org.forgerock / org.forgerock.openig

21 Aug, 2014

1 commit

b8da9033 Fixed javadoc warning : "tag @link: reference not found: org.forgerock" ... Browse Dir »
```
git-svn-id: https://svn.forgerock.org/openig/trunk@515 dbb9e58e-28e6-4ce0-90e8-f11d9605b710
```
violette
2014-08-21 09:45:12 +0000

05 Aug, 2014

1 commit

75f309fc CR-4192 Fix for OPENIG-219: Document support for OpenIG as OAuth 2.0 resource server ... Browse Dir »
```
git-svn-id: https://svn.forgerock.org/openig/trunk@468 dbb9e58e-28e6-4ce0-90e8-f11d9605b710
```
mark
2014-08-05 10:36:02 +0000

04 Aug, 2014

1 commit

b791ed85 [maven-release-plugin] prepare for next development iteration ... Browse Dir »
```
git-svn-id: https://svn.forgerock.org/openig/trunk@464 dbb9e58e-28e6-4ce0-90e8-f11d9605b710
```
guillaume.sauthier
2014-08-04 15:09:59 +0000

03 Aug, 2014

4 commits

fd6ca7b4 Fix minor compiler warnings. ... Browse Dir »
```
git-svn-id: https://svn.forgerock.org/openig/trunk@446 dbb9e58e-28e6-4ce0-90e8-f11d9605b710
```
matthew
2014-08-03 01:01:59 +0000

c924f8d4 Fix OPENIG-195: Implement OAuth 2.0 Client support ... Browse Dir »

Minor enhancement: provide the ability to configure per-provider scopes. Scopes are also no longer required since defaults can be configured at the IdP. See Javadoc for more detail.

git-svn-id: https://svn.forgerock.org/openig/trunk@445 dbb9e58e-28e6-4ce0-90e8-f11d9605b710

2014-08-03 01:01:30 +0000

c9d5329e OPENIG-243 (CR-4178) Introduce a MutableUri construct to ease URI modifications ... Browse Dir »

* Request.uri is now a MutableUri
* Removed UriResolver since it was useless with both this new feature and the BeanResolver

git-svn-id: https://svn.forgerock.org/openig/trunk@444 dbb9e58e-28e6-4ce0-90e8-f11d9605b710

2014-08-03 00:31:45 +0000

2e89d62e Partial fix for OPENIG-235: Add better encapsulation of exchange object model in… ... Browse Dir »

… order to add addition "enhanced" getters and setters for fields

Provide better APIs for interacting with Message entities. Previously we were stuck with the esoteric BranchingInputStream which makes entities very hard (impossible?) to use in expressions and Groovy.

* methods for getting the entity's content as JSON or as a plain String
* methods for setting the entity's content to JSON or String data
* simplification (I hope) of the branch life-cycle management
* make Message closeable, delegating close to the entity and onto the branching input stream, allowing us to avoid alot of null-checking boilerplace.


git-svn-id: https://svn.forgerock.org/openig/trunk@443 dbb9e58e-28e6-4ce0-90e8-f11d9605b710

2014-08-03 00:14:40 +0000

31 Jul, 2014

3 commits

63e91d3f Partial fix for OPENIG-235: Add better encapsulation of exchange object model in… ... Browse Dir »

… order to add addition "enhanced" getters and setters for fields

* remove FormAttributes since the underlying form can now be lazily created from the getter.

git-svn-id: https://svn.forgerock.org/openig/trunk@432 dbb9e58e-28e6-4ce0-90e8-f11d9605b710

2014-07-31 19:33:02 +0000

b44ad43f Partial fix for OPENIG-235: Add better encapsulation of exchange object model in… ... Browse Dir »

… order to add addition "enhanced" getters and setters for fields

* perform mechanical changes to encapsulate fields for Message, Request, and Response
* added Javadoc for getters and setters
* Message no longer extends FieldMap since the expression library leverages the BeanResolver.

Remaining non-mechanical changes (e.g. adding enhanced getters/setters) will be performed as separate changes.


git-svn-id: https://svn.forgerock.org/openig/trunk@430 dbb9e58e-28e6-4ce0-90e8-f11d9605b710

2014-07-31 17:02:16 +0000

d969d0df OPENIG-223 (CR-4133) Support an extensible way to define class aliases for modules ... Browse Dir »

* Provided a SPI interface to be implemented by modules who want to enrich the supported aliases collection
* Provided implementations for all OpenIG's modules (core, saml and oauth2)

git-svn-id: https://svn.forgerock.org/openig/trunk@426 dbb9e58e-28e6-4ce0-90e8-f11d9605b710

2014-07-31 09:38:57 +0000

30 Jul, 2014

3 commits

5e953753 Fix OPENIG-195: Implement OAuth 2.0 Client support ... Browse Dir »

Main entry point is OAuth2ClientFilter

Supports:

* OAuth 2.0 "authorization code" grant type
* automatic token refresh
* proactive and reactive authorization for SSO
* user initiated login / logout
* OpenID Connect Relying Party
* OpenID Connect discovery via "well-known configuration"
* multiple providers and optional "Nascar" page
* session based persistence
* CSRF prevention via 160 bit state nonces
* manually tested against OpenAM 11 and Google.

TODO:

* more unit testing
* cookie based session management via encrypted JWT tokens
* attribute mappings per provider? (TBD)
* consider replacing default login/logout URLs with handlers?


git-svn-id: https://svn.forgerock.org/openig/trunk@424 dbb9e58e-28e6-4ce0-90e8-f11d9605b710

2014-07-30 16:27:39 +0000

ea66dbdb Renamed OAuth2ValidationTokenFilter to OAuth2ResourceServerFilter to better show… ... Browse Dir »

… the role used by this filter
* Also aligned with filter names that will come for OpenIDConnect support

git-svn-id: https://svn.forgerock.org/openig/trunk@422 dbb9e58e-28e6-4ce0-90e8-f11d9605b710

2014-07-30 13:41:22 +0000

b7aac5ee Minor fix for checkstyle errors and IDE warnings. ... Browse Dir »
```
git-svn-id: https://svn.forgerock.org/openig/trunk@421 dbb9e58e-28e6-4ce0-90e8-f11d9605b710
```
matthew
2014-07-30 11:15:30 +0000

29 Jul, 2014

1 commit

f035c050 * Provides UNLIMITED Duration ... Browse Dir »

* Uses Duration.duration(String) instead of constructor

git-svn-id: https://svn.forgerock.org/openig/trunk@409 dbb9e58e-28e6-4ce0-90e8-f11d9605b710

2014-07-29 10:17:14 +0000

25 Jul, 2014

1 commit

c269bf48 Fix OPENIG-207: update trunk version to 3.0.0-SNAPSHOT. ... Browse Dir »
```
git-svn-id: https://svn.forgerock.org/openig/trunk@392 dbb9e58e-28e6-4ce0-90e8-f11d9605b710
```
matthew
2014-07-25 14:21:59 +0000

24 Jul, 2014

2 commits

d4da80dc Added some tests around BearerTokenExtractor ... Browse Dir »

* Some cases are not covered yet, needs to re-think the header parsing to be more strict

git-svn-id: https://svn.forgerock.org/openig/trunk@383 dbb9e58e-28e6-4ce0-90e8-f11d9605b710

2014-07-24 09:18:10 +0000

e1c5ec74 OPENIG-176 (CR-3939 && CR-4049) Implement OAuth 2.0 Resource Server support ... Browse Dir »

* Introduced openig-oauth2 maven module
* AccessTokenResolver is producing an AccessToken
** OpenAm resolver is provided
* Token extraction and validation against a token info endpoint
** Expiry is verified
** Scope compatibility is verified
** In case of errors, standard RFC 6750 compliant error responses are returned
* AccessToken are cached
** Expiration delay is configurable
* Provided an EnforcerFilter that enforce a condition before delegating the execution

git-svn-id: https://svn.forgerock.org/openig/trunk@382 dbb9e58e-28e6-4ce0-90e8-f11d9605b710

2014-07-24 09:18:00 +0000