10 commits

Author	SHA1	Message	Date
Takashi Norimatsu	8225157a1c	KEYCLOAK-6768 Signed and Encrypted ID Token Support	2019-08-15 15:57:35 +02:00
Takashi Norimatsu	0793234c19	KEYCLOAK-8460 Request Object Signature Verification Other Than RS256 (#5603) ... * KEYCLOAK-8460 Request Object Signature Verification Other Than RS256 also support client signed signature verification by refactored token verification mechanism * KEYCLOAK-8460 Request Object Signature Verification Other Than RS256 incorporate feedbacks and refactor client public key loading mechanism * KEYCLOAK-8460 Request Object Signature Verification Other Than RS256 unsigned request object not allowed * KEYCLOAK-8460 Request Object Signature Verification Other Than RS256 revert to re-support "none"	2018-11-19 14:28:32 +01:00
stianst	24e60747b6	KEYCLOAK-7560 Refactor token signature SPI PR ... Also incorporates: KEYCLOAK-6770 ES256/384/512 providers KEYCLOAK-4622 Use HS256 for refresh tokens KEYCLOAK-4623 Use HS256 for client reg tokens	2018-09-11 08:14:10 +02:00
Takashi Norimatsu	5b6036525c	KEYCLOAK-7560 Refactor Token Sign and Verify by Token Signature SPI	2018-09-11 08:14:10 +02:00
stianst	3c5027de3c	KEYCLOAK-7701 Refactor key providers to support additional algorithms	2018-06-29 14:14:25 +02:00
mposolda	3b6e1f4e93	KEYCLOAK-5007 Used single-use cache for tracke OAuth code. OAuth code changed to be encrypted and signed JWT	2017-09-29 13:20:22 +02:00
Stian Thorgersen	f29bb7d501	KEYCLOAK-4092 key provider for HMAC signatures	2016-12-19 10:50:43 +01:00
mposolda	69ce1e05f0	KEYCLOAK-3822 Changing signature validation settings of an external IdP is not sometimes reflected	2016-11-28 15:27:25 +01:00
mposolda	7c6032cc84	KEYCLOAK-3825 Ability to expire publicKeys cache. Migrated OIDCBrokerWithSignatureTest to new testsuite	2016-11-25 17:45:37 +01:00
Stian Thorgersen	7e33f4a7d1	KEYCLOAK-3882 Split server-spi into server-spi and server-spi-private	2016-11-10 13:28:42 +01:00