Jonne Haß
d025cc38d3
Drop another plurals hack at aspects
...
It doesn't look used anymore either
2016-01-05 21:33:41 +01:00
Manuel Vögele
4f34ecafa4
Show posts of ignored users on their profile page
2016-01-04 18:29:30 +01:00
Steffen van Bergerem
079d5ab298
Merge branch 'stable' into develop
2016-01-04 14:19:53 +01:00
Steffen van Bergerem
09e2c1af2e
Mention media.ccc.de in the changelog [ci skip]
2016-01-04 14:19:44 +01:00
theworldbright
38439277d6
Add licenses where appropriate
2016-01-04 17:22:44 +09:00
theworldbright
b09ee87912
Update json-jwt legacy methods
2016-01-04 17:01:41 +09:00
theworldbright
58aef5658b
Fix remaining remarks
2016-01-04 17:01:40 +09:00
augier
ef7ea1a855
General text error + CSS styling
...
Minor merge conflict fix by theworldbright
2016-01-04 16:49:59 +09:00
augier
10314ffc8c
Fixing more remarks
2016-01-04 16:49:58 +09:00
theworldbright
c1e1f9bf69
Fix 500 error when unknown algorithm is used for JWT
2016-01-04 16:49:58 +09:00
theworldbright
4cde41486b
Fix handling of prompt=login
2016-01-04 16:49:58 +09:00
theworldbright
9f85a90f55
Update code_used to false after issues new code
2016-01-04 16:49:58 +09:00
theworldbright
a4095692b7
Add default kid to jwks.json
2016-01-04 16:49:58 +09:00
theworldbright
1e3421713a
Handle error when request object is signed
2016-01-04 16:49:58 +09:00
theworldbright
7e8bd0f411
Add fallback for failed app logo rendering
2016-01-04 16:49:58 +09:00
theworldbright
fd4022a55c
Fix pronto remarks
2016-01-04 16:49:58 +09:00
theworldbright
773a5a67d9
Add default kid to ID token
2016-01-04 16:49:58 +09:00
theworldbright
ed1dc256a8
Fix handling of error message in authorization controller
2016-01-04 16:49:58 +09:00
augier
ebeafb7894
Add custom error page when prompt=none
2016-01-04 16:49:57 +09:00
theworldbright
10938404e9
Fix HTTP request test mocks
2016-01-04 16:49:57 +09:00
augier
73c1f0bc70
Fix pronto remarks
2016-01-04 16:49:57 +09:00
theworldbright
c6bec2f2dc
Return error to RP instead of user for prompt=none
2016-01-04 16:49:57 +09:00
theworldbright
9fc8c63cae
Fix hash styles for stub_request
2016-01-04 16:49:57 +09:00
theworldbright
7865a30fec
Return an JSON error response for invalid jwks_uri
2016-01-04 16:49:57 +09:00
theworldbright
3440709ec5
Explicitly state no support for user info alg
2016-01-04 16:49:57 +09:00
theworldbright
f1b394de0f
Fix remaining remarks
2016-01-04 16:49:57 +09:00
augier
d028b5672e
Fix remarks
2016-01-04 16:49:57 +09:00
theworldbright
2f8c391ac6
Fix pronto and travis errors
2016-01-04 16:49:57 +09:00
theworldbright
8f5094c29e
Gracefully handle SSL verification failure
2016-01-04 16:49:56 +09:00
theworldbright
0fbcb71255
Add support for request_uri and claims
2016-01-04 16:49:56 +09:00
theworldbright
2a002d90c4
Allow for longer redirect uri lists
2016-01-04 16:49:56 +09:00
theworldbright
82600003b3
Flash error messages when redirect_uri is invalid
2016-01-04 16:49:56 +09:00
theworldbright
e4edad0646
Fix test for the auth missing the response_type parameter
2016-01-04 16:49:56 +09:00
theworldbright
adcf2ab7ab
Fix test for prompt == "none"
2016-01-04 16:49:56 +09:00
augier
d351db1982
Filter for prompt handling
2016-01-04 16:49:56 +09:00
augier
7b2be0d3c6
Support displaying TOS and policy
2016-01-04 16:49:56 +09:00
augier
6fcb9a9d3a
Add XSS spec for application's name
2016-01-04 16:49:56 +09:00
theworldbright
9c9880d880
Move JWKs files to database
2016-01-04 16:49:56 +09:00
augier
2c7d102019
Design for authorization page when client_name not providen + XSS spec
2016-01-04 16:49:55 +09:00
theworldbright
80cbc7d915
Destroy previous auths on new auth request
2016-01-04 16:49:55 +09:00
theworldbright
da766d8e8b
Revoke previously issued tokens on duplicate request
2016-01-04 16:49:55 +09:00
theworldbright
b3b9b39690
Fix request with prompt=none when not logged in
2016-01-04 16:49:55 +09:00
theworldbright
fd467cd42b
Add private_key_jwt support
...
See
- http://openid.net/specs/openid-connect-core-1_0.html#ClientAuthentication
- https://openid.net/specs/openid-connect-registration-1_0.html#ClientMetadata
2016-01-04 16:49:55 +09:00
theworldbright
1dcefdb998
Validate sector identifier uri and redirect uri
2016-01-04 16:49:55 +09:00
theworldbright
5f19d8ffe6
Add acr value
2016-01-04 16:49:55 +09:00
theworldbright
a76f51a6a5
Use redirect_uri if no sector identifier for ppid
...
As according to http://openid.net/specs/openid-connect-core-1_0.html#PairwiseAlg :
"If the Client has not provided a value for
sector_identifier_uri in Dynamic Client Registration
[OpenID.Registration], the Sector Identifier used
for pairwise identifier calculation is the host
component of the registered redirect_uri."
2016-01-04 16:49:55 +09:00
theworldbright
4e18f3849d
Remove GUID as primary key in ppid table
2016-01-04 16:49:55 +09:00
theworldbright
21175e7eee
Allow POST requests for user info endpoint
2016-01-04 16:49:54 +09:00
theworldbright
4be9f4d558
Make client name optional
2016-01-04 16:49:54 +09:00
theworldbright
9439a16d98
Fix failing auth code test and styles
2016-01-04 16:49:54 +09:00
