theworldbright
054e421829
Remove zone info claim
2016-01-04 16:49:53 +09:00
theworldbright
724f32604b
Add nonce to auth code flow
2016-01-04 16:49:53 +09:00
theworldbright
bb8fe6aa83
Adjust id token config to save private key to file
2016-01-04 16:49:53 +09:00
theworldbright
24fd70676c
Fix webfinger discovery route
2016-01-04 16:49:53 +09:00
theworldbright
ab65617958
Add support for max_age parameter
...
Additionally add support for prompt's login option
Signed-off-by: theworldbright <kent@kentshikama.com>
2016-01-04 16:49:53 +09:00
theworldbright
25f51c606a
Add support for prompt parameter
2016-01-04 16:49:53 +09:00
theworldbright
8be3be3e10
Refactor authorizations controller destroy action
2016-01-04 16:49:53 +09:00
theworldbright
4dae744a4a
Adjust translations for user applications page
2016-01-04 16:49:53 +09:00
augier
07c12ba057
Using Camo for the application logo
2016-01-04 16:49:53 +09:00
augier
3fb2d262b8
Using entypo icon as default application image
2016-01-04 16:49:52 +09:00
augier
098e8e46dd
CSS for applications settings page
2016-01-04 16:49:52 +09:00
augier
469521c572
Addin scopes translation and description
2016-01-04 16:49:52 +09:00
theworldbright
3734e074a6
Fix pronto errors
2016-01-04 16:49:52 +09:00
theworldbright
98fd18077a
Add test for expired access token
2016-01-04 16:49:52 +09:00
theworldbright
6e1a673459
Replace let!() with factory girl
2016-01-04 16:49:52 +09:00
augier
b9da104b28
Revoke button on applications page
2016-01-04 16:49:52 +09:00
theworldbright
dd337d4163
Remove JSON root from client controller
...
Signed-off-by: theworldbright <kent@kentshikama.com>
2016-01-04 16:49:52 +09:00
augier
308170f691
Add applications information page
2016-01-04 16:49:52 +09:00
theworldbright
65c40f236e
Load scopes from seeds
...
Signed-off-by: theworldbright <kent@kentshikama.com>
2016-01-04 16:49:51 +09:00
theworldbright
99d6d7b3e7
Add pairwise pseudonymous identifier support
...
Squashed commits:
[a182de7] Fix pronto/travis errors
2016-01-04 16:49:51 +09:00
theworldbright
d834a1d4d0
Replace user info endpoint with supported claims
...
The route /api/v0/user/ will now be used as a
non-OIDC route. In other words, the /api/v0/user/
will require the "read" scope while
/api/openid_connect/user_info/ will require the
"openid" scope
2016-01-04 16:49:51 +09:00
theworldbright
2be932ceff
Delete password flow
2016-01-04 16:49:51 +09:00
theworldbright
e5932968fd
Add support for authorization code flow
2016-01-04 16:49:51 +09:00
theworldbright
bc5e5c7420
Fix pronto errors
2016-01-04 16:49:51 +09:00
theworldbright
cd2f1215e8
Adjust protect resource endpoint spec
2016-01-04 16:49:51 +09:00
theworldbright
3cbe75469b
Add support for scopes
...
Remove scopes from tokens
Squashed commits:
[83db38f] Add redirect uris to supported metadata
2016-01-04 16:49:51 +09:00
augier
de4f68c289
Support for more metadata
2016-01-04 16:49:50 +09:00
theworldbright
979adca1e7
Fix account deleter specs
...
Squashed commits:
[7ff4276] Adjust discovery controller
2016-01-04 16:49:50 +09:00
augier
b173283692
Test for refresh token flow
2016-01-04 16:49:50 +09:00
augier
cc28199555
Fixing hounds remarks
2016-01-04 16:49:50 +09:00
theworldbright
7b80a7408d
Add integration tests for implicit flow
...
Squashed commits:
[d5001fe] Refactor
[8d8a23f] Add test for when authorization is denied
[659fc56] Adjust password flow integration test
2016-01-04 16:49:50 +09:00
theworldbright
ee9ac06e1a
Add support for access tokens in implicit flow
...
Squashed commits:
[7dbf618] Use Rail's find_or_create_by method
2016-01-04 16:49:50 +09:00
theworldbright
2d762da072
Adjust tokens to fit revised Authorization
2016-01-04 16:49:50 +09:00
theworldbright
17fde49d61
Implement ID Token for the implicit flow
2016-01-04 16:49:50 +09:00
theworldbright
1475672d72
Fix authorization and related models
...
Squashed commits:
[a844d37] Remove unnecessary class_name's from models
[529a30c] Further adjust authorization and related models
2016-01-04 16:49:50 +09:00
augier
031679762a
Redesign the models
2016-01-04 16:49:49 +09:00
Augier
9140c8244b
Support for refresh tokens w/ no tests
2016-01-04 16:49:49 +09:00
theworldbright
9d9dc13272
Adjust discovery controller to current values
2016-01-04 16:49:49 +09:00
Augier
73cc55940d
Fix travis errors and refactor
2016-01-04 16:49:49 +09:00
Augier
c6eb722517
Replace ERB by HAML, added locales, corrected Gemfile
2016-01-04 16:49:49 +09:00
theworldbright
3d26cbf657
Allow POST requests at authentication endpoint
2016-01-04 16:49:49 +09:00
theworldbright
3cfbcbce8f
Implement authorization endpoint (part 1)
...
The user can now authenticate with the authorization
server's authorization endpoint and receive a fake
id token.
2016-01-04 16:49:49 +09:00
theworldbright
059933f076
Add scopes and authorization models
2016-01-04 16:49:49 +09:00
theworldbright
88d02ea35b
Add client registration
...
Client must now be registered prior to imitating a
call to the token endpoint with the password flow.
Squashed commits:
[fdcef62] Rename authorization endpoint to protected resource endpoint
2016-01-04 16:49:48 +09:00
theworldbright
7c75eb5901
Make access tokens belong to user not client app
2016-01-04 16:49:48 +09:00
theworldbright
3fc0f64c56
Move openid controllers to openid connect namespace
2016-01-04 16:49:48 +09:00
theworldbright
52e10a91fe
Add tests for invalid token to password flow
2016-01-04 16:49:16 +09:00
theworldbright
9de2837a63
Move new API from /api/v2 to /api/v0
2016-01-04 16:49:16 +09:00
theworldbright
beae77102d
Allow current user to be obtained from access token
2016-01-04 16:49:16 +09:00
theworldbright
68d96a3189
Add versionist gem
2016-01-04 16:49:16 +09:00
