github.com/ory/fosite issues | Ecosyste.ms: OpenCollective

Auth Req omitted response_mode does not validate the default response_mode against the ResponseModeClient

james-d-elliott opened this issue almost 2 years ago

Revert "chore(deps): bump golang.org/x/net (#738)"

hperl opened this pull request almost 2 years ago

debug(ci): oidc conforimity issue

james-d-elliott opened this pull request almost 2 years ago

chore(deps): bump golang.org/x/crypto from 0.0.0-20210921155107-089bfa567519 to 0.1.0

dependabot[bot] opened this pull request almost 2 years ago

chore(deps): bump golang.org/x/net from 0.0.0-20220722155237-a158d28d115b to 0.7.0

dependabot[bot] opened this pull request almost 2 years ago

feat: add the ability to set jwt header type

mgyongyosi opened this pull request almost 2 years ago

RFC7523: Allow associating an audience allow list to a public key trust.

trondhauge85 opened this issue almost 2 years ago

upstream reference closed: github.com/square/go-jose/issues/353

github-actions[bot] opened this issue about 2 years ago

github.com/square/go-jose is deprecated

mitar opened this issue about 2 years ago

feat: customizable token prefix

mattslocum opened this pull request about 2 years ago

docs: update copyright

james-d-elliott opened this pull request about 2 years ago

feat: add custom form_post response writer

levkohimins opened this pull request about 2 years ago

Add custom form_post response writer

levkohimins opened this issue about 2 years ago

RFC7523: Store the payload of the supplied JWT for later use in token hook in Hydra

sgal opened this issue about 2 years ago

Best way to replicate a refresh_token flow using Fosite.

tn185075 opened this issue about 2 years ago

Invalid token (base64 error) isn't mapped to an RFC6749Error error

Philio opened this issue about 2 years ago

refactor: allow secret configuration to return errors

aeneasr opened this pull request about 2 years ago

feat: token exchange rfc8693 in impersonation mode

saxenautkarsh opened this pull request about 2 years ago

fix: write authorize error returns 303 for get method

james-d-elliott opened this pull request about 2 years ago

Improve documentation for storage implementers

gonzojive opened this issue about 2 years ago

chore: list contributors in file

kevgo opened this pull request about 2 years ago

chore: update Ory CLI with breaking changes to the format task

kevgo opened this pull request about 2 years ago

chore: remove obsolete header

kevgo opened this pull request about 2 years ago

build: update module golang.org/x/text to v0.4.0

james-d-elliott opened this pull request about 2 years ago

fix: requested scope ignored in refresh flow

james-d-elliott opened this pull request about 2 years ago

upstream reference closed: github.com/ory/fosite/pull/242

github-actions[bot] opened this issue about 2 years ago

upstream reference closed: github.com/ory/fosite/pull/187

github-actions[bot] opened this issue about 2 years ago

Add changelog into release info

aldas opened this issue about 2 years ago

chore: license checker

kevgo opened this pull request about 2 years ago

follow silverspace commit

minhnd410 opened this pull request about 2 years ago

fix: when TokenRevocationStorage.GetRefreshTokenSession return fosite.ErrInactiveToken, handle fosite.ErrInactiveToken

inari111 opened this pull request about 2 years ago

fix: missing init of the par sessions in the example store

michaelboke opened this pull request over 2 years ago

docs: standardize license headers

kevgo opened this pull request over 2 years ago

Error messages with status 503 and message temporarily_unavailable when revoking access and refresh tokens sequentially

mih-kopylov opened this issue over 2 years ago

refresh flow: prevent accidentially returned token

sja opened this pull request over 2 years ago

ci: use hydra main branch

aeneasr opened this pull request over 2 years ago

ci: use hydra main branch

aeneasr opened this pull request over 2 years ago

chore: revert "delete .circleci folder (#699)"

kevgo opened this pull request over 2 years ago

fix: fix server error of handling refresh token reuse

sawadashota opened this pull request over 2 years ago

chore: format using Make

kevgo opened this pull request over 2 years ago

Need to increase the scope(`openid`) inspection in openid `CanHandleTokenEndpointRequest`

meheng opened this issue over 2 years ago

Device grant flow (migrate to master)

BuzzBumbleBee opened this pull request over 2 years ago

chore: update Prettier and ory-prettier-style and format everything

kevgo opened this pull request over 2 years ago

chore: delete .circleci folder

kevgo opened this pull request over 2 years ago

Fix: Use proper scopes in refresh token handler

silverspace opened this pull request over 2 years ago

wip feat(device auth grant): implementation

pedrule opened this pull request over 2 years ago

Unable to request narrower scopes in OAuth2 Refresh Token Exchange

silverspace opened this issue over 2 years ago

Add device grants - inital

BuzzBumbleBee opened this pull request over 2 years ago

feat: Add support for ClientSecretValidationStrategyProvider

hilariocoelho opened this pull request over 2 years ago

Add support for custom client secret validation

hilariocoelho opened this issue over 2 years ago

Example in documentation mistake

MatteoGioioso opened this issue over 2 years ago

Feat/device authorization grant

pedrule opened this pull request over 2 years ago

feat: add json mappings to generic session to match openid session

sgal opened this pull request over 2 years ago

fix: add json mappings to generic session to fix tests

sgal opened this pull request over 2 years ago

feat: add json mappings to default session and its contents

sgal opened this pull request over 2 years ago

feat: add json mappings to default session and its contents

sgal opened this pull request over 2 years ago

feat: customizable TTL for clients (v0.42 backport)

aeneasr opened this pull request over 2 years ago

Investigate missing `redirect_uri` check when performing OIDC flows

aeneasr opened this issue over 2 years ago

feat: implement client token lifespan customization

grantzvolsky opened this pull request over 2 years ago

test: fix assertions

aeneasr opened this pull request over 2 years ago

chore: delete semantic.yml

kevgo opened this pull request over 2 years ago

Trouble using JWT for auth code flow

tn185075 opened this issue over 2 years ago

ci: move conformity tests to hydra v2.x

aeneasr opened this pull request over 2 years ago

Fix bug which prevents the `at_hash` claim from appearing in the ID token from an authcode grant for some storage implementations

cfryanr opened this pull request over 2 years ago

fix: hybrid state check

aeneasr opened this pull request over 2 years ago

feat: make http source contextualized

aeneasr opened this pull request over 2 years ago

chore: format

aeneasr opened this pull request over 2 years ago

feat: add `ory_at|pt|ac` prefixes to HMAC tokens

aeneasr opened this pull request over 2 years ago

'unsupported_response_mode' is not a documented error code per core specifications

vivshankar opened this issue over 2 years ago

fix: bump dependencies

aeneasr opened this pull request over 2 years ago

ci: [#671] Changed the Circle CI image

vivshankar opened this pull request over 2 years ago

CircleCI checks appears to fail because of Go version issues

vivshankar opened this issue over 2 years ago

fix: Fixed the missing state check for hybrid flow

harjoben opened this pull request over 2 years ago

State ID check in Hybrid flow is not accurate

harjoben opened this issue over 2 years ago

refactor(config): support hot reloading

aeneasr opened this pull request over 2 years ago

Configuration hot reloading

aeneasr opened this issue over 2 years ago

MTLS client authentication and certificate bound access tokens

vivshankar opened this issue almost 3 years ago

feat: [#628] PAR implementation

vivshankar opened this pull request almost 3 years ago

feat: allow custom access token ttl

love-bhardwaj opened this pull request almost 3 years ago

Support clock skew in claim validation

mpage23 opened this issue almost 3 years ago

Title: Support claims request parameter on oidc validator

kokukuma opened this issue about 3 years ago

Support OAuth 2.0 Demonstrating Proof-of-Possession at the Application Layer

kokukuma opened this issue about 3 years ago

Avoid indirect dependency on `github.com/oleiade/[email protected]` to avoid breaking Dependabot for projects that use fosite

cfryanr opened this issue about 3 years ago

fix: force HTTP GET for redirect responses

svrakitin opened this pull request about 3 years ago

Encrypted JWTs for both id_tokens and client assertions

vivshankar opened this issue over 3 years ago

Pushed authorization request

vivshankar opened this issue over 3 years ago

feat: Add rotation support for client secrets

rplnt opened this pull request over 3 years ago

Move userinfo handler from Hydra to fosite

mitar opened this issue almost 4 years ago

Support for reusing used RT in a short time window

rickliujh opened this issue almost 4 years ago

Why using errorsx.WithStack and not errors.WithStack

mitar opened this issue almost 4 years ago

Do not require state if code_challenge is used

mitar opened this issue almost 4 years ago

Improve documentation

narg95 opened this issue almost 4 years ago

hydra-cli: hydra token user --audience not accepting more than one audiences

pommelinho opened this issue about 4 years ago

Certain claims are missing when refreshing ID tokens and potentially others

aeneasr opened this issue about 4 years ago

Remove disallowed characters from error responses via sanitation

aeneasr opened this issue about 4 years ago

feat: rfc8693 token exchange impersonation flow (#1218)

mpnunes opened this pull request over 4 years ago

How to implement a storage DB

akuma06 opened this issue over 7 years ago