IdentityServer

IdentityServer copied to clipboard

Consider providing an absolute expiration feature for the cookie

6

The built-in ExpiresUtc on the AuthenticationProperties is used for inactivity, but there is no built-in AbsoluteExpiresUtc. Consider adding such a feature. Likely would be a new/custom entry in the Items...

brockallen

Sometimes somethings are triggered in Startup before a request. Check where this could happen and see if it's ok to nop in those scenarios. https://github.com/DuendeSoftware/Support/issues/43

brockallen

Bumps [OpenTelemetry.Instrumentation.Http](https://github.com/open-telemetry/opentelemetry-dotnet) from 1.0.0-rc9 to 1.0.0-rc9.5. Release notes Sourced from OpenTelemetry.Instrumentation.Http's releases. 1.0.0-rc9.5 OpenTelemetry.Instrumentation.AspNetCore Fix Remote IP Address - NULL reference exception. (#3481) Metrics instrumentation to correctly populate http.flavor tag....

dependabot[bot]

**What issue does this PR address?** A redirect URI with brackets in the query string is not valid anymore. See issue [148](https://github.com/DuendeSoftware/Support/issues/148)

valdian

POC for DCR

leastprivilege

Configuration System

8

We need a story for programmatically configuring clients/resources/provider. This will likely involve: * read/write repository interface design * EF implementation * API endpoints for repo interfaces * security model for...

brockallen

Add support for jwks_uri client secret

1

To load the JSON web key dynamically from a URL instead of hard coding in client config.

leastprivilege

Currently it says > Your license for Duende IdentityServer only permits 1 number of issuers. You have processed requests for 2. This seems to happen a lot with gateway/proxy/container scenarios...

leastprivilege

Change missing license in non-dev to be Error from Warning

1

brockallen

More options for redirect_uri validation

1

see https://github.com/IdentityServer/IdentityServer4/issues/4865

leastprivilege