Commit Graph

Select branches

Hide Pull Requests

main

read-signing-key-from-file

spring-boot-4

spring-boot-4-2

#1

#12

#14

#17

#3

#4

#6

#7

#8

v1

v2

Mono Color

• bc4dbaf5f7 Database index for looking up authorizations by any attribute main Andreas Svanberg 2026-02-23 13:59:47 +01:00
• 1aa1532ce7 Automatically publish container images on tag push (#17) v2 Andreas Svanberg 2026-02-18 21:47:24 +01:00
• d177664137 Upgrade to Spring Boot 3.5.11 Andreas Svanberg 2026-02-20 09:39:20 +01:00
• e20d7e7dd4 Enable public clients to exchange codes for access tokens (#14) Andreas Svanberg 2026-01-26 13:18:51 +01:00
• 702bcda756 Agent proposed changes spring-boot-4-2 nenzen 2026-02-19 20:40:41 +01:00
• 9863daf08c Upgrade to Spring Boot 4 spring-boot-4 Andreas Svanberg 2026-02-19 16:16:44 +01:00
• a74f354830 Speed up client and authorization lookup with database indexes (#12) Andreas Svanberg 2026-01-13 14:45:52 +01:00
• fb3ad6f8ab Include entitlements in UserInfo and ID token (#8) v1 Andreas Svanberg 2025-05-12 14:33:47 +02:00
• e6e5c8570e Fix encoding issues of Shibboleth attributes (#7) Andreas Svanberg 2025-05-12 10:44:07 +02:00
• bd9227d4f1 Allow clients to authenticate using form post (#6) Andreas Svanberg 2025-05-08 15:58:13 +02:00
• 8cde02be4f Allow reading JWT signing key from PEM-encoded PKCS8 file read-signing-key-from-file Andreas Svanberg 2025-05-07 14:29:21 +02:00
• 1d469c7346 Autofocus the custom principal field during developer authorization flow Andreas Svanberg 2025-04-29 20:10:21 +02:00
• 20cd09737d Include your own entitlements during custom authorization flow Andreas Svanberg 2025-04-28 16:27:40 +02:00
• 360119ad6a Generate a client secret when a public client goes private Andreas Svanberg 2025-04-25 10:56:27 +02:00
• 18945e22bf Support for user consent (#4) Andreas Svanberg 2025-04-25 10:18:13 +02:00
• 8307bc4906 Verify public clients are not issued refresh tokens Andreas Svanberg 2025-04-15 14:42:12 +02:00
• 3822f1229c Change the OAuth 2 / OIDC endpoint URLs. Andreas Svanberg 2025-04-15 14:32:56 +02:00
• 09f2fe9430 Change the default JTE templates to be pre-compiled and switch to development mode only in the "dev" profile. Andreas Svanberg 2025-04-15 13:50:40 +02:00
• 14f7ca66cb Utilize X-Forwarded-* headers in embedded Docker container Andreas Svanberg 2025-04-08 22:48:57 +02:00
• 1a2a84f674 Immediately show authorization request errors before showing the custom authorization form Andreas Svanberg 2025-04-02 00:37:42 +02:00
• 857d59d391 Better error handling, especially during developer authorization Andreas Svanberg 2025-04-02 00:16:52 +02:00
• c421125eb4 Fix Shibboleth/Tomcat providing a principal with a blank name in the unauthenticated case Andreas Svanberg 2025-04-01 20:11:08 +02:00
• 71862afb55 Introduce a training run in the Docker build to speed it up Andreas Svanberg 2025-03-28 15:51:24 +01:00
• c9559ca930 Edit clients Andreas Svanberg 2025-03-28 13:27:06 +01:00
• a4f99f1b29 WAR file is never executed but rather deployed to an application server Andreas Svanberg 2025-03-28 12:49:13 +01:00
• 9a6e21a396 Persist tokens between restarts Andreas Svanberg 2025-03-28 11:58:35 +01:00
• f0947c5ff8 Remove accidental port mapping Andreas Svanberg 2025-03-28 11:39:46 +01:00
• 0bb0cff7ca Build on push Andreas Svanberg 2025-03-27 15:07:33 +01:00
• 2c6716865b Allow setting custom entitlements Andreas Svanberg 2025-03-27 15:03:45 +01:00
• 7fd46e88fe Handle client redirect URI being null Andreas Svanberg 2025-03-27 00:34:27 +01:00
• 9e8962c909 Migrate data from old authorization server Andreas Svanberg 2025-03-26 14:32:43 +01:00
• 87d6bd594c Provide an embedded Docker container for local development (#1) Andreas Svanberg 2025-03-26 18:51:20 +01:00
• 411bba57b2 Better description about the ways to verify tokens to let developer decide based on characteristics Andreas Svanberg 2025-03-25 19:47:16 +01:00
• 464031bd17 Fix HTTP header name Andreas Svanberg 2025-03-25 19:33:39 +01:00
• bb8c0a2e60 General OAuth 2.0 documentation Andreas Svanberg 2025-03-25 15:28:44 +01:00
• becbcec39f Upgrade Spring Boot version Andreas Svanberg 2025-03-25 12:59:02 +01:00
• 245585c3d8 Add development instructions Andreas Svanberg 2025-03-25 12:57:42 +01:00
• fbca82d17e Lower required Java version Andreas Svanberg 2025-03-25 12:57:31 +01:00
• a9f8f5bd53 Fix +x flag on mvnw Andreas Svanberg 2025-03-25 11:44:14 +01:00
• cefb4af44d Include end user's entitlements (public information) in the access token Andreas Svanberg 2025-03-24 23:05:27 +01:00
• 0d78322828 Move UserInfo endpoint for compatibility with old authorization server Andreas Svanberg 2025-03-24 00:15:12 +01:00
• 54afb20c4d Allow a persistent RSA key pair to be used for signing Andreas Svanberg 2025-03-22 17:47:32 +01:00
• 95ee6e77d7 Add and remove additional client owners Andreas Svanberg 2025-03-22 16:45:35 +01:00
• 8578984e6e Support resource servers using token introspection Andreas Svanberg 2025-03-22 15:35:24 +01:00
• ef56e5c4b5 Fix public client code flow Andreas Svanberg 2025-03-22 13:25:34 +01:00
• 90218e988b Improved navigation by adding a breadcrumb Andreas Svanberg 2025-03-22 12:22:27 +01:00
• 71e82e0020 Display currently registered clients Andreas Svanberg 2025-03-22 12:21:46 +01:00
• 68660f96a4 Register new clients Andreas Svanberg 2025-03-22 11:55:49 +01:00
• 0f5a79f7b9 Fully populate all attributes as the fake user during development Andreas Svanberg 2025-03-21 19:21:56 +01:00
• 90a104ca8c Remove duplicate label/input names Andreas Svanberg 2025-03-21 19:15:25 +01:00
• 83cb7dff7c Improve developer experience when editing custom authorization template Andreas Svanberg 2025-03-21 19:12:47 +01:00
• 18762df791 Extract base template for pages Andreas Svanberg 2025-03-21 17:03:57 +01:00
• d59f1ac057 Add custom flow HTML page Andreas Svanberg 2025-03-21 16:37:42 +01:00
• abd9207486 Improve validation of OAuth 2 authorization parameters in custom flow Andreas Svanberg 2025-03-21 15:04:55 +01:00
• 5e6e5633d1 Fix authorization URL in custom flow Andreas Svanberg 2025-03-21 14:48:27 +01:00
• 253161bd8e Allow customizing the id token in the custom authorization flow Andreas Svanberg 2025-03-21 12:28:41 +01:00
• ae64f40048 dev profile allows custom authorization Andreas Svanberg 2025-03-20 23:14:30 +01:00
• b1cdb1200a Let spring-boot-docker-compose automatically connect to the database Andreas Svanberg 2025-03-20 23:03:24 +01:00
• a7e51c303c dev profile gives admin access Andreas Svanberg 2025-03-20 23:00:48 +01:00
• ef99fbcc02 Add email claims to id token if email scope is authorized Andreas Svanberg 2025-03-20 21:15:32 +01:00
• 955b83fa64 Only populate id token email claims if email scope is authorized Andreas Svanberg 2025-03-20 21:13:36 +01:00
• 105c75589f Populate all profile claims that are available Andreas Svanberg 2025-03-20 21:10:28 +01:00
• 2eebb42168 Only populate id token profile claims if profile scope is authorized Andreas Svanberg 2025-03-20 21:02:33 +01:00
• bb888757e5 Allow falling through to regular authorization flow Andreas Svanberg 2025-03-20 20:21:25 +01:00
• c88fc24503 Factor out authorization code flow test infrastructure Andreas Svanberg 2025-03-19 19:35:18 +01:00
• 2d16035228 Id token tests Andreas Svanberg 2025-03-19 18:21:25 +01:00
• 91239cbd6e Developer custom authorization Andreas Svanberg 2025-03-19 17:03:51 +01:00
• 05e65526ce Support normal authorization flow for non-developers in staging environment Andreas Svanberg 2025-03-19 00:03:33 +01:00
• 74eadefe3c Refactor out duplicated code Andreas Svanberg 2025-03-16 19:30:12 +01:00
• eb87378376 Test authorization flow using metadata information (RFC 8414) Andreas Svanberg 2025-03-15 23:22:13 +01:00
• 27abcb2b25 Move OAuth 2 endpoints to be compatible with current authorization server Andreas Svanberg 2025-03-13 22:07:34 +01:00
• 62ad894876 Test for the entire authorization code flow Andreas Svanberg 2025-03-13 21:36:06 +01:00
• fff5812913 Turn on OIDC with data from Shibboleth Andreas Svanberg 2025-01-22 22:14:51 +01:00
• 4867bd24da Upgrade to Spring Boot 3.4 Andreas Svanberg 2025-01-22 22:05:14 +01:00
• 1fb5e99453 Use Spring Boot built-in Docker compose support Andreas Svanberg 2025-01-22 21:31:48 +01:00
• 2132ca21f3 Rename to authentication details Andreas Svanberg 2025-01-22 19:35:45 +01:00
• 525d33ed01 Protected admin section Andreas Svanberg 2024-09-12 17:40:50 +02:00
• 3b52882037 Remove UserDetailsService @Bean, there are no local users only pre-authenticated Andreas Svanberg 2024-09-11 21:46:54 +02:00
• 7e9c058303 Always include a local profile that can be used to make specific configuration. Andreas Svanberg 2024-09-11 21:41:16 +02:00
• 7fbbb076a8 Early milestone Andreas Svanberg 2024-09-11 20:28:56 +02:00