Ignacio Fiorentino
8a63c83514
Refactoring create_id_token function.
2016-09-09 13:10:12 -03:00
Ignacio Fiorentino
5836774f6b
Add user email into id_token. Fix missing OIDC_TOKEN_EXPIRE setting.
2016-09-09 11:43:28 -03:00
Ignacio Fiorentino
439774aeeb
Add test for Hybrid flow. Plus refactoring.
2016-09-08 17:15:25 -03:00
Ignacio Fiorentino
f8dbfa5c04
Add Hybrid flow login in view and models.
2016-09-08 16:21:48 -03:00
Ignacio Fiorentino
d7b06ee3b4
Fix bug when creating first time client public.
2016-09-07 12:30:20 -03:00
Ignacio Fiorentino
68d982369e
Add CORS fix to userinfo view.
2016-09-06 15:37:23 -03:00
Ignacio Fiorentino
a583648be2
Add Access-Control-Allow-Origin to ProviderInfoView.
2016-09-06 13:21:29 -03:00
Wojciech Bartosiak
9e6928c6a9
Polish translation
2016-09-06 13:15:40 +02:00
Florent Jouatte
2872d2e10b
#113 : tiny improvement
2016-08-17 12:24:00 +02:00
Florent Jouatte
2c1d582475
#113 : omit claim when empty
2016-08-17 12:13:33 +02:00
Ignacio Fiorentino
d35f16eeae
Merge branch 'fix-import-all' of https://github.com/grahamu/django-oidc-provider into grahamu-fix-import-all
2016-08-12 12:02:48 -03:00
Graham Ullrich
ba4faee6ef
Fix global imports
...
Global imports ("from X import *") are discouraged in Python.
2016-08-11 16:05:13 -06:00
Ignacio Fiorentino
2214ec0d70
Add missing migration.
2016-08-11 16:56:02 -03:00
Ignacio Fiorentino
988cad073e
Add new test for migrations.
2016-08-11 16:43:30 -03:00
Graham Ullrich
b8d1d63c28
Improve tox.ini envlist layout, simplified commands.
...
Remove tests/app/settings.py in favor of settings in setup.py.
Change MANIFEST.in to include README.md (which exists) instead of README.rst (which does not exist).
Update .travis.yml to use tox instead of `python django_admin.py`, include Django v1.10 in the mix.
2016-08-11 11:13:23 -06:00
Ignacio Fiorentino
6151a6cfb9
Merge branch 'fix-id-token-at-hash' of https://github.com/brosner/django-oidc-provider into brosner-fix-id-token-at-hash
2016-08-10 18:13:33 -03:00
Graham Ullrich
e822252b6e
Use original test files
2016-08-08 12:20:47 -06:00
Graham Ullrich
e04d42fedf
flake8 fixes
2016-08-08 11:54:40 -06:00
Graham Ullrich
ffddb69f80
Add tests for at_hash
...
Ensure at_hash is present in id_token when warranted.
2016-08-08 11:24:07 -06:00
Arkadiy Korotaev
8cbf5c3304
Cleanup urls.py - remove unused and wildcard import
2016-08-08 09:58:36 +04:00
Brian Rosner
afc3a60ee7
Added at_hash when access token is present
...
This is required by response type "id_token token", but can be
used by other flows if they choose.
2016-08-05 14:00:00 -06:00
Ignacio Fiorentino
2573a60092
Fix test app urls and templates loaders in settings.
2016-08-04 13:35:27 -03:00
Graham Ullrich
ddb62a383b
Remove unused import
...
Update mock requirement.
2016-08-03 23:44:17 -06:00
Florent Jouatte
f4c27ed28d
tiny translation
2016-07-29 09:07:25 +02:00
Florent Jouatte
c29514ca64
add french translation (not over)
2016-07-28 10:55:06 +02:00
Ignacio Fiorentino
b70007e4a9
Add ES and FR initial translations.
2016-07-26 17:19:33 -03:00
Ignacio Fiorentino
dc9ec1863e
Change setting OIDC_USERINFO.
2016-07-07 12:50:27 -03:00
Ignacio Fiorentino
4cc7474c19
Add verbose name and description for scopes.
2016-06-16 17:18:39 -03:00
Ignacio Fiorentino
739b6ef381
Provide doc for user consent model.
2016-06-13 13:26:33 -03:00
Ignacio Fiorentino
5255719700
Add date_given to UserConsent model. Add verbose names in models.
2016-06-13 12:15:10 -03:00
Ignacio Fiorentino
41f23afa31
Add missing migration.
2016-06-10 10:57:31 -03:00
Ignacio Fiorentino
70c7d128c1
Refactoring views.py.
2016-06-01 12:09:40 -03:00
Ignacio Fiorentino
21e8e89d35
Edit default setting.
2016-05-30 14:26:25 -03:00
Ignacio Fiorentino
eea590e006
Modify scope claims class.
2016-05-30 13:28:07 -03:00
Si Feng
86a921aba7
Fix typo
2016-05-25 15:21:27 -07:00
Si Feng
be5656bcf4
Make SITE_URL
optional.
2016-05-25 14:58:58 -07:00
Ignacio Fiorentino
497f2f3a68
Bump version v0.3.3.
2016-05-03 12:17:22 -03:00
Ignacio Fiorentino
a0c7b3c0c4
Create migrations. Improve docs.
2016-04-25 17:33:52 -03:00
Ignacio Fiorentino
9f9df355a3
Merge branch 'v0.3.x' of https://github.com/juanifioren/django-oidc-provider into feature-jwtalg
2016-04-25 14:55:30 -03:00
Ignacio Fiorentino
b8f442184c
Remove migration.
2016-04-25 14:51:00 -03:00
Ignacio Fiorentino
8320394a67
Refactoring variables.
2016-04-14 17:45:30 -03:00
Ignacio Fiorentino
bc6a083571
Refactoring tests.
2016-04-14 16:22:38 -03:00
Ignacio Fiorentino
41dcb192bc
Add support for the other values of the prompt param.
2016-04-13 18:38:38 -03:00
Ignacio Fiorentino
61f0c209af
Refactoring prompt=none logic.
2016-04-13 17:19:37 -03:00
John Kristensen
2f54e53766
Ensure client redirect URIs with query strings work
...
In some cases a client will provide a redirect URI with a query string.
In these cases the client redirect URI should still still match a
registered redirect URI and not result in a failure.
2016-04-13 22:29:21 +10:00
Ignacio Fiorentino
b05894bf6d
Add prompt parameter to authorize view.
2016-04-12 18:19:16 -03:00
Ignacio Fiorentino
3f5992100a
Not auto-approve requests for non-confidential clients.
2016-04-08 18:09:24 -03:00
Ignacio Fiorentino
e97c32acd1
Fix encoding problem when using Py34.
2016-04-08 13:22:05 -03:00
Ignacio Fiorentino
559f90c5a6
Remove pdb.
2016-04-07 16:36:42 -03:00
Ignacio Fiorentino
e495d6c41d
Remplace AES encryption with database. For saving PKCE parameters.
2016-04-07 16:18:47 -03:00
Ignacio
b1b8247cb0
Add hidden inputs for PKCE. Fix bug with AES.
2016-04-07 11:45:35 -03:00
Ignacio Fiorentino
6e8af74f76
First intent to implement PKCE.
2016-04-06 18:03:30 -03:00
Juan Ignacio Fiorentino
2c4ab6695e
Removing print.
2016-04-05 19:08:49 -03:00
Ignacio Fiorentino
a3247db273
Improve handle of client_secret with client_types.
2016-04-05 18:31:08 -03:00
Ignacio Fiorentino
1a74bcbc5c
Add client type to client creation form.
2016-04-04 17:19:49 -03:00
Juan Ignacio Fiorentino
f44b5a1114
Update provider info supporting HS256 id_token sign alg.
2016-03-22 20:48:30 -03:00
Ignacio Fiorentino
dff76cd1ea
Add HS256 support for JWS.
2016-03-22 16:17:56 -03:00
Nick Mohoric
f8dce31fa2
Changed logging from error to debug
2016-03-17 14:31:41 -04:00
Wojciech Bartosiak
08033bb9ad
Fix missing verification of response type for client
2016-03-08 13:21:55 +00:00
Wojciech Bartosiak
5d57c4919c
Fix encoding of client secret
2016-03-08 12:57:47 +00:00
Wojciech Bartosiak
7cb5b4d54e
str or list or tuple for OIDC_ID_TOKEN_PROCESSING_HOOK
2016-03-01 17:54:57 +00:00
Ignacio
a4d5f89536
Merge branch 'v0.2.x' of https://github.com/juanifioren/django-oidc-provider into v0.3.x
...
Conflicts:
oidc_provider/lib/utils/common.py
oidc_provider/lib/utils/token.py
2016-02-25 10:10:07 -03:00
Ilya
49e19e7493
ID_TOKEN_PROCESSING_HOOK gets user argument
2016-02-25 09:46:10 +00:00
juanifioren
fb4e9bd8fe
Fix openid scope in authorize view.
2016-02-18 16:03:46 -03:00
Wojciech Bartosiak
56ffd92ee8
added 'user' into default_idtoken_processing_hook
2016-02-17 22:30:10 +00:00
Wojciech Bartosiak
509100f8ad
added 'user' into default_idtoken_processing_hook
2016-02-17 22:28:08 +00:00
Wojciech Bartosiak
a28db60d9e
added 'user' into default_idtoken_processing_hook
2016-02-17 22:24:02 +00:00
Wojciech Bartosiak
eb7686abba
added 'user' into default_idtoken_processing_hook
2016-02-17 22:23:10 +00:00
juanifioren
25a59c8344
Refactoring supporting OAuth2 flow.
2016-02-16 17:33:12 -03:00
juanifioren
3da1ff4c85
Add StandardScopeClaims import.
2016-02-15 17:21:46 -03:00
juanifioren
6488386692
Remove wrong import.
2016-02-15 17:17:43 -03:00
juanifioren
8eb0877d89
Refactoring userinfo endpoint. Create decorator "oauth2.protected_resource_view".
2016-02-15 17:13:19 -03:00
Juan Ignacio Fiorentino
58482a6585
Merge pull request #80 from wojtek-fliposports/v0.2.x
...
Fixed PEB8 warning about initialization and comparison to None.
2016-02-15 16:46:26 -03:00
Wojciech Bartosiak
c0f79a196d
Fixed PEB8 warning about initialization and comparison to None
2016-02-15 19:42:08 +00:00
juanifioren
782befd6ec
Rename setting.
2016-02-12 14:51:43 -03:00
Wojciech Bartosiak
7a357001b6
Added OIDC_ID_TOKEN_PROCESSING_HOOK functionality
2016-02-12 16:02:35 +00:00
Juan Ignacio Fiorentino
41f88b23c7
Merge pull request #77 from nmohoric/remove-deprecated-patterns
...
Remove patterns which will be deprecated in 1.10.
2016-02-03 14:37:34 -03:00
Nick Mohoric
be5ffde03b
Remove patterns which will be deprecated in 1.10
2016-02-02 17:57:23 -05:00
juanifioren
584e0c951b
Adding missing migrations.
2016-02-02 16:46:22 -03:00
juanifioren
6646bdb92a
Add OIDC_SKIP_CONSENT_ALWAYS setting.
2016-02-01 14:34:39 -03:00
juanifioren
32555eb660
Remove old OIDC_RSA_KEY_FOLDER setting from example project and tests.
2016-01-25 18:01:54 -03:00
juanifioren
998ea5fcd1
Implementation of RSA Keys using Models. Also providing DOC.
2016-01-25 17:52:24 -03:00
juanifioren
50d14b037b
Add nonce to the decide form.
2016-01-20 17:10:15 -03:00
juanifioren
41dc9bf4a9
Add "Allow-Origin" header to jwks endpoint.
2016-01-20 17:08:47 -03:00
juanifioren
73ece1bf64
Make OIDC_AFTER_USERLOGIN_HOOK to be lazy imported by string.
2016-01-19 17:37:32 -03:00
juanifioren
44a32a55ad
Add tests for Implicit Flow.
2016-01-19 16:08:13 -03:00
juanifioren
c6534db693
Add nonce validation for Implicit Flow.
2016-01-19 16:05:34 -03:00
Pablo SEMINARIO
9204c478ed
Fix #72 get_issuer() returns a wrong value
2016-01-16 11:35:26 +01:00
juanifioren
ccd9836edb
Make OIDC_IDTOKEN_SUB_GENERATOR to be lazy imported by the location of the function.
2016-01-12 15:17:22 -03:00
juanifioren
6e1f0822aa
Auto-generate client_id and client_secret in the admin.
2016-01-11 16:04:04 -03:00
Wojciech Bartosiak
45b0f2e5d1
Fixed generating key in wrong folder - ignoring value of OIDC_RSA_KEY_FOLDER
2016-01-10 20:58:11 +00:00
juanifioren
4aa32f792c
Merge branch 'v0.2.x' of https://github.com/juanifioren/django-oidc-provider into v0.2.x
2015-12-04 13:57:31 -03:00
juanifioren
ae9ecb2dde
Add new app configuration file.
2015-12-04 13:55:34 -03:00
juanifioren
cd45f29403
Improve admin models.
2015-12-04 13:55:04 -03:00
Ignacio
153730e5f9
Fix posible bug with pyjwkest==1.0.8. Revert to version 1.0.6.
2015-12-03 13:29:57 -03:00
juanifioren
121f7f22cb
Fix in tests when using JWS.verify_compact. Need allow_none set to True.
2015-12-01 14:42:39 -03:00
Juan Ignacio Fiorentino
146752b7d9
Merge pull request #62 from nmohoric/master
...
Allowing urls without slashes
2015-12-01 12:06:30 -03:00
Nick Mohoric
4b15610df9
Allowing urls without slashes
2015-12-01 09:51:54 -05:00
juanifioren
8b0d869f7b
Replace django redirect with custom HttpResponse object.
2015-11-12 17:12:18 -03:00
Sjoerd Langkemper
2fc4c138b3
Make (user, client) unique on UserConsent
...
We assume this combination is unique with our get and get_or_create
calls.
2015-11-10 11:29:05 +01:00