/

Issues

Go to advanced search

Unclear exception message from LocalIdProvider when credentials not found

Nov 2, 2020

Make the token available as request attribute after successful login

Sep 22, 2020

Make retainCacheOnErrorDuration configurable and/or give it a default value

Sep 17, 2020

Make subjectRoles ENTITY_TYPE constant available in API

Sep 2, 2020

Roles provided by the SubjectRoleEntityProvider can be used for for another application

Jun 29, 2020

AuthorizationService is unpredictable when there are multiple EntityProviders for the same entity

Jun 25, 2020

Create multiple cookies when the token size becomes larger then 4k

Apr 21, 2020

Support for Same-site cookie attribute

Apr 20, 2020

Support for federated logout via token_id_hint remenbering the id_token

Mar 23, 2020

OpenIdConnectProviderConfig.m_extraAuthParams Map should be returned as a copy

Jun 7, 2019

Token remains invalid after renewal causing lots of renewals

Jan 30, 2019

Auto renewal of token does not work as expected

Jan 14, 2019

Copy request headers to the subjectAttributes provided by the AuthorizationRequestInterceptor

Nov 28, 2018

Allow for a refresh of the authentication token cookie and custom attributes of the token

Nov 28, 2018

Support state and id_token_hint for openconnectid endsession endpoint

Nov 27, 2018

AuthenticationResource: use 'X-Forwarded-For' when logging

Oct 22, 2018

OpenIdConnectConfigTest fails on expected values from the google oauth wellknown endpoint

Sep 12, 2018

Openid provider fails often with Steam

Sep 10, 2018

Add a configurable logout redirect URL

Aug 30, 2018

Sliding expiration on authenticated web session

Aug 13, 2018

LocalIdProvider#getTokenAttributesFromRequest could return empty Optional when accountId is null

May 1, 2018

Password change fails with default web resources from org.amdatu.security.account.admin.rest.resource

Jan 16, 2018

IdProviders return wrong error when there is a replay attack or state timeout

Dec 20, 2017

When refreshing an accesstoken, the (new) refresh token is not returned

Dec 5, 2017

openidconnect provider does not return the accestokens' expiry time

Dec 4, 2017

Support `client_secret_post` method in OIDC IdProvider

Dec 1, 2017

TokenProvider sometimes throws NPE when handling an invalid JWT

Nov 14, 2017

Support authorization requests for third-party providers

Oct 30, 2017

Support JAX-RS 2.0 api

Aug 18, 2017

Return Unauthorized statuscode in RejectInfo

Aug 16, 2017

LocalIdProvider uses TOTP as salt

Aug 15, 2017

NPE on updating the serviceProperties in ConfigUtil

Aug 10, 2017

LocalIdProvider gives nullpointer when state cannot be decrypted

Aug 4, 2017

double encoding response type

Jul 26, 2017

Update ScribeJava to latest version

Jul 25, 2017

With OpenId a hybrid flow response type gives an illegalargument exception

Jul 13, 2017

Support authentication and logout callbacks

Jul 12, 2017

Possible NPE in OpenID provider

Jun 30, 2017

Provide easier access to attributes added to a token

Jun 27, 2017

Support HTTP headers in AuthenticationResource#handleSecurity

Jun 19, 2017

OpenID connect endpoint discovery can fail

Jun 14, 2017

Account admin does not use checked credentials from configuration

Jun 14, 2017

Support OpenID 1/2 identity providers

Jun 14, 2017

OpenID connect redirect URI mismatch

Jun 14, 2017

Provide access to the account id used for local login.

Jun 13, 2017

Allow alternative SecureRandom instances to be created

May 23, 2017

Split authentication service and ID providers

Feb 27, 2017

Fix Bnd warnings in authorization project

Feb 20, 2017

Valid tokens without provider type cause NPE when AuthResource

Feb 20, 2017

Implement authorization support for RESTful web services

Sep 16, 2016

Showing 1-50 of 74