1600a6799a
feat: return error for updateUsedByCode()
2025-02-05 13:40:41 +08:00
bbe2162e27
feat: fix bug in GetTokenByTokenValue() ( #3541 )
2025-01-30 00:48:20 +08:00
6175fd6764
feat: make token_type_hint optional ( #3397 )
2024-12-04 20:10:15 +08:00
a439c5195d
feat: get token only by hash now, remove get-by-value backward-compatible code
2024-11-13 17:04:27 +08:00
a19060c7cb
fix: missing parameter type_token_hint in IntrospectToken() ( #2812 )
...
* fix: missing parameter type_token_hint in IntrospectToken(); fix key token type
2024-03-17 01:39:04 +08:00
976b5766a5
feat: refactor out token_oauth.go
2024-03-08 15:03:28 +08:00
3a9ffedce4
feat: support phone and Email in /api/login/oauth/access_token API ( #2725 )
...
Phone Number supports for /api/login/oauth/access_token as username
✅ Closes : #2724
2024-02-21 17:27:24 +08:00
540f22f8bd
feat: refactor GetTokenByTokenValue()
2024-01-29 10:03:33 +08:00
b25b5f0249
Support original accessToken in token APIs
2023-12-02 16:56:18 +08:00
badfe34755
feat: add "nonce" into the OAuth and OIDC tokens, for some apps require "nonce" to integrate ( #2522 )
2023-12-01 18:29:39 +08:00
a5f9f61381
feat: add token hash to improve performance
2023-11-30 18:05:30 +08:00
811999b6cc
feat: fix error handling in CheckPassword() related functions
2023-11-20 21:49:19 +08:00
e5a189e0f4
fix: remove isGlobalAdmin field in user ( #2235 )
...
* refactor: remove isGlobalAdmin field in user
* fix: upload xlsx
* fix: remove field in account table
2023-08-19 12:23:15 +08:00
ea10f8e615
feat: make hard-coded authz adapter editable, rename adapter to ormer ( #2149 )
...
* refactor: rename casbinAdapter to casdoorAdapter
* feat: add initEnforcer
* fix: router
* refactor: make hard-coded code configurable
* fix: data type
* feat: support sqlite3
* feat: disable delete and edit name for built in resources
* feat: optimize code
* fix: init
* fix: e2e
* fix: remove datasourcename
* fix: revert rename
* refactor: change all ORM's Adatper to Ormer
* refactor: name
2023-07-29 15:07:04 +08:00
a3b0f1fc74
feat: add owner to getUserByWechatId()
2023-06-21 21:29:53 +08:00
cc456f265f
feat: fix LDAP user password checking logic in GetOAuthToken() ( #1975 )
2023-06-15 21:04:09 +08:00
02e692a300
feat: return most backend API errors to frontend ( #1836 )
...
* feat: return most backend API errros to frontend
Signed-off-by: yehong <239859435@qq.com >
* refactor: reduce int type change
Signed-off-by: yehong <239859435@qq.com >
* feat: return err backend in token.go
Signed-off-by: yehong <239859435@qq.com >
---------
Signed-off-by: yehong <239859435@qq.com >
2023-05-30 15:49:39 +08:00
cb542ae46a
feat: fix org admin permissions ( #1822 )
2023-05-09 00:06:52 +08:00
5280f872dc
Speed up GetOAuthToken()
2023-03-27 14:05:44 +08:00
117ee509cf
feat: fix name format in application login: GetClientCredentialsToken() ( #1639 )
2023-03-25 23:02:08 +08:00
dc7b66822d
feat: change token ExpiresIn to second ( #1550 )
2023-02-14 09:18:30 +08:00
9256791420
feat: app session control and db migrate ( #1539 )
...
* feat: integrate application session management into Casdoor's session management (#774 ) && standardized the database migration process (#1533 )
* feat: integrate application session management into Casdoor's session management (#774 )
* feat: integrate application session management into Casdoor's session management (#774 )
* feat: integrate application session management into Casdoor's session management (#774 )
* feat: integrate application session management into Casdoor's session management (#774 )
* feat: integrate application session management into Casdoor's session management (#774 )
* feat: integrate application session management into Casdoor's session management (#774 )
* feat: integrate application session management into Casdoor's session management (#774 )
* feat: integrate application session management into Casdoor's session management (#774 )
* feat: integrate application session management into Casdoor's session management (#774 )
* feat: integrate application session management into Casdoor's session management (#774 )
* feat: integrate application session management into Casdoor's session management (#774 )
* feat: integrate application session management into Casdoor's session management (#774 )
* feat: integrate application session management into Casdoor's session management (#774 )
* feat: integrate application session management into Casdoor's session management (#774 )
* feat: integrate application session management into Casdoor's session management (#774 )
* feat: integrate application session management into Casdoor's session management (#774 )
* feat: integrate application session management into Casdoor's session management (#774 )
* feat: integrate application session management into Casdoor's session management (#774 )
* feat: integrate application session management into Casdoor's session management (#774 )
* feat: integrate application session management into Casdoor's session management (#774 )
* feat: integrate application session management into Casdoor's session management (#774 )
* feat: integrate application session management into Casdoor's session management (#774 )
* feat: integrate application session management into Casdoor's session management (#774 )
* feat: integrate application session management into Casdoor's session management (#774 )
* feat: integrate application session management into Casdoor's session management (#774 )
* feat: integrate application session management into Casdoor's session management (#774 )
* feat: integrate application session management into Casdoor's session management (#774 )
* feat: integrate application session management into Casdoor's session management (#774 )
* feat: integrate application session management into Casdoor's session management (#774 )
* feat: integrate application session management into Casdoor's session management (#774 )
* feat: integrate application session management into Casdoor's session management (#774 )
* feat: integrate application session management into Casdoor's session management (#774 )
* feat: integrate application session management into Casdoor's session management (#774 )
* feat: integrate application session management into Casdoor's session management (#774 )
* feat: integrate application session management into Casdoor's session management (#774 )
* feat: integrate application session management into Casdoor's session management (#774 )
* feat: integrate application session management into Casdoor's session management (#774 ) && standardized the database migration process
* feat: integrate application session management into Casdoor's session management (#774 ) && standardized the database migration process
* feat: integrate application session management into Casdoor's session management (#774 ) && standardized the database migration process
---------
Co-authored-by: Zayn Xie <84443886+xiaoniuren99@users.noreply.github.com >
* fix: migrate err
* fix: migrate err
* feat: app session control and db migrate
* feat: app session control and db migrate
* feat: app session control and db migrate
---------
Co-authored-by: Zayn Xie <84443886+xiaoniuren99@users.noreply.github.com >
2023-02-12 09:33:24 +08:00
6f7230e949
feat: support refresh token on GetOAuthToken ( #1536 )
2023-02-10 23:52:13 +08:00
5d9b17542f
feat: end-user log out ( #1356 )
2023-01-17 22:57:05 +08:00
a6e9084973
Remove duplicated i18n words
2023-01-06 20:12:32 +08:00
f075d0fd74
Refactor out application.IsRedirectUriValid()
2022-12-21 00:35:33 +08:00
26acece8af
feat: add all other missing objects to init_data ( #1407 )
...
* Add all other missing objects to init_data.json
* Format golang code
* feat: add all other missing objects to init_data
* feat: add all other missing objects to init_data
2022-12-18 01:49:42 +08:00
1bb3d2dea9
feat: refactor backend i18n ( #1373 )
...
* fix: handle the dataSourceName when DB changes
* reduce duplication of code
* feat: refactor translation error message
* feat: use json intsead of ini file
* remove useless translation
* fix translate problems
* remove useless addition
* fix pr problems
* fix pr problems
* fix split problem
* use gofumpt to fmt code
* use crowdin to execute backend translation
* fix pr problems
* refactor: change translation file structure same as frontend
* delete useless output
* update go.mod
2022-12-07 13:13:23 +08:00
b337b908ea
feat: fix the bug that admin cannot upload avatar for other users ( #1323 )
2022-11-25 09:36:47 +08:00
d86f3c88c7
feat: support i18n in backend err messages ( #1232 )
...
* feat: support i18n in backend err messages
* use gofumpt to fmt code
* fix review problems
* support auto generate err message
* delete beego/i18n moudle
* fix Github action test problems
* fix review problems
* use gofumpt to format code
* use gofumpt to fmt code
2022-10-23 15:16:24 +08:00
4c7f6fda37
fix: Add restriction to username when signing up ( #1203 )
2022-10-10 19:58:02 +08:00
a383af0ebc
feat: fix token info not contains roles and permissions ( #1060 )
...
* fix: fix token info not contains roles and permissions
feat: remove repeated code for obtaining roles and permissions in user controller
* Update user.go
* Update user.go
* Update token.go
Co-authored-by: Yang Luo <hsluoyz@qq.com >
2022-08-24 01:41:26 +08:00
6676cc8ff3
fix: add JTI name to JWT token ( #989 )
...
* feat: add jti to jwt
* fix
* fix
2022-08-11 14:32:47 +08:00
79119760f2
style: golint ( #988 )
2022-08-09 16:50:49 +08:00
802995ed16
refactor: remove WeChat unionId to properties ( #985 )
2022-08-08 18:43:12 +08:00
2ea58cd639
chore(style): use gofumpt to fmt go code ( #967 )
2022-08-07 12:26:14 +08:00
f0431701c9
fix: fix OAuth error response ( #835 )
...
* fix: fix OAuth error response
* fix: provide more detailed error messages for TokenError
2022-07-01 14:53:34 +08:00
a6a055cc83
Fix: ExpiresIn of token should be seconds. ( #676 )
...
Signed-off-by: 疯魔慕薇 <kfanjian@gmail.com >
2022-04-18 10:57:51 +08:00
b92d03e2bb
feat: add wechat mini program support ( #658 )
...
* feat: add wechat mini program support
Signed-off-by: Steve0x2a <stevesough@gmail.com >
* fix: accept suggestions.
Signed-off-by: Steve0x2a <stevesough@gmail.com >
* fix: error message and code level modification
Signed-off-by: Steve0x2a <stevesough@gmail.com >
* fix: simplify the use process
Signed-off-by: Steve0x2a <stevesough@gmail.com >
2022-04-15 11:49:56 +08:00
9877174780
fix: add independent error message in token endpoint ( #662 )
...
* fix: add independent error message in token endpoint
Signed-off-by: Steve0x2a <stevesough@gmail.com >
* fix: reduced use of variables
Signed-off-by: Steve0x2a <stevesough@gmail.com >
* fix: error messages use the same variable
Signed-off-by: Steve0x2a <stevesough@gmail.com >
2022-04-14 10:22:56 +08:00
24459d852e
fix: comparing hashed password with plain text password during password grant ( #627 )
...
* fix: use object.CheckPassword for password grant
* Apply suggestions from code review
fix: remove log per change request
2022-03-30 00:37:38 +08:00
879ca6a488
fix: refresh_token api return old token ( #623 )
...
Signed-off-by: Steve0x2a <stevesough@gmail.com >
2022-03-27 23:10:05 +08:00
cd76e9372e
feat: delete the old token when refreshing token ( #617 )
...
Signed-off-by: Steve0x2a <stevesough@gmail.com >
2022-03-24 19:58:12 +08:00
8a9cc2eb8f
fix: change client_secret in refresh_token API as optional ( #540 )
...
Signed-off-by: Yixiang Zhao <seriouszyx@foxmail.com >
2022-03-07 13:52:51 +08:00
1d0af9cf7b
fix: client_credentials' token miss some claims ( #536 )
...
Signed-off-by: Steve0x2a <stevesough@gmail.com >
2022-03-04 22:57:31 +08:00
178cf7945d
feat: improve token introspection endpoint ( #534 )
...
* feat: add introspection endpoint to oidc discovery endpoint
* fix: let introspect endpoint handle formData as spec define.
Signed-off-by: Leon <leondevlifelog@gmail.com >
2022-03-04 08:54:33 +08:00
ab5af979c8
feat: add Oauth 2.0 Token Introspection(rfc7662) endpoint support ( #532 )
...
Signed-off-by: Leon <leondevlifelog@gmail.com >
2022-03-03 17:48:47 +08:00
2a0dcd746f
feat: add token logout endpoint ( #526 )
...
Signed-off-by: Steve0x2a <stevesough@gmail.com >
2022-03-02 20:37:31 +08:00
22f5ad06ec
fix: Make secret optional when using PKCE ( #525 )
...
Signed-off-by: Steve0x2a <stevesough@gmail.com >
2022-03-02 13:15:14 +08:00
697b3e4998
feat: add implicit flow support ( #520 )
...
* feat: add implicit flow support
Signed-off-by: Steve0x2a <stevesough@gmail.com >
* fix: idp support in implicit flow
Signed-off-by: Steve0x2a <stevesough@gmail.com >
2022-03-01 19:09:59 +08:00
