github.com/ory/fosite commits | Ecosyste.ms: OpenCollective

autogen(docs): regenerate and update changelog

6735db77af1875c4bfc7c38dfe3cf01d06e2eed4 authored about 4 years ago by aeneasr <[email protected]>

chore: update repository templates (#552)

af83871e6e8bf340bfd44715915bfb315e9718f1 authored about 4 years ago by hackerman <[email protected]>

autogen(docs): regenerate and update changelog

d0f39ad4aad8a438fb8bda63cc22de9751de073d authored about 4 years ago by aeneasr <[email protected]>

chore: update repository templates (#547)

9b390a75affb51d8b67685e8b6922f487de91457 authored about 4 years ago by hackerman <[email protected]>

autogen(docs): regenerate and update changelog

a50ffd692537ad8da472bc7fbe59d1437cecf7a6 authored about 4 years ago by aeneasr <[email protected]>

chore(deps): update golang.org/x/crypto commit hash to be400ae (#542)

Co-authored-by: Renovate Bot <[email protected]>

256b3b431d4bb03246825c450dbe05ebe462727b authored about 4 years ago by renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore: update repository templates (#541)

3e11a9ac07453cb4b40cd622e9dd7ff3df2c0d9e authored about 4 years ago by hackerman <[email protected]>

autogen(docs): regenerate and update changelog

ec5f3887ae65a8ec41b2670febd662cce3f4c630 authored about 4 years ago by aeneasr <[email protected]>

chore: update repository templates (#534)

d5566b1478c3b7b4b96f76d1cc6e563675879beb authored about 4 years ago by hackerman <[email protected]>

refactor: use constructor (#535)

2da54e3620a467e20d67ae05d0d3885a2383e4d4 authored about 4 years ago by Mitar <[email protected]>

refactor: use provided context (#536)

35d4f133faa87076c7eb1c5e8384f3653643de9e authored about 4 years ago by Mitar <[email protected]>

ci: configure renovate (#533)

* Add renovate.json

* feat: add hourly and concurrent limits

Co-authored-by: Renovate Bot ...

16b0887498b2d439f0f3f83b96a87505d04dd804 authored about 4 years ago by renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

autogen(docs): regenerate and update changelog

c4c1e6fd9e26e26de9e8c5ee490498ddef39291f authored about 4 years ago by aeneasr <[email protected]>

ci: add oidc conformity tests (#532)

06b26c3f1c311aea71797a952c7b6e71aa093c50 authored about 4 years ago by hackerman <[email protected]>

chore: update repository templates

ff4ba8090595d8cb8ab54c60e977efff9607f1c8 authored about 4 years ago by aeneasr <[email protected]>

autogen(docs): regenerate and update changelog

c5bc89260374ca9cfe8ed1aafce02d0283d30571 authored about 4 years ago by aeneasr <[email protected]>

fix: guess default response mode in `NewAuthorizeRequest`

a2952d7ad09fbd83a354b22dbcc0cef8a15f50f7 authored about 4 years ago by aeneasr <[email protected]>

feat: introduce WithExposeDebug to error interface

625a5214c4a002b4d0f86e49555edf8755703968 authored about 4 years ago by aeneasr <[email protected]>

refactor: use rfc compliant error formating

BREAKING CHANGE: This patch removes fields `error_hint`, `error_debug` from error responses. To ...

edbbda3c4cf70a77cdcd1383c55762c73613f87e authored about 4 years ago by aeneasr <[email protected]>

fix: do not require nonce for hybrid flows

This patch resolves an issue where nonce was required for hybrid flows, which does not comply wi...

de5c8f90e8ccae0849fa6426d53563ef7520880d authored about 4 years ago by aeneasr <[email protected]>

fix: improve error stack wrapping

BREAKING CHANGES: As part of this change, the error interface and its fields have changed:

- `R...

620d4c148307f7be7b2674fe420141b33aef6075 authored about 4 years ago by aeneasr <[email protected]>

fix: improve claims handling for jwts

a72ca9a978e60d7c4b000c41357719f0e2b61f8e authored about 4 years ago by aeneasr <[email protected]>

fix: be more permissive in time checks

Time equality should not cause failures in OpenID Connect validation.

839d00093a2ed8c590d910f113186cd96fad9185 authored about 4 years ago by aeneasr <[email protected]>

autogen(docs): regenerate and update changelog

e84fc171a7c2b534bcd80113d1d7cefbcc48c575 authored about 4 years ago by aeneasr <[email protected]>

docs: updates banner in readme.md (#529)

9718eb6ce63983ade0689908b5cce3e27c8838bc authored about 4 years ago by John <[email protected]>

autogen(docs): regenerate and update changelog

6d6a25b7bbc177cef9e1e89cf4dfca5208ad66e6 authored about 4 years ago by aeneasr <[email protected]>

feat: add support for response_mode=form_post (#509)

This patch introduces support for `response_mode=form_post` as well as `response_mode` of `none`...

3e3290f811f849881f1c6bafabc1c765d9a42ac7 authored about 4 years ago by Ajanthan <[email protected]>

autogen(docs): regenerate and update changelog

d6e45b39b005667cd9f5b2acb7ab2c46eff41d4c authored about 4 years ago by aeneasr <[email protected]>

fix: kid header is not required for key lookup

27cc5c0e935ecb8bca23dd8c2670c8a93f7b829d authored about 4 years ago by aeneasr <[email protected]>

fix: prevent debug details from leaking during key lookup

See https://github.com/ory/fosite/pull/526#discussion_r517490461

c0598fb8d8ce75b7f0ad645420caea641e64a4d2 authored about 4 years ago by aeneasr <[email protected]>

fix: do not accidentally leak jwks fetching errors

See https://github.com/ory/fosite/pull/526#discussion_r517491738

6d2092da1e8699e43fd6dccb4c3a33b885cec7f8 authored about 4 years ago by aeneasr <[email protected]>

fix: allow all request object algs when client value is unset

Allows all request object signing algorithms when the client has not explicitly allowed a certai...

1d14636e61b2047e5eee6d1d740249b819fc0794 authored about 4 years ago by aeneasr <[email protected]>

fix: use state from request object

Resolves failing OIDC conformity test "oidcc-request-uri-unsigned".

8cac1a00a6f87523b88fea6962ab1194049cbacd authored about 4 years ago by aeneasr <[email protected]>

fix: only use allowed characters in error_description

Replace LF and quotes with `.` and `'` to match allowed and recommended character set defined in...

431f9a56ed03648ea4ef637fe6c2b6d74e765dad authored about 4 years ago by aeneasr <[email protected]>

autogen(docs): regenerate and update changelog

14f445455797606235e54f4b69353c986db54310 authored about 4 years ago by aeneasr <[email protected]>

fix: modernized JWT stateless introspection (#519)

a6bfb921ebc746ba7a1215e32fb42a2c0530a2bf authored about 4 years ago by Mitar <[email protected]>

autogen(docs): regenerate and update changelog

c747e64b6cec435a37a9df7771342871f76dd2f2 authored about 4 years ago by aeneasr <[email protected]>

feat: support passing repeated audience parameter in URL query (#518)

Added `GetAudiences` helper function which tries to have current behavior and also support mul...

47f2a31fbed137b58e4866f78ec8b9f591134f98 authored about 4 years ago by Mitar <[email protected]>

fix: reset jti and hash ID token claims on refresh (#523)

ce2de73ff979b02be32d850c1c695067a35576c7 authored about 4 years ago by Mitar <[email protected]>

autogen(docs): regenerate and update changelog

1fcb789fb7bd6602e3b663dcb10e4dd8540c1b6a authored about 4 years ago by aeneasr <[email protected]>

fix: always return non-error response for inactive tokens (#517)

5f2cae3eabb83da898e1b5515176e65dda4da862 authored about 4 years ago by Mitar <[email protected]>

autogen(docs): regenerate and update changelog

cabbb4cf1d2aac4d134bafa257cdf1480dfabd16 authored about 4 years ago by aeneasr <[email protected]>

chore: update repository templates (#511)

4113b87a3780a94152895dc3fabfc91ddc8759cc authored about 4 years ago by hackerman <[email protected]>

feat: improve error messages (#513)

fcac5a6457c92d1eb1a389192cd0c7fb590ab8b3 authored about 4 years ago by Mitar <[email protected]>

docs: document Session interface methods (#512)

11a95ba00f562b3864fc0d6878c9d93943cc4273 authored about 4 years ago by Mitar <[email protected]>

autogen(docs): regenerate and update changelog

c598cc7fae17e70db2bad555cff94e97b2ca185b authored about 4 years ago by aeneasr <[email protected]>

fix: uniform audience parsing (#505)

e3f331d0d8e4470eef3dd7ecb46e66eeebfbe4c7 authored about 4 years ago by Mitar <[email protected]>

autogen(docs): regenerate and update changelog

9c9713ed6057c4b71f10c4c5b0a362172dcfeee1 authored about 4 years ago by aeneasr <[email protected]>

docs: improved test descriptions (#507)

29e9336be5673530ae00e735c3dc7d191f4b03a6 authored about 4 years ago by Mitar <[email protected]>

feat: allow configuring redirect secure checker everywhere (#489)

e87d0910f3ee960dbc7b1bc0fef124c9b928a55c authored about 4 years ago by Mitar <[email protected]>

feat: scope can now be space delimited in access tokens (#482)

Closes #362

Co-authored-by: hackerman <[email protected]>

8225935276d40a24da400d46ee7e7b63976488a1 authored about 4 years ago by Mitar <[email protected]>

autogen(docs): regenerate and update changelog

3f0bc875af230342d161de8516b7c0050f89d648 authored about 4 years ago by aeneasr <[email protected]>

fix: rename TokenType to TokenUse in introspection (#486)

See ory/hydra#1762

BREAKING CHANGE: Type `fosite.TokenType` has been renamed to `fosite.Token...

4b81316a1dbb0c5246bac39ecbaff749b00e4efa authored about 4 years ago by Ajanthan <[email protected]>

autogen(docs): regenerate and update changelog

ad376c9203d6ddde86be41aa13f2730d0aae858d authored about 4 years ago by aeneasr <[email protected]>

fix: redirct_url with query escape character outside of query is failing (#480)

See https://github.com/ory/hydra/issues/2055

Co-authored-by: hackerman <3372410+aeneasr@users...

6e49c57c8f7a46a78eda4d3091765d631f427845 authored about 4 years ago by Ajanthan <[email protected]>

autogen(docs): regenerate and update changelog

f163102eb3fdb6c9c6c6be5f9e605b87d0f687fb authored about 4 years ago by aeneasr <[email protected]>

fix: return allowed redirect url with preference

f0badc4919e00fa179dd54edcbd7385fac14fa19 authored about 4 years ago by aeneasr <[email protected]>

autogen(docs): regenerate and update changelog

dd5a4a5af23f46abf349cf172ecaac391d2d6848 authored over 4 years ago by aeneasr <[email protected]>

chore: update repository templates

7328d2625427ee84d8a768af1e57415885a4f823 authored over 4 years ago by aeneasr <[email protected]>

autogen(docs): regenerate and update changelog

6816f3143b6ef86719c47f79c511f3ef9808e7db authored over 4 years ago by aeneasr <[email protected]>

fix: make redirect URL checking more strict

The OAuth 2.0 Client's Redirect URL and the Redirect URL used in the OAuth 2.0 flow do not check...

cdee51ebe721bfc8acca0fd0b86b030ca70867bf authored over 4 years ago by aeneasr <[email protected]>

chore: update repository templates

eb8704839f3ad62cbfff02580bfb8fae0adaebe4 authored over 4 years ago by aeneasr <[email protected]>

chore: update repository templates

ec850f3128471d37ccdaf4f882be7666a51f7fac authored over 4 years ago by aeneasr <[email protected]>

ci: add HISTORY.md to .reference-ignore

2f3a7de7757dd6ff0a39c0dfe97fb94f33923062 authored over 4 years ago by zepatrik <[email protected]>

autogen(docs): regenerate and update changelog

19232ab4cbf0d62596561407ba7b0e01131016b7 authored over 4 years ago by aeneasr <[email protected]>

chore: update repository templates (#500)

5c8b91c32583ad2feb130a197a3d0dee10e6cebc authored over 4 years ago by hackerman <[email protected]>

autogen(docs): regenerate and update changelog

2889039752faddb6b1a5a4a651cebef277a2751f authored over 4 years ago by aeneasr <[email protected]>

chore: update repository templates (#492)

662660430bec2d16c4edcfd072b7ce5392430e32 authored over 4 years ago by hackerman <[email protected]>

autogen(docs): regenerate and update changelog

2a9002e2a397afbd156ab18e201429af60531122 authored over 4 years ago by aeneasr <[email protected]>

docs: added missing dot (#487)

a82224430292b2f209d011f107998273d568912b authored over 4 years ago by Eze Rodriguez <[email protected]>

autogen(docs): regenerate and update changelog

db5ef81cf57ac0bf2bf9bc4d75a6a35c1d7599af authored over 4 years ago by aeneasr <[email protected]>

chore: update repository templates

b017e313e148d1fe07b2f10febbc2003c929eac2 authored over 4 years ago by aeneasr <[email protected]>

chore: fix unused const linter error (#484)

354046265cd4ffcbff8465e4b7a7ea7b6741c5e4 authored over 4 years ago by Patrik <[email protected]>

autogen(docs): regenerate and update changelog

c869f33ab6250d3f8d5167868c39cd26df42878a authored over 4 years ago by aeneasr <[email protected]>

Merge pull request from GHSA-7mqr-2v3q-v2wm

BREAKING CHANGE: `fosite.ErrRevocationClientMismatch` was removed because it is not part of [RFC...

03dd55813f5521985f7dd64277b7ba0cf1441319 authored over 4 years ago by Patrik <[email protected]>

autogen(docs): regenerate and update changelog

6f280551a3b1361bad1b4a73aa5637a23ca65b52 authored over 4 years ago by aeneasr <[email protected]>

fix: ignore x/net false positives (#483)

aead1499deb8b08f48bcc196a88e5715702b5431 authored over 4 years ago by hackerman <[email protected]>

autogen(docs): regenerate and update changelog

9cecb109a338da8a5c1bb16a10bb00344dba89ba authored over 4 years ago by aeneasr <[email protected]>

fix: full JSON escaping (#481)

0943a1095a209fdfb2f8a29524b676ee9c9650a1 authored over 4 years ago by Mitar <[email protected]>

autogen(docs): regenerate and update changelog

c65522b26be77e48ac6e7b1f678419c6a374ef5e authored over 4 years ago by aeneasr <[email protected]>

feat: errors now wrap underlying errors (#479)

Closes #458

b53f8f58f0b9889d044cf9a8e2604316f0559ff6 authored over 4 years ago by Mitar <[email protected]>

autogen(docs): regenerate and update changelog

cf2fec7b02a0606ca254c128e46d7e6f7376b651 authored over 4 years ago by aeneasr <[email protected]>

feat: error_hint and error_debug are now exposed through error_description (#460)

BREAKING CHANGE: Merges the error description with error hint and error debug, making it easier ...

8daab21f97c513101d224a7ad7a44b871440be57 authored over 4 years ago by Mitar <[email protected]>

autogen(docs): regenerate and update changelog

1f16df0862bbcdfba98644d1c8fce8a9f92bbbec authored over 4 years ago by aeneasr <[email protected]>

docs: fix minor typos (#475)

Co-authored-by: hackerman <[email protected]>

23cc9c1d29f35a73acbf05fe6b505b692f6fe49c authored over 4 years ago by Phil Davis <[email protected]>

chore: Delete duplicate PULL_REQUEST_TEMPLATE.md (#474)

Close #478

1297a59507a352e7b371a74df9c8c38f16dae0cc authored over 4 years ago by Phil Davis <[email protected]>

chore: fix typo of authorization_code in test (#476)

8f28784c7d0d8baeb9a8d2a30ca7e8469e09012a authored over 4 years ago by Phil Davis <[email protected]>

refactor: fix inconsistent spelling of revocation (#477)

7a55edbb67738a721c5f1a8f58d2db67f6738f65 authored over 4 years ago by Phil Davis <[email protected]>

autogen(docs): regenerate and update changelog

6067d86f532e6efdc79bcc9c569f1449ad88ac47 authored over 4 years ago by aeneasr <[email protected]>

fix: add missing OAuth2TokenRevocationFactory to ComposeAllEnabled (#472)

88587fde8fc92137660383c401250e492716c396 authored over 4 years ago by Eze Rodriguez <[email protected]>

autogen(docs): regenerate and update changelog

bcacf0d7d19d7e148265e91b76d5d8d29ff6251d authored over 4 years ago by aeneasr <[email protected]>

feat: add locking to memory storage (#471)

46871476b1f47cefc09888615f70dd9fdd5af8b3 authored over 4 years ago by Mitar <[email protected]>

autogen(docs): regenerate and update changelog

856f30c34a15289d726ead7aa388e83b94751f3a authored over 4 years ago by aeneasr <[email protected]>

chore: update repository templates (#469)

98d3b17963dda21717c3b75edfc7268acb095dc7 authored over 4 years ago by hackerman <[email protected]>

chore: update repository templates (#468)

b0ec373d32ca39855f8f1ad1513829a57d8c9394 authored over 4 years ago by hackerman <[email protected]>

autogen(docs): regenerate and update changelog

8add941a812f1eadc57f7ea0400cf8d3b834428c authored over 4 years ago by aeneasr <[email protected]>

fix: align error returned when a grant_type was requested that's not allowed for a client (#467)

Returned error was 'invalid_grant'.

It should be 'unauthorized_client', according to https://...

3c30c0d9f1e62b237acc845d5b3a42d1ea9a80c0 authored over 4 years ago by Manuel Jeckelmann <[email protected]>

autogen(docs): regenerate and update changelog

fb9c951d8f61baa0c7ee108d618094cf61ae8fe6 authored over 4 years ago by aeneasr <[email protected]>

fix: no cache headers followup (#466)

1627c6ab31cb151f01671cd3403bc3c7de6fcfbd authored over 4 years ago by Mitar <[email protected]>

feat: make MinParameterEntropy configurable (#461)

Closes #267

2c793e6c010ac6cbc552200197ae1262d91c2bda authored over 4 years ago by Mitar <[email protected]>