ncsa / oa4mp

Open Authorization for MyProxy

https://oa4mp.org/

ncsa/oa4mp Issues

HTTPHeaderClaimsSource does not appear to be usable?
Updated 3 months ago5
Make auth headers available in the QDL runtime
Updated 3 months ago1
Tomact as an authorization server broken
Updated 3 months ago1
Documentation for scopes antiquated
Updated 3 months ago
in the scopes element of the XML configuration, the handler attribute is not documented.
Updated 3 months ago
Update dependencies with critical vulnerabilities
Updated 3 months ago1
NPE in version 5.4.3 getting Ersatz chain
Updated 3 months ago
Discovery servlet should be configurable
Updated 3 months ago
No verification of user scope requests
Updated 3 months ago3
Incorrect type name listed in claim source documentation
Updated 4 months ago1
In the token exchange, assert expires_in?
Updated 5 months ago
OIDC assumes every admin client is in a VO
Updated 5 months ago
OIDC CM refresh token lifetime
Updated 5 months ago
Get issuer from well-known page in command line client
Updated 5 months ago5
well-known pages
Updated 5 months ago1
Add query facility for client management servlet
Updated 5 months ago1
Unused client cleanup deleting in-use clients
Updated 5 months ago1
CLI remove client should remove the permissions
Updated 5 months ago1
Cannot remove unmanaged clients in the CLI
Updated 5 months ago
Reorganize OA4MP QDL distro PDFs
Updated 5 months ago
Default Refresh Token lifetime not being read from server config
Updated 5 months ago
Add client flag to allow commas in scope lists?
Updated 6 months ago
Retool unit tests for clients
Updated 6 months ago
Update testing harness to use new in-memory and file stores from Derby
Updated 6 months ago
remove old client management tests
Updated 6 months ago
approval_ts in approval store is not accurate.
Updated 6 months ago
Track last login for clients
Updated 6 months ago1
Refresh endpoint must check for required refresh token
Updated 7 months ago
template resolution for access token scopes should use originally returned scopes if none specified
Updated 7 months ago
RFC 7636 support for RFC 8628
Updated 7 months ago
Investigate adding support for token encryption using RFC 7516
Updated 7 months ago
Improve test suite with introspection
Updated 7 months ago
Consider support for RFC7643
Updated 7 months ago2
Client management zeros out client grace period
Closed 7 months ago
Audit user id token claims in restrictive cases
Updated 7 months ago
Client should not check if an ID token was returned for pure OAuth clients on refresh
Closed 7 months ago
Do not send original scopes as refresh/exchange scopes unless they are explicitly sent in the request
Updated 7 months ago
Update client management web page
Updated 8 months ago
Client configuration improvements
Updated 8 months ago
Error when using CLI
Closed 8 months ago2
Log file has NPE when loading logging
Updated 8 months ago1
VO table asserts last_modified timestamp is a BigInt but tried to process it as a timestamp
Updated 8 months ago
NPE during device code flow
Updated 9 months ago3
Scopes in response from token endpoint only includes scopes for the id token. Include all scopes
Updated 9 months ago1
Add regression tests for QDL workspace variables
Updated 9 months ago
proxy_claims stopped working in 5.4.1
Updated 9 months ago3
Client configuration should use OIDC auto-discovery
Updated 9 months ago1
Unused Client client throws NPE during configuration
Closed 9 months ago
NullPointerException if "use" not set in JWKS
Updated 9 months ago
Protect against cross site scripting attacks
Updated 9 months ago