Commit graph

264 commits

Author SHA1 Message Date
juanifioren
882def8124 Fix tests for using nonce parameter. 2015-07-16 15:04:33 -03:00
juanifioren
a690a57a03 Fix nonce parameter inside token endpoint. 2015-07-16 14:25:58 -03:00
juanifioren
6dde3a59a8 Add nonce to Code model. Modify create_code function. 2015-07-15 16:23:36 -03:00
juanifioren
0de868941a Modify create_id_token function for supporting nonce. 2015-07-15 16:18:34 -03:00
juanifioren
c995da640c Remove _extract_implicit_params function. 2015-07-15 15:17:47 -03:00
juanifioren
6fc6126a62 Add nonce to _extract_params function. 2015-07-15 15:16:51 -03:00
juanifioren
e030203f0b Add .pem files to gitignore in example project. 2015-07-15 14:38:49 -03:00
Juan Ignacio Fiorentino
9afdc3704c Merge pull request #32 from Sjord/fix-types
Fix types
2015-07-15 12:04:40 -03:00
Sjoerd Langkemper
0882c5c63b Make the sub a string
In the default sub generator. The spec says "The sub value is a case
sensitive string."
2015-07-15 12:17:21 +02:00
Sjoerd Langkemper
00f30dabbf Convert times to int
Make iat_time, exp_time, auth_time an integer, not a float. The spec
does not explicitly forbit float times, but some clients don't accept
this (mod_auth_openidc), and `timetuple()` has second precision anyway
so we don't loose any information.
2015-07-15 12:06:02 +02:00
Juan Ignacio Fiorentino
1faeb6d5ab Merge pull request #31 from ByteInternet/nonce-in-id-token
Add nonce in id_token when included in auth request
2015-07-10 10:29:55 -03:00
Juan Ignacio Fiorentino
64efca34d2 Merge pull request #30 from ByteInternet/allow-redirect-uri-params
Add support for redirect_uris with query params
2015-07-10 10:25:23 -03:00
Maarten van Schaik
a4fcf956c2 Add nonce in id_token when included in auth request
http://openid.net/specs/openid-connect-core-1_0.html#IDToken

If present in the Authentication Request, Authorization Servers MUST
include a nonce Claim in the ID Token with the Claim Value being the
nonce value sent in the Authentication Request.

This patch adds the nonce to the id_token.
2015-07-10 14:44:26 +02:00
Maarten van Schaik
7632054aad Add support for redirect_uris with query params
Some clients might add extra parameters to the redirect_uri, for
instance as extra verification if proper state parameter handling is not
supported.

This patch adds proper handling of redirect_uris with query parameters.
2015-07-10 12:22:25 +02:00
juanifioren
6ce523edaa Bump version 0.0.7. 2015-07-06 18:29:29 -03:00
juanifioren
234ee63847 Update example project requirements. 2015-07-06 18:20:08 -03:00
juanifioren
4e6780ae22 Update PyJWT to version 1.3.0. 2015-07-06 18:07:06 -03:00
Juan Ignacio Fiorentino
c5f22fc1aa Update README. 2015-07-06 13:58:50 -03:00
Juan Ignacio Fiorentino
a1d9fea4e3 Update README. 2015-07-06 13:04:07 -03:00
Juan Ignacio Fiorentino
8dc8c31396 Update setup. 2015-07-06 13:03:51 -03:00
Juan Ignacio Fiorentino
01a95bfb6b Update README. 2015-07-06 12:59:36 -03:00
juanifioren
44a9742f24 Edit README. 2015-07-02 14:54:43 -03:00
juanifioren
4c11ccbacb Edit DOC. 2015-07-02 12:16:43 -03:00
juanifioren
e1b8e3c9ad Add python 3.4 in travis file. 2015-07-02 11:46:48 -03:00
juanifioren
5cb0195539 Edit example project README. 2015-07-01 18:18:57 -03:00
juanifioren
3ce375a4f4 Edit DOC and README. 2015-07-01 17:53:28 -03:00
juanifioren
41a62463eb Edit CHANGELOG. 2015-07-01 17:33:46 -03:00
juanifioren
27110b65e4 Use decode with utf-8 encoding. 2015-07-01 17:20:16 -03:00
juanifioren
447d026a41 Add urllib and change iteritems() with items(). 2015-07-01 16:43:35 -03:00
juanifioren
e2a0f8ec60 Add urllib compatibility. 2015-07-01 12:53:41 -03:00
juanifioren
2dc0f845b4 Merge branch 'master' of https://github.com/juanifioren/django-oidc-provider 2015-07-01 12:37:00 -03:00
juanifioren
65c4cbe10b Update example project requirements. 2015-07-01 12:26:27 -03:00
juanifioren
74212d6961 Clean test. 2015-07-01 12:26:00 -03:00
Juan Ignacio Fiorentino
a5598108b2 Update README. 2015-06-30 17:03:53 -03:00
Juan Ignacio Fiorentino
5dbc0979e0 Fix DOC. 2015-06-28 13:53:51 -03:00
juanifioren
25e7838231 Fix DOC. 2015-06-24 12:41:32 -03:00
juanifioren
197818566d Rename setting. 2015-06-24 12:40:00 -03:00
juanifioren
4021441c76 Add test for user consent skip feature. 2015-06-23 16:32:12 -03:00
juanifioren
44bbe78723 Clean templates in tests. 2015-06-23 15:05:47 -03:00
juanifioren
503324ae66 Add user consent logic to authorize endpoint. 2015-06-22 18:42:42 -03:00
juanifioren
544861abec Add UserConsent to models. 2015-06-22 18:42:04 -03:00
juanifioren
9211b4200a Add settings for user consent. 2015-06-22 18:41:42 -03:00
juanifioren
c0aa4aba54 Edit DOC. 2015-06-22 18:41:22 -03:00
juanifioren
2a9c2ccbc6 Edit CHANGELOG. 2015-06-22 18:41:07 -03:00
juanifioren
fea181bf41 Add migrations for user consent. 2015-06-22 18:40:38 -03:00
juanifioren
68b4847219 Refactoring error logging. 2015-06-19 17:46:00 -03:00
Juan Ignacio Fiorentino
56ca4930b8 Update Docs. 2015-06-19 15:51:59 -03:00
juanifioren
b659dd95d3 Fix in settings when importing from string. 2015-06-19 15:37:42 -03:00
juanifioren
7715be7d9e Update DOC. 2015-06-19 15:21:35 -03:00
juanifioren
bcb144dcdb Now OIDC_EXTRA_SCOPE_CLAIMS must be a string (lazy imported). 2015-06-19 15:19:46 -03:00