IdentityServer

IdentityServer copied to clipboard

https://github.com/DuendeSoftware/Support/issues/123 > **Which version of Duende IdentityServer are you using?** > > 6.1.2 > > **Which version of .NET are you using?** > > .NET 6 > > **Challenge** >...

brockallen

Refresh token revocation should filter on sid for reference tokens

1

https://github.com/DuendeSoftware/Support/issues/77

brockallen

In the validator, simply check if the requested resources are in the allowed resources list. Could be used with or without allowed scopes.

brockallen

Context: https://github.com/DuendeSoftware/Support/issues/101

brockallen

This would be a non-trivial change, but it allows a formal location for indicating session id when tokens are created. Currently, the session id is inferred from the validated request...

brockallen

**What issue does this PR address?** **Important: Any code or remarks in your Pull Request are under the following terms:** If You provide us with any comments, bug reports, feedback,...

leastprivilege

For migrations from older versions that issue type="jwt" but the new tokens want to use type="at+jwt", our TokenValidator's ValidateJwtAsync we only accept the one (when the aud is absent), and...

brockallen

Implement multiple concurrent sessions

14

migrated from IdentityServer4 https://github.com/IdentityServer/IdentityServer4/issues/1721

leastprivilege

Re-visit JAR and OIDC RO spec and validate against our implementation

4

https://darutk.medium.com/implementers-note-about-jar-fff4cbd158fe

leastprivilege

Add analyzer to improve code

EngRajabi