augier
469521c572
Addin scopes translation and description
2016-01-04 16:49:52 +09:00
theworldbright
3734e074a6
Fix pronto errors
2016-01-04 16:49:52 +09:00
theworldbright
98fd18077a
Add test for expired access token
2016-01-04 16:49:52 +09:00
theworldbright
6e1a673459
Replace let!() with factory girl
2016-01-04 16:49:52 +09:00
augier
b9da104b28
Revoke button on applications page
2016-01-04 16:49:52 +09:00
theworldbright
dd337d4163
Remove JSON root from client controller
...
Signed-off-by: theworldbright <kent@kentshikama.com>
2016-01-04 16:49:52 +09:00
augier
308170f691
Add applications information page
2016-01-04 16:49:52 +09:00
theworldbright
65c40f236e
Load scopes from seeds
...
Signed-off-by: theworldbright <kent@kentshikama.com>
2016-01-04 16:49:51 +09:00
theworldbright
99d6d7b3e7
Add pairwise pseudonymous identifier support
...
Squashed commits:
[a182de7] Fix pronto/travis errors
2016-01-04 16:49:51 +09:00
theworldbright
d834a1d4d0
Replace user info endpoint with supported claims
...
The route /api/v0/user/ will now be used as a
non-OIDC route. In other words, the /api/v0/user/
will require the "read" scope while
/api/openid_connect/user_info/ will require the
"openid" scope
2016-01-04 16:49:51 +09:00
theworldbright
2be932ceff
Delete password flow
2016-01-04 16:49:51 +09:00
theworldbright
e5932968fd
Add support for authorization code flow
2016-01-04 16:49:51 +09:00
theworldbright
bc5e5c7420
Fix pronto errors
2016-01-04 16:49:51 +09:00
theworldbright
cd2f1215e8
Adjust protect resource endpoint spec
2016-01-04 16:49:51 +09:00
theworldbright
3cbe75469b
Add support for scopes
...
Remove scopes from tokens
Squashed commits:
[83db38f] Add redirect uris to supported metadata
2016-01-04 16:49:51 +09:00
augier
de4f68c289
Support for more metadata
2016-01-04 16:49:50 +09:00
theworldbright
979adca1e7
Fix account deleter specs
...
Squashed commits:
[7ff4276] Adjust discovery controller
2016-01-04 16:49:50 +09:00
augier
b173283692
Test for refresh token flow
2016-01-04 16:49:50 +09:00
augier
cc28199555
Fixing hounds remarks
2016-01-04 16:49:50 +09:00
theworldbright
7b80a7408d
Add integration tests for implicit flow
...
Squashed commits:
[d5001fe] Refactor
[8d8a23f] Add test for when authorization is denied
[659fc56] Adjust password flow integration test
2016-01-04 16:49:50 +09:00
theworldbright
ee9ac06e1a
Add support for access tokens in implicit flow
...
Squashed commits:
[7dbf618] Use Rail's find_or_create_by method
2016-01-04 16:49:50 +09:00
theworldbright
2d762da072
Adjust tokens to fit revised Authorization
2016-01-04 16:49:50 +09:00
theworldbright
17fde49d61
Implement ID Token for the implicit flow
2016-01-04 16:49:50 +09:00
theworldbright
1475672d72
Fix authorization and related models
...
Squashed commits:
[a844d37] Remove unnecessary class_name's from models
[529a30c] Further adjust authorization and related models
2016-01-04 16:49:50 +09:00
augier
031679762a
Redesign the models
2016-01-04 16:49:49 +09:00
Augier
9140c8244b
Support for refresh tokens w/ no tests
2016-01-04 16:49:49 +09:00
theworldbright
9d9dc13272
Adjust discovery controller to current values
2016-01-04 16:49:49 +09:00
Augier
73cc55940d
Fix travis errors and refactor
2016-01-04 16:49:49 +09:00
Augier
c6eb722517
Replace ERB by HAML, added locales, corrected Gemfile
2016-01-04 16:49:49 +09:00
theworldbright
3d26cbf657
Allow POST requests at authentication endpoint
2016-01-04 16:49:49 +09:00
theworldbright
3cfbcbce8f
Implement authorization endpoint (part 1)
...
The user can now authenticate with the authorization
server's authorization endpoint and receive a fake
id token.
2016-01-04 16:49:49 +09:00
theworldbright
059933f076
Add scopes and authorization models
2016-01-04 16:49:49 +09:00
theworldbright
88d02ea35b
Add client registration
...
Client must now be registered prior to imitating a
call to the token endpoint with the password flow.
Squashed commits:
[fdcef62] Rename authorization endpoint to protected resource endpoint
2016-01-04 16:49:48 +09:00
theworldbright
7c75eb5901
Make access tokens belong to user not client app
2016-01-04 16:49:48 +09:00
theworldbright
3fc0f64c56
Move openid controllers to openid connect namespace
2016-01-04 16:49:48 +09:00
theworldbright
52e10a91fe
Add tests for invalid token to password flow
2016-01-04 16:49:16 +09:00
theworldbright
9de2837a63
Move new API from /api/v2 to /api/v0
2016-01-04 16:49:16 +09:00
theworldbright
beae77102d
Allow current user to be obtained from access token
2016-01-04 16:49:16 +09:00
theworldbright
68d96a3189
Add versionist gem
2016-01-04 16:49:16 +09:00
theworldbright
efdfe318fd
Add ability to get user info from access tokens
2016-01-04 16:48:42 +09:00
Augier
a1f3d5f5f9
Getting token from user credential flow
2016-01-04 16:45:21 +09:00
augier
8d8faf684c
OpenID Connect debut work
2016-01-04 16:45:21 +09:00
Jonne Haß
2af02db0d6
Merge branch 'stable' into develop
2016-01-04 00:17:54 +01:00
Manuel Vögele
a4257a70e5
Wait for spinner to disappear before checking for posts in the stream
...
closes #6615
2016-01-04 00:17:47 +01:00
Dennis Schubert
642de6909e
Remove duplicate Gems from Lockfile
...
this commit could also be named "Remove user error", but that would look
like I am too stupid to use bundler.
2015-12-31 16:30:11 +01:00
Jonne Haß
80c18a32c6
bump bootstrap-sass
2015-12-31 16:26:40 +01:00
Jonne Haß
e3f86492ed
bump pg
2015-12-31 16:24:54 +01:00
Jonne Haß
39e445cc38
bump pronto
2015-12-31 16:21:58 +01:00
Dennis Schubert
9dca1785c2
Merge branch 'stable' into develop
2015-12-31 16:17:35 +01:00
Jonne Haß
b1f7a452f9
bump spring
2015-12-31 16:09:11 +01:00
