f5ceb77ea7
bugfix: removed duplicate protocol
...
Signed-off-by: Stephan Richter <s.richter@srsoftware.de >
2024-10-20 17:36:15 +02:00
1a5a137329
bugfix: deriving issuer from hostname
...
Signed-off-by: Stephan Richter <s.richter@srsoftware.de >
2024-10-20 17:33:09 +02:00
f2218de611
fixing bug in WellKnownController
...
Signed-off-by: Stephan Richter <s.richter@srsoftware.de >
2024-10-20 17:15:59 +02:00
813f3d2898
debugging
...
Signed-off-by: Stephan Richter <s.richter@srsoftware.de >
2024-10-20 16:53:03 +02:00
640b49a70b
implemented forwarding errors to UI
...
Signed-off-by: Stephan Richter <s.richter@srsoftware.de >
2024-10-19 21:48:40 +02:00
5458e6d015
improved error message display on login papge
...
Signed-off-by: Stephan Richter <s.richter@srsoftware.de >
2024-10-18 21:04:00 +02:00
951c65c121
preparing to pass error messages to client
...
Signed-off-by: Stephan Richter <s.richter@srsoftware.de >
2024-10-18 19:35:45 +02:00
a4200f43aa
implemented locking-user-on-login-fail, needs to be tested
...
Signed-off-by: Stephan Richter <s.richter@srsoftware.de >
2024-10-18 00:11:40 +02:00
9ea6148583
implemented EncryptedKeyStore
...
for this to work, the KeyStorage interface had to be extended
Signed-off-by: Stephan Richter <s.richter@srsoftware.de >
2024-09-29 00:16:56 +02:00
a8b476264c
implemented trust option
...
Signed-off-by: Stephan Richter <s.richter@srsoftware.de >
2024-09-24 20:59:13 +02:00
3e88c91154
implemented persistent sessions (not destroyed when broweser closed) – needs more work
...
Signed-off-by: Stephan Richter <s.richter@srsoftware.de >
2024-09-18 08:38:13 +02:00
30f2e115ea
added dashboard
...
Signed-off-by: Stephan Richter <s.richter@srsoftware.de >
2024-09-17 12:40:05 +02:00
2250a78e91
added landing page to client properties
...
Signed-off-by: Stephan Richter <s.richter@srsoftware.de >
2024-09-17 11:33:13 +02:00
bb5d507a13
removed debug output
...
Signed-off-by: Stephan Richter <s.richter@srsoftware.de >
2024-09-16 23:59:42 +02:00
8bfaf22084
tied nonce to AuthorizationService by dedicated methods
...
Signed-off-by: Stephan Richter <s.richter@srsoftware.de >
2024-09-16 23:56:29 +02:00
f737c1dc50
moved nonce from client to auhtorization
...
Signed-off-by: Stephan Richter <s.richter@srsoftware.de >
2024-09-16 23:28:38 +02:00
f0213512ad
implemented SqliteClientService
...
Signed-off-by: Stephan Richter <s.richter@srsoftware.de >
2024-09-15 20:24:46 +02:00
0b96aeb63d
altered AuthorizationService to use User and Client references instead of full objects. Added tests.
...
Signed-off-by: Stephan Richter <s.richter@srsoftware.de >
2024-09-15 10:38:55 +02:00
2f4726d1e7
decoupling sesson object from user object
...
Signed-off-by: Stephan Richter <s.richter@srsoftware.de >
2024-09-10 23:27:17 +02:00
f600040c0e
refining some tests, preparing test for session service
...
Signed-off-by: Stephan Richter <s.richter@srsoftware.de >
2024-09-10 20:53:03 +02:00
8865b19fae
working on SqliteUserService:
...
user creation and list works, upsert needs to be done
Signed-off-by: Stephan Richter <s.richter@srsoftware.de >
2024-09-08 11:05:43 +02:00
b275064aba
implemented permission editing
...
Signed-off-by: Stephan Richter <s.richter@srsoftware.de >
2024-08-25 23:13:12 +02:00
0e7bdb5442
implemented key rotation in RotatingKeyManager
...
Signed-off-by: Stephan Richter <s.richter@srsoftware.de >
2024-08-21 22:24:51 +02:00
d6007493df
implemented:
...
- at_hash in id-token
- testing for strong passwords
- better protocol detection in PathHandler
- session extension on user activity
Signed-off-by: Stephan Richter <s.richter@srsoftware.de >
2024-08-20 00:10:04 +02:00
d5ff936710
implementing at_hash
...
Signed-off-by: Stephan Richter <s.richter@srsoftware.de >
2024-08-19 22:54:26 +02:00
5057b54bef
bugfixes in token handling, added session duration property to user
...
Signed-off-by: Stephan Richter <s.richter@srsoftware.de >
2024-08-11 00:08:05 +02:00
cc131d45e0
implemented removal of user
...
Signed-off-by: Stephan Richter <s.richter@srsoftware.de >
2024-08-10 20:48:20 +02:00
62c85410a9
implemented password reset flow
...
Signed-off-by: Stephan Richter <s.richter@srsoftware.de >
2024-08-09 23:56:40 +02:00
95d47e3d63
implemented password reset link and sending via mail
...
Signed-off-by: Stephan Richter <s.richter@srsoftware.de >
2024-08-09 02:03:01 +02:00
31afced7f7
implemented:
...
- altering of mail settings
- sending email
Signed-off-by: Stephan Richter <s.richter@srsoftware.de >
2024-08-09 00:27:32 +02:00
f3c4c098c0
working on sending mails: prerequisite mail configuration in progress
...
Signed-off-by: Stephan Richter <s.richter@srsoftware.de >
2024-08-07 00:20:26 +02:00
f25814cae5
implemented adding users, prepared sending reset links
...
Signed-off-by: Stephan Richter <s.richter@srsoftware.de >
2024-08-05 23:52:55 +02:00
d01289c068
refactored classes and modules, fixed decoding bug
...
Signed-off-by: Stephan Richter <s.richter@srsoftware.de >
2024-08-05 00:27:09 +02:00
49929adaa3
revised TokenController.provideToken
...
Signed-off-by: Stephan Richter <s.richter@srsoftware.de >
2024-08-05 00:07:47 +02:00
5c7f86c4a4
re-implemented first part: authorization
...
Signed-off-by: Stephan Richter <s.richter@srsoftware.de >
2024-08-04 20:12:29 +02:00
43b9b427c7
re-implemented authorization
...
Signed-off-by: Stephan Richter <s.richter@srsoftware.de >
2024-08-04 10:48:23 +02:00
e7513fee76
made TokenController configurable
...
Signed-off-by: Stephan Richter <s.richter@srsoftware.de >
2024-08-03 22:20:32 +02:00
2752d80222
minor code improvements
...
Signed-off-by: Stephan Richter <s.richter@srsoftware.de >
2024-08-03 10:58:15 +02:00
93f6c2d603
first working version
...
Signed-off-by: Stephan Richter <s.richter@srsoftware.de >
2024-08-03 00:47:53 +02:00
928e6d23cb
working on key management
...
Signed-off-by: Stephan Richter <s.richter@srsoftware.de >
2024-08-02 10:01:27 +02:00
1e8ca6dc3a
implemented main part of authorization and token delivery
...
Signed-off-by: Stephan Richter <s.richter@srsoftware.de >
2024-07-30 00:22:21 +02:00
6b7e0d2c97
spotless
...
Signed-off-by: Stephan Richter <s.richter@srsoftware.de >
2024-07-29 09:57:19 +02:00
47c7c59cee
succeeded to create verifyable jwt with jose
...
Signed-off-by: Stephan Richter <s.richter@srsoftware.de >
2024-07-29 09:49:31 +02:00
6b341bd209
working on correct signing
...
Signed-off-by: Stephan Richter <s.richter@srsoftware.de >
2024-07-29 09:24:49 +02:00
3923b855fb
working on implementation using jose library
...
Signed-off-by: Stephan Richter <s.richter@srsoftware.de >
2024-07-29 09:10:49 +02:00
252252a9d1
trying to implement using jose library. current obstacle is: I don't know how to involve client secret in key generation
...
Signed-off-by: Stephan Richter <s.richter@srsoftware.de >
2024-07-29 00:36:19 +02:00
ddb30ba295
preparing jwt creation
...
Signed-off-by: Stephan Richter <s.richter@srsoftware.de >
2024-07-29 00:16:38 +02:00
0c1baee8e0
divided Backend into several controllers
...
Signed-off-by: Stephan Richter <s.richter@srsoftware.de >
2024-07-25 01:26:23 +02:00
09e5a52c53
working on token endpoint
...
Signed-off-by: Stephan Richter <s.richter@srsoftware.de >
2024-07-24 00:57:15 +02:00
fe14e81304
implemented custom loggin
...
Signed-off-by: Stephan Richter <s.richter@srsoftware.de >
2024-07-24 00:16:55 +02:00
