Joe Grandja
3812c0e56e
Next Development Version
2022-01-26 12:08:10 -05:00
Joe Grandja
4fbe06d121
Fix inconsistent state when authorization consent is denied
...
Closes gh-595
2022-01-26 10:23:06 -05:00
Joe Grandja
58bac49f97
JdbcOAuth2AuthorizationService improves support for large data columns
...
Closes gh-604
2022-01-26 08:00:24 -05:00
Joe Grandja
f8fdcd7ae9
Polish gh-491
2022-01-25 12:55:56 -05:00
Ovidiu Popa
66bc5a0e65
Support clob and text datatype for token columns
...
Closes gh-480
2022-01-25 12:50:03 -05:00
Joe Grandja
e175f4fda3
Revert "Increase size for attributes column"
...
This reverts commit 14cb58df2b
2022-01-25 11:00:23 -05:00
Daniel Garnier-Moiroux
a1e513b35d
Throw invalid_grant when invalid token request with PKCE
...
Closes gh-581
2022-01-24 03:35:51 -05:00
Joe Grandja
4d5b288116
Polish token revocation
...
Issue gh-490
2022-01-21 14:36:16 -05:00
Joe Grandja
362c947df1
OidcProviderConfigurationHttpMessageConverter converts userinfo_endpoint
...
Issue gh-489
2022-01-21 09:37:15 -05:00
Steve Riesenberg
5412f10ff8
Polish gh-489
2022-01-20 15:40:52 -06:00
Martin Grossi
4081d460a2
Adds userinfo_endpoint to oidc provider configuration
...
Closes gh-488
2022-01-20 15:40:52 -06:00
Joe Grandja
30d7846122
Deprecate OAuth2TokenIntrospectionClaimAccessor
...
Closes gh-597
2022-01-20 06:20:18 -05:00
Joe Grandja
1476676cec
Deprecate JwtEncoder and associated classes
...
Closes gh-596
2022-01-20 06:05:31 -05:00
Joe Grandja
d302444650
Introduce ProviderContext
...
Closes gh-479
2022-01-17 15:07:57 -05:00
Joe Grandja
f1a01597d9
Polish gh-293
2021-12-16 12:23:35 -05:00
Rafal Lewczuk
16e4f5130b
Client authentication with JWT assertion
...
Closes gh-59
2021-12-16 06:32:25 -05:00
Steve Riesenberg
13d3567eb4
Polish gh-490
2021-12-14 17:15:59 -06:00
arfatbk
a846e936e9
Allow Token Revocation to be customized
...
Signed-off-by: arfatbk <arfatbk@gmail.com >
2021-12-14 12:25:32 +05:30
Joe Grandja
d0e1107f36
HttpSessionSecurityContextRepository does not persist @Transient Authentication
...
Related https://github.com/spring-projects/spring-security/pull/9993
Closes gh-482
2021-12-07 08:02:45 -05:00
Joe Grandja
42095a6da5
Next Development Version
2021-12-01 09:12:04 -05:00
Joe Grandja
5e684fedbe
Authorization Consent request state parameter is validated
...
Closes gh-503
2021-12-01 07:55:17 -05:00
Joe Grandja
14cb58df2b
Increase size for attributes column
...
Issue gh-304
2021-11-30 13:33:48 -05:00
Ovidiu Popa
2e2c9ea286
Fix registration access token cannot be deserialized
...
Change the authorized scopes Set from SingletonSet to UnmodifiableSet as there is no mixin registered for SingletonSet
Closes gh-495
2021-11-30 13:17:06 -05:00
Joe Grandja
82e4f3a345
Introduce OidcUserInfoAuthenticationContext
...
Issue gh-441
2021-11-30 11:56:08 -05:00
Joe Grandja
9b60ed23e1
Polish OAuth2AuthorizationConsentAuthenticationContext
...
Issue gh-470
2021-11-30 06:16:01 -05:00
Joe Grandja
332d1cc318
Polish gh-492
2021-11-30 05:27:32 -05:00
Joe Grandja
8defe2eb3a
ProviderSettings @Bean is required
...
Issue gh-373
2021-11-29 02:22:21 -05:00
Joe Grandja
830f55e538
Revert "Support resolving issuer from current request"
...
This reverts commit 666d569b48
2021-11-29 01:49:26 -05:00
Joe Grandja
c418306fd9
Polish Authorization Consent Deny Request
...
Issue gh-470
2021-11-26 06:46:05 -05:00
Joe Grandja
f0b19f30d1
Deprecate PasswordEncoder in JdbcRegisteredClientRepository
...
Closes gh-496
2021-11-16 08:54:50 -05:00
Joe Grandja
666d569b48
Support resolving issuer from current request
...
Closes gh-479
2021-11-15 15:17:51 -05:00
Joe Grandja
646ea00db2
Add @since
...
Issue gh-427
2021-11-15 11:26:54 -05:00
Joe Grandja
d4357197c9
Polish gh-470
2021-11-12 11:54:59 -05:00
Steve Riesenberg
4ce999c014
Customize OAuth2AuthorizationConsent prior to saving
...
Closes gh-436
2021-11-12 11:54:59 -05:00
Joe Grandja
5fa1e8e3b1
Allow subclassing OAuth2AuthenticationContext
...
Closes gh-492
2021-11-12 11:44:57 -05:00
Joe Grandja
b455268fa1
Polish OAuth2ClientAuthenticationProviderTests
2021-11-03 12:31:38 -04:00
Joe Grandja
25c4a7d541
Polish test gh-448
2021-11-03 07:56:18 -04:00
Daniel Garnier-Moiroux
088d9a8e34
Require code_verifier if code_challenge provided
...
Closes gh-453
2021-11-03 06:52:20 -04:00
Steve Riesenberg
defd1f90b8
Polish gh-448
2021-11-02 21:35:03 -05:00
figozhang
c9954af084
Customize authenticationDetailsSource of OAuth2TokenEndpointFilter
...
Closes gh-431
2021-11-02 21:32:52 -05:00
Joe Grandja
c7f01f0795
Polish gh-427
2021-10-27 19:47:38 -04:00
Ovidiu Popa
37e45619ae
Implement Client Configuration Endpoint
...
See: https://openid.net/specs/openid-connect-registration-1_0.html#ClientConfigurationEndpoint
Generate registration_client_uri and registration_access_token when registering a new client (see: https://openid.net/specs/openid-connect-registration-1_0.html#ClientRegistration )
Closes gh-355
2021-10-25 15:00:39 -04:00
Joe Grandja
72c5e24ab8
Polish gh-441
2021-10-25 12:26:53 -04:00
Steve Riesenberg
8e8e6d1b17
Implement User Info Endpoint
...
Closes gh-176
2021-10-25 12:26:28 -04:00
Ido Salomon
9667229429
Initial implementation of User Info Endpoint
...
Issue gh-176
2021-10-25 12:25:31 -04:00
Alexey Makarov
33bac0f7c2
JdbcOAuth2AuthorizationService now uses LobCreator in findBy method
...
Closes gh-455
2021-10-21 19:54:41 -04:00
Joe Grandja
63c248440c
Fix PKCE tests in OAuth2ClientAuthenticationProviderTests
2021-10-21 18:21:15 -04:00
Steve Riesenberg
71be32b245
Add support for deserializing LinkedHashSet
...
This is needed because OAuth2ClientCredentialsAuthenticationProvider stores authorized scopes in a LinkedHashSet.
Closes gh-457
2021-10-21 11:49:54 -05:00
Sarah McAlear
4b19637fbb
Update RegisteredClient.Builder to use getters
...
- Since the class is not final, it is possible to extend it.
Because the Builder was directly accessing the properties
rather than using the getters, it was not possible to use
the .from(id) constructor in the extended class.
Closes gh-451
2021-10-14 15:27:10 -04:00
Daniel Garnier-Moiroux
26f15b99bb
Make OAuth2ClientAuthenticationToken @Transient
2021-10-14 15:17:57 -04:00
