This repository has been archived on 2024-05-31. You can view files and clone it, but cannot push or open issues or pull requests.
authentik/authentik
Jens L 80f4fccd35
providers/oauth2: OpenID conformance (#4758)
* don't open inspector by default when debug is enabled

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* encode error in fragment when using hybrid grant_type

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* require nonce for all response_types that get an id_token from the authorization endpoint

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* don't set empty family_name

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* only set at_hash when response has token

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* cleaner way to get login time

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* remove authentication requirement from authentication flow

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* use wrapper

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix auth_time not being handled correctly

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* minor cleanup

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add test files

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix tests

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* remove USER_LOGIN_AUTHENTICATED

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* rework prompt=login handling

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* also set last login uid for max_age check to prevent double login when max_age and prompt=login is set

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
2023-02-23 15:26:41 +01:00
..
admin core: handle error when cleaning up sessions and cached session can't be loaded 2023-02-13 13:22:34 +01:00
api providers/oauth2: OpenID conformance (#4758) 2023-02-23 15:26:41 +01:00
blueprints core: bump pylint from 2.15.10 to 2.16.0 (#4600) 2023-02-02 11:05:46 +01:00
core providers/oauth2: OpenID conformance (#4758) 2023-02-23 15:26:41 +01:00
crypto core: bump black from 22.12.0 to 23.1.0 (#4584) 2023-02-01 11:31:32 +01:00
events events: fix m2m_change events not being logged 2023-02-19 16:28:30 +01:00
flows providers/oauth2: OpenID conformance (#4758) 2023-02-23 15:26:41 +01:00
lib core: Fix bug causing whitespace only names to raise exception when generating avatars (#4746) 2023-02-21 16:19:19 +01:00
outposts root: use channel send workaround for sync sending of websocket messages 2023-02-15 16:08:01 +01:00
policies *: add additional prometheus metrics, remove unusable high entropy metrics 2023-02-19 17:08:40 +01:00
providers providers/oauth2: OpenID conformance (#4758) 2023-02-23 15:26:41 +01:00
recovery core: bump black from 22.12.0 to 23.1.0 (#4584) 2023-02-01 11:31:32 +01:00
root root: don't trace websockets to sentry 2023-02-20 21:32:35 +01:00
sources sources/oauth: fix not all token errors being logged with response 2023-02-17 13:22:41 +01:00
stages providers/oauth2: OpenID conformance (#4758) 2023-02-23 15:26:41 +01:00
tenants core: bump black from 22.12.0 to 23.1.0 (#4584) 2023-02-01 11:31:32 +01:00
__init__.py release: 2023.2.2 2023-02-15 19:53:42 +01:00