a7e51c303c
dev profile gives admin access
2025-03-21 15:15:10 +01:00
ef99fbcc02
Add email claims to id token if email scope is authorized
2025-03-21 15:15:08 +01:00
955b83fa64
Only populate id token email claims if email scope is authorized
2025-03-21 15:15:07 +01:00
105c75589f
Populate all profile claims that are available
2025-03-21 15:15:05 +01:00
2eebb42168
Only populate id token profile claims if profile scope is authorized
2025-03-21 15:15:04 +01:00
bb888757e5
Allow falling through to regular authorization flow
...
Move the custom authorization filter before the regular authorization filter.
Add a Shibboleth authentication filter before both instead of relying on a redirect flow to authenticate.
2025-03-21 15:15:02 +01:00
c88fc24503
Factor out authorization code flow test infrastructure
2025-03-21 15:15:01 +01:00
2d16035228
Id token tests
2025-03-21 15:14:59 +01:00
91239cbd6e
Developer custom authorization
2025-03-21 15:14:58 +01:00
05e65526ce
Support normal authorization flow for non-developers in staging environment
2025-03-21 15:14:56 +01:00
74eadefe3c
Refactor out duplicated code
2025-03-21 15:14:55 +01:00
eb87378376
Test authorization flow using metadata information (RFC 8414)
...
Endpoint information is gathered from the metadata and token is verified using the provided JWK set.
2025-03-21 15:14:53 +01:00
27abcb2b25
Move OAuth 2 endpoints to be compatible with current authorization server
2025-03-21 15:14:52 +01:00
62ad894876
Test for the entire authorization code flow
2025-03-21 15:14:51 +01:00
fff5812913
Turn on OIDC with data from Shibboleth
2025-03-21 15:14:49 +01:00
4867bd24da
Upgrade to Spring Boot 3.4
2025-03-21 15:14:48 +01:00
1fb5e99453
Use Spring Boot built-in Docker compose support
2025-03-21 15:14:47 +01:00
2132ca21f3
Rename to authentication details
...
Better reflects what it is, details from the authentication and not some local user details.
2025-03-21 15:14:45 +01:00
525d33ed01
Protected admin section
2025-03-21 15:14:43 +01:00
3b52882037
Remove UserDetailsService @Bean, there are no local users only pre-authenticated
2025-03-21 15:14:41 +01:00
7e9c058303
Always include a local profile that can be used to make specific configuration.
...
For example during development can be used to turn on logging, in CI to attach test properties, or during deployment to attach production configuration.
The file is .gitignore'd so the file is never accidentally commited.
2025-03-21 15:14:37 +01:00
7fbbb076a8
Early milestone
...
Working OAuth 2.0 server with authentication via Shibboleth. Has a "dev" profile to simulate Shibboleth while developing.
2025-03-21 15:14:33 +01:00
