Jonne Haß
32bda8fe20
Merge branch 'stable' into develop
2016-01-28 18:47:18 +01:00
Faldrian
8e3816e64e
let mention-regex only match usable strings
...
closes #6658
2016-01-28 18:47:13 +01:00
fla
1e27b509f9
Add number of votes on poll answers
2016-01-24 14:31:06 +01:00
Dennis Schubert
515cda7658
Merge branch 'stable' into develop
2016-01-24 07:15:04 +01:00
Benjamin Neff
44ab0df02b
fix suppress_annoying_errors
...
closes #6653
2016-01-24 07:14:58 +01:00
Steffen van Bergerem
a52c8a2f55
Tell user that the author might ignore them when commenting/liking failed
2016-01-21 21:02:39 +01:00
Steffen van Bergerem
6fce81fc99
Merge branch 'stable' into develop
2016-01-20 21:37:30 +01:00
tamatsyk
960e651764
internationalize controller rescue_from text
...
Fix typos
change forbitten to forbidden
fix styling issue and copypaste
improve code style for aspec_memberships_controller.rb with rubocop
fix styling issues
aligned elements of hash literals
fix typo
fix locale name and styling of its usage
fix failing tests
closes #6554
2016-01-20 21:37:02 +01:00
Jonne Haß
baeff22451
Merge pull request #6095 from AugierLe42e/openid
...
OpenID Connect
2016-01-06 12:30:15 +01:00
Dennis Schubert
40e780abcf
Merge branch 'stable' into develop
2016-01-06 00:49:15 +01:00
Benjamin Neff
812510b44a
refactoring tests again
...
closes #6595
2016-01-06 00:47:55 +01:00
cmrd Senya
b6c7f004e4
Further receive tests development
2016-01-06 00:47:42 +01:00
cmrd Senya
e54f87b7a6
Add rspec persistance file
2016-01-06 00:46:14 +01:00
theworldbright
b09ee87912
Update json-jwt legacy methods
2016-01-04 17:01:41 +09:00
theworldbright
58aef5658b
Fix remaining remarks
2016-01-04 17:01:40 +09:00
theworldbright
773a5a67d9
Add default kid to ID token
2016-01-04 16:49:58 +09:00
theworldbright
ed1dc256a8
Fix handling of error message in authorization controller
2016-01-04 16:49:58 +09:00
theworldbright
10938404e9
Fix HTTP request test mocks
2016-01-04 16:49:57 +09:00
augier
73c1f0bc70
Fix pronto remarks
2016-01-04 16:49:57 +09:00
theworldbright
c6bec2f2dc
Return error to RP instead of user for prompt=none
2016-01-04 16:49:57 +09:00
theworldbright
9fc8c63cae
Fix hash styles for stub_request
2016-01-04 16:49:57 +09:00
theworldbright
f1b394de0f
Fix remaining remarks
2016-01-04 16:49:57 +09:00
theworldbright
2f8c391ac6
Fix pronto and travis errors
2016-01-04 16:49:57 +09:00
theworldbright
0fbcb71255
Add support for request_uri and claims
2016-01-04 16:49:56 +09:00
theworldbright
82600003b3
Flash error messages when redirect_uri is invalid
2016-01-04 16:49:56 +09:00
theworldbright
adcf2ab7ab
Fix test for prompt == "none"
2016-01-04 16:49:56 +09:00
augier
d351db1982
Filter for prompt handling
2016-01-04 16:49:56 +09:00
augier
7b2be0d3c6
Support displaying TOS and policy
2016-01-04 16:49:56 +09:00
augier
6fcb9a9d3a
Add XSS spec for application's name
2016-01-04 16:49:56 +09:00
theworldbright
9c9880d880
Move JWKs files to database
2016-01-04 16:49:56 +09:00
augier
2c7d102019
Design for authorization page when client_name not providen + XSS spec
2016-01-04 16:49:55 +09:00
theworldbright
da766d8e8b
Revoke previously issued tokens on duplicate request
2016-01-04 16:49:55 +09:00
theworldbright
fd467cd42b
Add private_key_jwt support
...
See
- http://openid.net/specs/openid-connect-core-1_0.html#ClientAuthentication
- https://openid.net/specs/openid-connect-registration-1_0.html#ClientMetadata
2016-01-04 16:49:55 +09:00
theworldbright
1dcefdb998
Validate sector identifier uri and redirect uri
2016-01-04 16:49:55 +09:00
theworldbright
a76f51a6a5
Use redirect_uri if no sector identifier for ppid
...
As according to http://openid.net/specs/openid-connect-core-1_0.html#PairwiseAlg :
"If the Client has not provided a value for
sector_identifier_uri in Dynamic Client Registration
[OpenID.Registration], the Sector Identifier used
for pairwise identifier calculation is the host
component of the registered redirect_uri."
2016-01-04 16:49:55 +09:00
theworldbright
4be9f4d558
Make client name optional
2016-01-04 16:49:54 +09:00
augier
c33cce0953
Styling user consent form
2016-01-04 16:49:54 +09:00
theworldbright
1a7f2edc01
Perform major refactoring
...
- Add foreign_keys
- Remove unused classes/methods
- Fix pronto errors
- Add method to retrieve client id from name
- Remove TODO comments
- Fix unnecessary private key generation
2016-01-04 16:49:54 +09:00
theworldbright
e55a0b0d0b
Replace scopes with constants in Authorization
2016-01-04 16:49:54 +09:00
theworldbright
bb8fe6aa83
Adjust id token config to save private key to file
2016-01-04 16:49:53 +09:00
theworldbright
24fd70676c
Fix webfinger discovery route
2016-01-04 16:49:53 +09:00
theworldbright
ab65617958
Add support for max_age parameter
...
Additionally add support for prompt's login option
Signed-off-by: theworldbright <kent@kentshikama.com>
2016-01-04 16:49:53 +09:00
theworldbright
25f51c606a
Add support for prompt parameter
2016-01-04 16:49:53 +09:00
theworldbright
8be3be3e10
Refactor authorizations controller destroy action
2016-01-04 16:49:53 +09:00
augier
07c12ba057
Using Camo for the application logo
2016-01-04 16:49:53 +09:00
theworldbright
98fd18077a
Add test for expired access token
2016-01-04 16:49:52 +09:00
theworldbright
6e1a673459
Replace let!() with factory girl
2016-01-04 16:49:52 +09:00
theworldbright
dd337d4163
Remove JSON root from client controller
...
Signed-off-by: theworldbright <kent@kentshikama.com>
2016-01-04 16:49:52 +09:00
theworldbright
65c40f236e
Load scopes from seeds
...
Signed-off-by: theworldbright <kent@kentshikama.com>
2016-01-04 16:49:51 +09:00
theworldbright
99d6d7b3e7
Add pairwise pseudonymous identifier support
...
Squashed commits:
[a182de7] Fix pronto/travis errors
2016-01-04 16:49:51 +09:00