Commit Graph

Select branches

Hide Pull Requests

main

read-signing-key-from-file

#1

#3

#4

#6

#7

#8

Mono Color

• fb3ad6f8ab
  
  Include entitlements in UserInfo and ID token (#8) main Andreas Svanberg 2025-05-12 14:33:47 +02:00
• 7c132395a2
  
  Include entitlements claim in user info response Andreas Svanberg 2025-05-12 13:30:04 +02:00
• cee61c73ee
  
  Include entitlements in id token Andreas Svanberg 2025-05-08 17:22:30 +02:00
• e6e5c8570e
  
  Fix encoding issues of Shibboleth attributes (#7) Andreas Svanberg 2025-05-12 10:44:07 +02:00
• 0b0171ddf7
  
  Fix encoding issues of Shibboleth attributes Andreas Svanberg 2025-05-12 10:21:07 +02:00
• bd9227d4f1
  
  Allow clients to authenticate using form post (#6) Andreas Svanberg 2025-05-08 15:58:13 +02:00
• e9a82c0135
  
  Allow clients to authenticate using form post Andreas Svanberg 2025-05-08 15:16:10 +02:00
• 8cde02be4f
  
  Allow reading JWT signing key from PEM-encoded PKCS8 file read-signing-key-from-file Andreas Svanberg 2025-05-07 14:29:21 +02:00
• 1d469c7346
  
  Autofocus the custom principal field during developer authorization flow Andreas Svanberg 2025-04-29 20:10:21 +02:00
• 20cd09737d
  
  Include your own entitlements during custom authorization flow Andreas Svanberg 2025-04-28 16:27:40 +02:00
• 360119ad6a
  
  Generate a client secret when a public client goes private Andreas Svanberg 2025-04-25 10:56:27 +02:00
• 18945e22bf
  
  Support for user consent (#4) Andreas Svanberg 2025-04-25 10:18:13 +02:00
• c48eee489b
  
  Allow everyone to register clients Andreas Svanberg 2025-04-24 16:35:03 +02:00
• 29924e6d42
  
  Show exactly what personal information is being asked for during consent Andreas Svanberg 2025-04-24 16:30:59 +02:00
• 31cd05b12e
  
  Handle denying consent Andreas Svanberg 2025-04-24 16:17:45 +02:00
• e79387bc2e
  
  Persist granted user consent Andreas Svanberg 2025-04-23 23:47:27 +02:00
• 2ebf8c649d
  
  Handle consent token coming back during custom authorization flow Andreas Svanberg 2025-04-23 17:12:16 +02:00
• f1fbd306e2
  
  Skip consent for developers in staging Andreas Svanberg 2025-04-23 17:10:13 +02:00
• 119e27f5da
  
  Do not ask for consent for "openid" scope Andreas Svanberg 2025-04-23 12:50:50 +02:00
• efcfddaa70
  
  Expand on what each scope means during user consent Andreas Svanberg 2025-04-23 12:27:01 +02:00
• e826ce523d
  
  Add proper tests for the consent page Andreas Svanberg 2025-04-22 15:29:35 +02:00
• 0c55c25abf
  
  Add consent page (GUI) Andreas Svanberg 2025-04-22 00:35:54 +02:00
• c8f28d8283
  
  Add consent page Andreas Svanberg 2025-04-22 00:08:03 +02:00
• 1b08cdaf44
  
  Test for authorization code flow with consent Andreas Svanberg 2025-04-16 21:10:05 +02:00
• ea5c3a1c00
  
  Support for configuring end user consent requirement for clients Andreas Svanberg 2025-04-16 16:34:34 +02:00
• 8307bc4906
  
  Verify public clients are not issued refresh tokens Andreas Svanberg 2025-04-15 14:42:12 +02:00
• 3822f1229c
  
  Change the OAuth 2 / OIDC endpoint URLs. Andreas Svanberg 2025-04-15 14:32:56 +02:00
• 09f2fe9430
  
  Change the default JTE templates to be pre-compiled and switch to development mode only in the "dev" profile. Andreas Svanberg 2025-04-15 13:50:40 +02:00
• 14f7ca66cb
  
  Utilize X-Forwarded-* headers in embedded Docker container Andreas Svanberg 2025-04-08 22:48:57 +02:00
• 1a2a84f674
  
  Immediately show authorization request errors before showing the custom authorization form Andreas Svanberg 2025-04-02 00:37:42 +02:00
• 857d59d391
  
  Better error handling, especially during developer authorization Andreas Svanberg 2025-04-02 00:16:52 +02:00
• c421125eb4
  
  Fix Shibboleth/Tomcat providing a principal with a blank name in the unauthenticated case Andreas Svanberg 2025-04-01 20:11:08 +02:00
• 71862afb55
  
  Introduce a training run in the Docker build to speed it up Andreas Svanberg 2025-03-28 15:51:24 +01:00
• c9559ca930
  
  Edit clients Andreas Svanberg 2025-03-28 13:27:06 +01:00
• a4f99f1b29
  
  WAR file is never executed but rather deployed to an application server Andreas Svanberg 2025-03-28 12:49:13 +01:00
• 9a6e21a396
  
  Persist tokens between restarts Andreas Svanberg 2025-03-28 11:58:35 +01:00
• f0947c5ff8
  
  Remove accidental port mapping Andreas Svanberg 2025-03-28 11:39:46 +01:00
• 0bb0cff7ca
  
  Build on push Andreas Svanberg 2025-03-27 15:07:33 +01:00
• 2c6716865b
  
  Allow setting custom entitlements Andreas Svanberg 2025-03-27 15:03:45 +01:00
• 7fd46e88fe
  
  Handle client redirect URI being null Andreas Svanberg 2025-03-27 00:34:27 +01:00
• 9e8962c909
  
  Migrate data from old authorization server Andreas Svanberg 2025-03-26 14:32:43 +01:00
• 87d6bd594c Provide an embedded Docker container for local development (#1) Andreas Svanberg 2025-03-26 18:51:20 +01:00
• 806de61859
  
  Minor cleanup Andreas Svanberg 2025-03-26 18:49:40 +01:00
• 016f4d226b
  
  Fix client ownership in embedded container Andreas Svanberg 2025-03-26 18:44:18 +01:00
• 77ca199b59
  
  Small improvement to the layering of the Dockerfile Andreas Svanberg 2025-03-26 18:39:50 +01:00
• c30ed02659
  
  Fix trying to modify immutable collection Andreas Svanberg 2025-03-26 18:38:51 +01:00
• 220a8a454d
  
  Prevent session cookie conflicts on localhost Andreas Svanberg 2025-03-26 18:33:36 +01:00
• 0f03bbca52
  
  Fix null scope Andreas Svanberg 2025-03-26 16:42:47 +01:00
• ed0c510638
  
  Add example how to use the embedded container Andreas Svanberg 2025-03-26 16:42:04 +01:00
• 800748094e
  
  Test the behaviour of the embedded container Andreas Svanberg 2025-03-26 13:45:43 +01:00
• 5cfbaa6535
  
  Working Docker container Andreas Svanberg 2025-03-26 12:49:31 +01:00
• 6039d6b34b
  
  Refactor out storage specifics from the ClientManager Andreas Svanberg 2025-03-26 11:05:41 +01:00
• 411bba57b2
  
  Better description about the ways to verify tokens to let developer decide based on characteristics Andreas Svanberg 2025-03-25 19:47:16 +01:00
• 464031bd17
  
  Fix HTTP header name Andreas Svanberg 2025-03-25 19:33:39 +01:00
• bb8c0a2e60
  
  General OAuth 2.0 documentation Andreas Svanberg 2025-03-25 15:28:44 +01:00
• becbcec39f
  
  Upgrade Spring Boot version Andreas Svanberg 2025-03-25 12:59:02 +01:00
• 245585c3d8
  
  Add development instructions Andreas Svanberg 2025-03-25 12:57:42 +01:00
• fbca82d17e
  
  Lower required Java version Andreas Svanberg 2025-03-25 12:57:31 +01:00
• a9f8f5bd53
  
  Fix +x flag on mvnw Andreas Svanberg 2025-03-25 11:44:14 +01:00
• cefb4af44d
  
  Include end user's entitlements (public information) in the access token Andreas Svanberg 2025-03-24 23:05:27 +01:00
• 0d78322828
  
  Move UserInfo endpoint for compatibility with old authorization server Andreas Svanberg 2025-03-24 00:15:12 +01:00
• 54afb20c4d
  
  Allow a persistent RSA key pair to be used for signing Andreas Svanberg 2025-03-22 17:47:32 +01:00
• 95ee6e77d7
  
  Add and remove additional client owners Andreas Svanberg 2025-03-22 16:45:35 +01:00
• 8578984e6e
  
  Support resource servers using token introspection Andreas Svanberg 2025-03-22 15:35:24 +01:00
• ef56e5c4b5
  
  Fix public client code flow Andreas Svanberg 2025-03-22 13:25:34 +01:00
• 90218e988b
  
  Improved navigation by adding a breadcrumb Andreas Svanberg 2025-03-22 12:22:27 +01:00
• 71e82e0020
  
  Display currently registered clients Andreas Svanberg 2025-03-22 12:21:46 +01:00
• 68660f96a4
  
  Register new clients Andreas Svanberg 2025-03-22 11:55:49 +01:00
• 0f5a79f7b9
  
  Fully populate all attributes as the fake user during development Andreas Svanberg 2025-03-21 19:21:56 +01:00
• 90a104ca8c
  
  Remove duplicate label/input names Andreas Svanberg 2025-03-21 19:15:25 +01:00
• 83cb7dff7c
  
  Improve developer experience when editing custom authorization template Andreas Svanberg 2025-03-21 19:12:47 +01:00
• 18762df791
  
  Extract base template for pages Andreas Svanberg 2025-03-21 17:03:57 +01:00
• d59f1ac057
  
  Add custom flow HTML page Andreas Svanberg 2025-03-21 16:37:42 +01:00
• abd9207486
  
  Improve validation of OAuth 2 authorization parameters in custom flow Andreas Svanberg 2025-03-21 15:04:55 +01:00
• 5e6e5633d1
  
  Fix authorization URL in custom flow Andreas Svanberg 2025-03-21 14:48:27 +01:00
• 253161bd8e
  
  Allow customizing the id token in the custom authorization flow Andreas Svanberg 2025-03-21 12:28:41 +01:00
• ae64f40048
  
  dev profile allows custom authorization Andreas Svanberg 2025-03-20 23:14:30 +01:00
• b1cdb1200a
  
  Let spring-boot-docker-compose automatically connect to the database Andreas Svanberg 2025-03-20 23:03:24 +01:00
• a7e51c303c
  
  dev profile gives admin access Andreas Svanberg 2025-03-20 23:00:48 +01:00
• ef99fbcc02
  
  Add email claims to id token if email scope is authorized Andreas Svanberg 2025-03-20 21:15:32 +01:00
• 955b83fa64
  
  Only populate id token email claims if email scope is authorized Andreas Svanberg 2025-03-20 21:13:36 +01:00
• 105c75589f
  
  Populate all profile claims that are available Andreas Svanberg 2025-03-20 21:10:28 +01:00
• 2eebb42168
  
  Only populate id token profile claims if profile scope is authorized Andreas Svanberg 2025-03-20 21:02:33 +01:00
• bb888757e5
  
  Allow falling through to regular authorization flow Andreas Svanberg 2025-03-20 20:21:25 +01:00
• c88fc24503
  
  Factor out authorization code flow test infrastructure Andreas Svanberg 2025-03-19 19:35:18 +01:00
• 2d16035228
  
  Id token tests Andreas Svanberg 2025-03-19 18:21:25 +01:00
• 91239cbd6e
  
  Developer custom authorization Andreas Svanberg 2025-03-19 17:03:51 +01:00
• 05e65526ce
  
  Support normal authorization flow for non-developers in staging environment Andreas Svanberg 2025-03-19 00:03:33 +01:00
• 74eadefe3c
  
  Refactor out duplicated code Andreas Svanberg 2025-03-16 19:30:12 +01:00
• eb87378376
  
  Test authorization flow using metadata information (RFC 8414) Andreas Svanberg 2025-03-15 23:22:13 +01:00
• 27abcb2b25
  
  Move OAuth 2 endpoints to be compatible with current authorization server Andreas Svanberg 2025-03-13 22:07:34 +01:00
• 62ad894876
  
  Test for the entire authorization code flow Andreas Svanberg 2025-03-13 21:36:06 +01:00
• fff5812913
  
  Turn on OIDC with data from Shibboleth Andreas Svanberg 2025-01-22 22:14:51 +01:00
• 4867bd24da
  
  Upgrade to Spring Boot 3.4 Andreas Svanberg 2025-01-22 22:05:14 +01:00
• 1fb5e99453
  
  Use Spring Boot built-in Docker compose support Andreas Svanberg 2025-01-22 21:31:48 +01:00
• 2132ca21f3
  
  Rename to authentication details Andreas Svanberg 2025-01-22 19:35:45 +01:00
• 525d33ed01
  
  Protected admin section Andreas Svanberg 2024-09-12 17:40:50 +02:00
• 3b52882037
  
  Remove UserDetailsService @Bean, there are no local users only pre-authenticated Andreas Svanberg 2024-09-11 21:46:54 +02:00
• 7e9c058303
  
  Always include a local profile that can be used to make specific configuration. Andreas Svanberg 2024-09-11 21:41:16 +02:00
• 7fbbb076a8
  
  Early milestone Andreas Svanberg 2024-09-11 20:28:56 +02:00