Éloi Rivard
|
4715f643e2
|
Add a OIDC.REQUIRE_NONCE option to improve compatibility with clients
|
2023-07-06 17:57:17 +02:00 |
|
Éloi Rivard
|
4f42798e39
|
Refactored keypair management
|
2023-07-01 19:06:26 +02:00 |
|
Éloi Rivard
|
f504bb3a66
|
Implements a flask User converter
|
2023-06-29 15:55:39 +02:00 |
|
Éloi Rivard
|
361fda0386
|
Renamed User.phone_number in User.phone_numbers
|
2023-06-22 15:33:03 +02:00 |
|
Éloi Rivard
|
b5bd497d0e
|
Implemented User.preferred_email
|
2023-06-22 15:24:13 +02:00 |
|
Éloi Rivard
|
371f806695
|
Renamed User.email in User.emails
|
2023-06-22 15:15:46 +02:00 |
|
Éloi Rivard
|
17c2f7a5cd
|
Implemented LDAP ppolicy support.
|
2023-05-26 15:23:43 +02:00 |
|
Éloi Rivard
|
c1d1706007
|
Moved every model import to canaille.models
|
2023-05-20 20:02:00 +02:00 |
|
Éloi Rivard
|
be78b50e97
|
Removed User.authenticate method
|
2023-05-17 12:48:14 +02:00 |
|
Éloi Rivard
|
d66619a01c
|
OIDC lifetimes are not casted to string anymore
|
2023-05-17 09:29:32 +02:00 |
|
Éloi Rivard
|
8998fe9b62
|
Explicit arguments when using Model.get
|
2023-05-16 11:29:40 +02:00 |
|
Éloi Rivard
|
9e6a1b85f1
|
Avoid setting 'None' in claims when they are empty
|
2023-05-05 13:28:02 +02:00 |
|
Éloi Rivard
|
cc45ed4be9
|
OIDC.JWT.MAPPING configuration option is really optional
|
2023-04-10 20:09:47 +02:00 |
|
Éloi Rivard
|
7cd078bf81
|
Correctly read OIDC dynamic registration config entries
|
2023-04-10 19:28:26 +02:00 |
|
Éloi Rivard
|
61f5d25f2f
|
Creates a OIDC configuration section for all the OIDC related entries
|
2023-04-10 16:24:43 +02:00 |
|
Éloi Rivard
|
08f8bfbfdb
|
Moved user and group management in the core submodule
|
2023-04-09 13:34:38 +02:00 |
|
Éloi Rivard
|
4c454f6de4
|
Removed unused imports
|
2023-04-09 02:13:34 +02:00 |
|
Éloi Rivard
|
52f7276527
|
Explicitly use User.formatted_name instead of User.name
|
2023-04-07 22:45:42 +02:00 |
|
Éloi Rivard
|
db3a4a74ff
|
Renamed user attributes to match SCIM naming convention
|
2023-04-07 20:12:24 +02:00 |
|
Éloi Rivard
|
61940844e6
|
Properly handle LDAP date timezones
|
2023-03-18 00:39:32 +01:00 |
|
Éloi Rivard
|
94af1744ba
|
pre-commit update
|
2023-03-14 12:08:37 +01:00 |
|
Éloi Rivard
|
3406428f13
|
Renamed group attributes to match SCIM naming convention
|
2023-03-11 12:54:27 +01:00 |
|
Éloi Rivard
|
971cf317c9
|
Used 'id' instead of 'dn'
|
2023-03-10 18:14:15 +01:00 |
|
Éloi Rivard
|
53581404ab
|
LDAPObject dn attributes are automatically initialized
|
2023-03-08 23:53:53 +01:00 |
|
Éloi Rivard
|
c5b11d2fb3
|
Merge LDAPObject.all and LDAPObject.filter in LDAPObject.query
|
2023-03-07 17:58:27 +01:00 |
|
Éloi Rivard
|
3be937c286
|
Fix coverage
|
2023-01-28 18:35:39 +01:00 |
|
Éloi Rivard
|
63f927830a
|
Fixed dynamic client registration scope management
|
2023-01-28 14:04:04 +01:00 |
|
Éloi Rivard
|
d8bcb0bdf0
|
Ensures the token expires_in claim and the access_token exp claim have the same value.
|
2023-01-14 14:59:13 +01:00 |
|
Éloi Rivard
|
ab517f4fc0
|
refactoring: use Group.name when possible
|
2022-12-29 01:27:22 +01:00 |
|
Éloi Rivard
|
19793fe8aa
|
unit tests: userinfo
|
2022-12-24 01:44:16 +01:00 |
|
Éloi Rivard
|
f086bcd7da
|
Stop caching server metadata
|
2022-12-15 23:00:58 +01:00 |
|
Éloi Rivard
|
c02ea791be
|
removed unused method in the oauth authorization class
|
2022-12-10 21:18:17 +01:00 |
|
Éloi Rivard
|
449231abbe
|
unit tests: improved token introspection coverage
|
2022-12-10 21:10:18 +01:00 |
|
Éloi Rivard
|
812d04a571
|
unit tests: improved token revokation coverage
|
2022-12-10 21:02:51 +01:00 |
|
Éloi Rivard
|
a3418de239
|
Implemented RFC7592 OAuth Client Registration Management
|
2022-12-10 00:22:25 +01:00 |
|
Éloi Rivard
|
77ae9df2a9
|
Issuer 'ISS' configuration option is not mandatory anymore
|
2022-11-17 18:10:40 +01:00 |
|
Éloi Rivard
|
ba88f8e44a
|
rfc7591: fixed software statement support
|
2022-11-15 19:04:42 +01:00 |
|
Éloi Rivard
|
4f729caf2e
|
Implemented dynamic client registration
|
2022-10-24 10:00:32 +02:00 |
|
Éloi Rivard
|
77aff593d4
|
Refactoring: file renaming
|
2022-10-06 13:32:41 +02:00 |
|
Éloi Rivard
|
db0fd2d8ba
|
Fixed end-session when user are already disconnected
|
2022-07-07 16:28:28 +02:00 |
|
Éloi Rivard
|
21a2c306ac
|
Client only return the asked scopes
|
2022-07-07 16:11:25 +02:00 |
|
Éloi Rivard
|
95ec09fe54
|
Implemented RP-initiated logout
|
2022-06-02 17:56:10 +02:00 |
|
Éloi Rivard
|
a1c4f7a278
|
Bumped to authlib 1
|
2022-04-10 17:04:38 +02:00 |
|
Éloi Rivard
|
1d0f1e2f24
|
LdapObject an have attribute name different than the schema
|
2022-01-18 18:04:25 +01:00 |
|
Éloi Rivard
|
52e802b34f
|
split oidc code from the rest
|
2022-01-11 20:31:55 +01:00 |
|