| Thu, 09 Mar 2023 14:46:06 +0100 |
Kim Alvefur |
mod_http_oauth2: Implement the OpenID userinfo endpoint
|
| Tue, 07 Mar 2023 15:33:07 +0000 |
Matthew Wild |
mod_http_oauth2: token endpoint: handle missing credentials
|
| Tue, 07 Mar 2023 15:31:19 +0000 |
Matthew Wild |
mod_http_oauth2: Fail early when no authorization header present
|
| Tue, 07 Mar 2023 15:27:50 +0000 |
Matthew Wild |
mod_http_oauth2: Support HTTP Basic auth on token endpoint
|
| Tue, 07 Mar 2023 15:18:41 +0000 |
Matthew Wild |
mod_http_oauth2: Separate extracting credentials from requests and verifying
|
| Tue, 07 Mar 2023 14:52:43 +0000 |
Matthew Wild |
mod_http_oauth2: Reflect ALL attributes of the client registration
|
| Tue, 07 Mar 2023 13:19:19 +0000 |
Matthew Wild |
mod_http_oauth2: Improve handling of redirect_uri matching and fallback
|
| Tue, 07 Mar 2023 13:14:25 +0100 |
Kim Alvefur |
mod_http_oauth2: Correct field name for HTTP response status code
|
| Tue, 07 Mar 2023 10:27:40 +0000 |
Matthew Wild |
mod_http_oauth2: Fix incorrect function name (thanks Zash/luacheck)
|
| Mon, 06 Mar 2023 16:53:27 +0100 |
Kim Alvefur |
mod_http_oauth2: Remove authorization codes after use
|
| Mon, 06 Mar 2023 16:49:43 +0100 |
Kim Alvefur |
mod_http_oauth2: Fix authorization code logic
|
| Mon, 06 Mar 2023 10:37:43 +0000 |
Matthew Wild |
mod_http_oauth2: Switch to '303 See Other' redirects
|
| Mon, 06 Mar 2023 10:29:14 +0000 |
Matthew Wild |
mod_http_oauth2: Allow non-HTTPS on localhost URLs
|
| Mon, 06 Mar 2023 09:46:58 +0000 |
Matthew Wild |
mod_http_oauth2: Add authentication, consent and error pages
|
| Mon, 06 Mar 2023 09:40:17 +0000 |
Matthew Wild |
mod_http_oauth: Factor out issuer URL calculation to a helper function
|
| Sun, 05 Mar 2023 12:38:20 +0100 |
Kim Alvefur |
mod_http_oauth2: Clarify comment referencing mod_http_errors (thanks MattJ)
|
| Sat, 04 Mar 2023 23:36:13 +0100 |
Kim Alvefur |
mod_http_oauth2: Specify host for which to retrieve list of roles
|
| Sat, 04 Mar 2023 21:36:00 +0100 |
Kim Alvefur |
mod_http_oauth2: Return list of active roles in discovery
|
| Sat, 04 Mar 2023 21:24:35 +0100 |
Kim Alvefur |
mod_http_oauth2: Return actually enabled response types in discovery
|
| Sat, 04 Mar 2023 17:06:47 +0100 |
Kim Alvefur |
mod_http_oauth2: Calculate client secret expiry in registration response
|
| Sat, 04 Mar 2023 13:23:26 +0000 |
Matthew Wild |
mod_http_oauth2: Strip trailing '/' from issuer URL
|
| Fri, 03 Mar 2023 22:54:46 +0100 |
Kim Alvefur |
mod_http_oauth2: Advertise endpoints that are enabled
|
| Fri, 03 Mar 2023 22:48:59 +0100 |
Kim Alvefur |
mod_http_oauth2: Separate client_secret verification key from JWT key
|
| Fri, 03 Mar 2023 22:48:38 +0100 |
Kim Alvefur |
mod_http_oauth2: Fix response type config
|
| Fri, 03 Mar 2023 22:03:50 +0100 |
Kim Alvefur |
mod_http_oauth2: Remove error message
|
| Fri, 03 Mar 2023 21:45:24 +0100 |
Kim Alvefur |
mod_http_oauth2: Mention name of client when giving out OOB authorization code
|
| Fri, 03 Mar 2023 21:45:05 +0100 |
Kim Alvefur |
mod_http_oauth2: Comment on mutation by other module
|
| Fri, 03 Mar 2023 21:14:19 +0100 |
Kim Alvefur |
mod_http_oauth2: Implement stateless dynamic client registration
|
| Fri, 03 Mar 2023 19:21:38 +0000 |
Matthew Wild |
mod_http_oauth2: Add support for 'iss' authz response parameter (RFC 9207)
|
| Fri, 03 Mar 2023 18:00:28 +0100 |
Kim Alvefur |
mod_http_oauth2: Derive scope from correct user details
|
| Fri, 03 Mar 2023 14:22:05 +0100 |
Kim Alvefur |
mod_http_oauth2: Fix to actually return OOB response
|
| Fri, 03 Mar 2023 11:24:05 +0000 |
Matthew Wild |
mod_http_oauth2: Add OIDC discovery endpoint (thanks Zash)
|
