03 Aug, 2014

4 commits

  • git-svn-id: https://svn.forgerock.org/openig/trunk@446 dbb9e58e-28e6-4ce0-90e8-f11d9605b710
    matthew
     
  • Minor enhancement: provide the ability to configure per-provider scopes. Scopes are also no longer required since defaults can be configured at the IdP. See Javadoc for more detail.
    
    git-svn-id: https://svn.forgerock.org/openig/trunk@445 dbb9e58e-28e6-4ce0-90e8-f11d9605b710
    matthew
     
  • * Request.uri is now a MutableUri
    * Removed UriResolver since it was useless with both this new feature and the BeanResolver
    
    git-svn-id: https://svn.forgerock.org/openig/trunk@444 dbb9e58e-28e6-4ce0-90e8-f11d9605b710
    guillaume.sauthier
     
  • … order to add addition "enhanced" getters and setters for fields
    
    Provide better APIs for interacting with Message entities. Previously we were stuck with the esoteric BranchingInputStream which makes entities very hard (impossible?) to use in expressions and Groovy.
    
    * methods for getting the entity's content as JSON or as a plain String
    * methods for setting the entity's content to JSON or String data
    * simplification (I hope) of the branch life-cycle management
    * make Message closeable, delegating close to the entity and onto the branching input stream, allowing us to avoid alot of null-checking boilerplace.
    
    
    git-svn-id: https://svn.forgerock.org/openig/trunk@443 dbb9e58e-28e6-4ce0-90e8-f11d9605b710
    matthew
     

31 Jul, 2014

3 commits


30 Jul, 2014

3 commits

  • Main entry point is OAuth2ClientFilter
    
    Supports:
    
    * OAuth 2.0 "authorization code" grant type
    * automatic token refresh
    * proactive and reactive authorization for SSO
    * user initiated login / logout
    * OpenID Connect Relying Party
    * OpenID Connect discovery via "well-known configuration"
    * multiple providers and optional "Nascar" page
    * session based persistence
    * CSRF prevention via 160 bit state nonces
    * manually tested against OpenAM 11 and Google.
    
    TODO:
    
    * more unit testing
    * cookie based session management via encrypted JWT tokens
    * attribute mappings per provider? (TBD)
    * consider replacing default login/logout URLs with handlers?
    
    
    git-svn-id: https://svn.forgerock.org/openig/trunk@424 dbb9e58e-28e6-4ce0-90e8-f11d9605b710
    matthew
     
  • … the role used by this filter
    * Also aligned with filter names that will come for OpenIDConnect support
    
    git-svn-id: https://svn.forgerock.org/openig/trunk@422 dbb9e58e-28e6-4ce0-90e8-f11d9605b710
    guillaume.sauthier
     
  • git-svn-id: https://svn.forgerock.org/openig/trunk@421 dbb9e58e-28e6-4ce0-90e8-f11d9605b710
    matthew
     

29 Jul, 2014

1 commit


24 Jul, 2014

2 commits

  • * Some cases are not covered yet, needs to re-think the header parsing to be more strict
    
    git-svn-id: https://svn.forgerock.org/openig/trunk@383 dbb9e58e-28e6-4ce0-90e8-f11d9605b710
    guillaume.sauthier
     
  • * Introduced openig-oauth2 maven module
    * AccessTokenResolver is producing an AccessToken
    ** OpenAm resolver is provided
    * Token extraction and validation against a token info endpoint
    ** Expiry is verified
    ** Scope compatibility is verified
    ** In case of errors, standard RFC 6750 compliant error responses are returned
    * AccessToken are cached
    ** Expiration delay is configurable
    * Provided an EnforcerFilter that enforce a condition before delegating the execution
    
    git-svn-id: https://svn.forgerock.org/openig/trunk@382 dbb9e58e-28e6-4ce0-90e8-f11d9605b710
    guillaume.sauthier
     

18 Jul, 2014

1 commit


11 Jul, 2014

4 commits

  • … server now provided.
    
    Note that this does not remove the step entirely from the documentation, just from the simplified "getting started" procedure. This topic is still covered in the full installation instructions at http://openig.forgerock.org/doc/gateway-guide/#jetty-cookie-domains
    
    git-svn-id: https://svn.forgerock.org/openig/trunk@359 dbb9e58e-28e6-4ce0-90e8-f11d9605b710
    mark
     
  • OPENIG-185: Document how to configure containers for TLS
    OPENIG-186: Merge chapters on configuring deployment containers & installing OpenIG
    
    
    git-svn-id: https://svn.forgerock.org/openig/trunk@358 dbb9e58e-28e6-4ce0-90e8-f11d9605b710
    mark
     
  • git-svn-id: https://svn.forgerock.org/openig/trunk@357 dbb9e58e-28e6-4ce0-90e8-f11d9605b710
    mark
     
  • git-svn-id: https://svn.forgerock.org/openig/trunk@356 dbb9e58e-28e6-4ce0-90e8-f11d9605b710
    mark
     

10 Jul, 2014

1 commit


09 Jul, 2014

3 commits


08 Jul, 2014

1 commit


07 Jul, 2014

1 commit

  • Replaced Copyrighted with Copyright
    removed the (c) character not required
    removed All rights reserved from Apex Identity copyrights. The code is open source, thus rights are no longer reserved.
    
    git-svn-id: https://svn.forgerock.org/openig/trunk@345 dbb9e58e-28e6-4ce0-90e8-f11d9605b710
    ludo
     

04 Jul, 2014

1 commit


02 Jul, 2014

1 commit


01 Jul, 2014

2 commits


30 Jun, 2014

2 commits


27 Jun, 2014

2 commits


25 Jun, 2014

2 commits


24 Jun, 2014

6 commits