| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
|
| |
AccessToken.CreateFormatter method.
This was breaking ResourceServer scenarios where the ResourceServer did not have the authorization server's private signing key.
Fixes #298
|
| |
|
|
|
|
| |
This targets the common scenario where authorization servers and resource servers are actually on the same web application, and asymmetric cryptography is overkill and requires extra setup.
|
| |
|
| |
|
| |
|
|
|
|
|
|
|
| |
than just parameters.
AccessTokens are now serialized via a virtual method on that instance.
Fixes #38, I think.
|
| |
|
|
Resource Servers can now handle access tokens that are issued for a client's data (not a 3rd party resource owner's).
Client Identifiers are no longer included in access tokens for unauthenticated clients.
More work needed on IAccessTokenAnalyzer and the access token formatter. We need to generalize the serialization itself so folks can use JWT, etc.
We also still need access token to have a host-defined map of claims.
Fixes #104
Fixes #102
|