658 Commits

Author	SHA1	Message	Date
Joe Grandja	76ae518d56	Increase request_uri expiry for OAuth2 Pushed Authorization Request ... Closes gh-2024	2025-06-04 06:10:20 -04:00
Joe Grandja	c4e8427a3a	Merge branch '1.4.x'	2025-06-03 13:24:22 -04:00
Joe Grandja	b40b265ac5	Merge branch '1.3.x' into 1.4.x	2025-06-03 13:17:30 -04:00
Joe Grandja	fe4b5ada8c	Polish gh-1997	2025-06-03 09:30:40 -04:00
Antoine Lauzon	ce528eed9b	Check user code expiry and invalidity ... Closes gh-1977 Signed-off-by: Antoine Lauzon <139174762+antoinelauzon-bell@users.noreply.github.com>	2025-06-03 09:27:27 -04:00
Joe Grandja	5bf66c305d	Polish logging in OAuth2ClientAuthenticationFilter ... Closes gh-2025	2025-06-02 13:29:23 -04:00
Joe Grandja	90e6a795c4	Add documentation for OAuth 2.0 Pushed Authorization Requests (PAR) ... Closes gh-2014	2025-05-15 11:59:21 -04:00
Joe Grandja	3debeb6f65	Add documentation for DPoP support ... Closes gh-2009	2025-05-14 19:06:01 -04:00
Joe Grandja	86b5607a03	Fix DPoP jkt claim validation during refresh_token grant for public clients ... Closes gh-2008	2025-05-14 06:16:14 -04:00
Joe Grandja	07f9621b02	Fix DPoP jkt claim to be JWK SHA-256 thumbprint ... Closes gh-2007	2025-05-13 16:37:17 -04:00
Joe Grandja	23179507d5	Use OAuth2ParameterNames.REQUEST_URI ... Issue gh-1925 Closes gh-1991	2025-04-22 06:06:31 -04:00
Joe Grandja	9dd5e2814a	Merge branch '1.4.x'	2025-04-21 21:33:45 -04:00
Joe Grandja	f43dce384d	Merge branch '1.3.x' into 1.4.x	2025-04-21 21:24:30 -04:00
Joe Grandja	c624d0a908	Revert "Fix client_secret_basic authentication failures and return challenge" ... This reverts commit 42c18c856f.	2025-04-21 21:15:05 -04:00
Joe Grandja	7e41e87142	Revert "Allow customizing client authentication failures with AuthenticationEntryPoint" ... This reverts commit f415f2a52c.	2025-04-21 21:05:05 -04:00
Joe Grandja	f415f2a52c	Allow customizing client authentication failures with AuthenticationEntryPoint ... Signed-off-by: Joe Grandja <10884212+jgrandja@users.noreply.github.com>	2025-04-18 07:46:25 -04:00
Joe Grandja	9ecfe49658	Merge branch '1.4.x'	2025-04-18 06:17:46 -04:00
Joe Grandja	f3820e5601	Merge branch '1.3.x' into 1.4.x ... Closes gh-1982	2025-04-18 06:10:21 -04:00
Joe Grandja	42c18c856f	Fix client_secret_basic authentication failures and return challenge ... Closes gh-468	2025-04-18 05:45:25 -04:00
Joe Grandja	2dff08834c	Add authorization server metadata for OAuth 2.0 Pushed Authorization Requests (PAR) ... Issue gh-1925 Closes gh-1975	2025-04-16 15:21:44 -04:00
Joe Grandja	4b78a5e991	Enforce one-time use for request_uri used in PAR ... Issue gh-1925 Closes gh-1974	2025-04-16 06:26:33 -04:00
Joe Grandja	c82aace6d4	Polish tests ... Issue gh-1925	2025-04-16 05:50:59 -04:00
Joe Grandja	39cb9bfcea	Validate expiry for request_uri used in PAR ... Issue gh-1925 Closes gh-1973	2025-04-16 05:50:58 -04:00
Joe Grandja	5458e0855a	request_uri used in PAR must be bound to the client ... Issue gh-1925 Closes gh-1971	2025-04-15 15:36:09 -04:00
Joe Grandja	65e3a5ec9b	Add authorization server metadata for DPoP support ... Issue gh-1813 Closes gh-1951	2025-03-27 06:13:33 -04:00
Joe Grandja	48fd6ab60f	Verify DPoP Proof public key during refresh_token grant for public clients ... Issue gh-1813 Closes gh-1949	2025-03-25 15:56:38 -04:00
Joe Grandja	81c25ef6cb	Fix test in OAuth2PushedAuthorizationRequestEndpointFilterTests ... Issue gh-1925	2025-03-04 07:07:38 -05:00
Joe Grandja	30ebf1ecc6	Polish gh-1908	2025-03-04 06:35:00 -05:00
arefbehboudi	bbca6b02b7	Polish JdbcOAuth2AuthorizationService ... Closes gh-1908 Signed-off-by: arefbehboudi <behboodiaref@gmail.com>	2025-03-04 06:34:01 -05:00
Joe Grandja	5bd47b6c2d	Polish gh-1907	2025-03-04 06:17:14 -05:00
arefbehboudi	2e9fe7e99e	Use pattern matching ... Closes gh-1907 Signed-off-by: arefbehboudi <behboodiaref@gmail.com>	2025-03-04 06:17:13 -05:00
Joe Grandja	4337884e87	Add support for OAuth 2.0 Pushed Authorization Requests (PAR) ... Closes gh-210 Signed-off-by: Joe Grandja <10884212+jgrandja@users.noreply.github.com>	2025-03-03 20:37:06 -05:00
Joe Grandja	629239fde1	Polish gh-1874	2025-02-24 14:41:17 -05:00
sylvain-costanzo	b0fca27c7b	Support POST for authorization code request flow ... Closes gh-1811 Signed-off-by: sylvain-costanzo <sylvain.costanzo1@decathlon.com>	2025-02-24 12:06:38 -05:00
Joe Grandja	a5ce97fefe	Merge branch '1.4.x'	2025-02-14 12:09:28 -05:00
Joe Grandja	ded6faae76	Merge branch '1.3.x' into 1.4.x	2025-02-14 12:04:06 -05:00
Joe Grandja	29472a17a9	Polish gh-1889	2025-02-14 11:41:51 -05:00
Nick Holloway	8d4da24892	Fix device access token response error codes ... Closes gh-1885 Signed-off-by: Nick Holloway <nick.holloway@pyrites.org.uk>	2025-02-14 11:39:08 -05:00
Joe Grandja	779d87a279	Add support for OAuth 2.0 Demonstrating Proof of Possession (DPoP) ... Closes gh-1813	2025-02-14 05:44:30 -05:00
Joe Grandja	bf7f4f4af9	Bump next minor version	2025-02-11 15:51:26 -05:00
Loren	f1d54279e6	Replace deprecated fromHttpUrl with fromUriString ... Closes gh-1883 Signed-off-by: Loren <cn.luowenjie@qq.com>	2025-01-21 09:20:05 -05:00
Loren	1f28280e7b	Add Override annotation ... Closes gh-1878 Signed-off-by: Loren <cn.luowenjie@qq.com>	2025-01-21 09:05:55 -05:00
Tran Ngoc Nhan	d238794229	Polish diamond operator ... Closes gh-1848	2024-12-11 16:05:04 -05:00
Tran Ngoc Nhan	ed0265bf02	Polish ... Closes gh-1842	2024-11-29 11:38:04 -05:00
Leon Linhart	e8f627f01e	Use empty map for missing additional parameters ... Closes gh-1826	2024-11-29 11:23:26 -05:00
Joe Grandja	0d2dac20af	Merge branch '1.3.x'	2024-10-25 12:05:15 -04:00
Joe Grandja	92f7371021	Merge branch '1.2.x' into 1.3.x ... Closes gh-1791	2024-10-25 12:02:25 -04:00
Joe Grandja	572255bebe	Use toLower/toUpperCase with Locale argument ... Closes gh-1790	2024-10-25 12:01:30 -04:00
Joe Grandja	a8d3960b97	Merge branch '1.3.x'	2024-10-21 15:17:23 -04:00
Joe Grandja	a60b1f65ee	Merge branch '1.2.x' into 1.3.x ... Closes gh-1782	2024-10-21 15:13:29 -04:00