh-923
2022-10-24 14:47:48 -04:00
Joe Grandja
d7aa72af68 Disable OpenID Connect 1.0 by default
Closes gh-928
2022-10-20 09:31:49 -04:00
Joe Grandja
92dbcf29a5 Move integration tests for OidcProviderConfiguration 2022-09-20 12:25:58 -04:00
Joe Grandja
26aed3c183 Polish gh-881 2022-09-20 11:23:42 -04:00
sahariardev
cd6f1d7dc3 Return registration_endpoint when client registration is enabled
Closes gh-370
2022-09-20 11:22:45 -04:00
Joe Grandja
4d94e7095d Decompose OAuth2AuthorizationCodeRequestAuthenticationProvider
Closes gh-896
2022-09-20 06:03:32 -04:00
Joe Grandja
c326b1a2ba Remove OAuth2AuthenticationValidator
Closes gh-891
2022-09-12 16:57:22 -04:00
Joe Grandja
2cc603c7e7 Improve configurability for AuthenticationConverter and AuthenticationProvider
Closes gh-417
2022-09-07 04:29:03 -04:00
doctormacky
07d69cbfb4 Validate client secret not expired
Closes gh-850
2022-08-30 09:41:29 -04:00
Joe Grandja
502fa24cfb Polish gh-787 2022-08-30 05:58:15 -04:00
721806280
4466cbe69d Use configured ID Token signature algorithm
Closes gh-787
2022-08-30 05:19:21 -04:00
Joe Grandja
8043b8c949 Allow customizing Authorization Server Metadata Response
Closes gh-878
2022-08-29 17:06:46 -04:00
Joe Grandja
0994a1e1e1 Allow customizing OIDC Provider Configuration Response
Closes gh-616
2022-08-29 10:11:05 -04:00
Joe Grandja
2dabfa02e0 Remove constructor in OidcProviderConfigurationEndpointFilter
Closes gh-869
2022-08-23 13:57:11 -04:00
Joe Grandja
6b66719a83 Remove constructor in OAuth2AuthorizationServerMetadataEndpointFilter
Closes gh-868
2022-08-23 13:55:51 -04:00
Joe Grandja
aebc613862 Make AuthorizationServerContext an interface
Closes gh-867
2022-08-23 11:26:11 -04:00
Joe Grandja
f583668a9c Make AuthorizationServerContextFilter private
Closes gh-866
2022-08-23 11:25:46 -04:00
Joe Grandja
3efee494ad Rename ProviderContext
Closes gh-865
2022-08-23 11:25:18 -04:00
Joe Grandja
c60ae4532f Rename ProviderSettings
Closes gh-864
2022-08-23 11:24:22 -04:00
Joe Grandja
2e07ce8b8f Polish gh-738 2022-08-16 03:58:50 -04:00
yonyes
61621c5671 Default authorized scope to empty for client_credentials grant
Closes gh-780
2022-08-16 03:58:37 -04:00
Joe Grandja
6284e1dc1e Remove deprecated API usage 2022-08-01 11:47:29 -04:00
Joe Grandja
4934088593 Remove generic type from OAuth2AuthorizationServerConfigurer
Closes gh-831
2022-08-01 11:17:52 -04:00
Joe Grandja
0656fde051 Remove OAuth2Authorization.AUTHORIZED_SCOPE_ATTRIBUTE_NAME
Closes gh-829
2022-07-29 15:42:26 -04:00
Joe Grandja
83be809814 Move SpringTestRule 2022-07-29 05:35:19 -04:00
Joe Grandja
a38b66adf2 Remove unused code 2022-07-29 05:08:16 -04:00
Joe Grandja
33a78913fa Cleanup TODOs 2022-07-29 04:29:11 -04:00
Joe Grandja
f29a068b7a Rename JwtEncodingContext.getHeaders() to getJwsHeader()
Closes gh-826
2022-07-28 15:54:52 -04:00
Joe Grandja
fdda88263b Relocate OAuth2TokenFormat
Closes gh-822
2022-07-27 07:18:53 -04:00