10 Commits

Author	SHA1	Message	Date
Kerry	1de6de05a1	add prompt param to OIDC auth url creation (#3794)	2023-10-11 02:20:23 +00:00
Kerry	3139f5729b	OIDC: Token refresher class (#3769) ... * add tokenRefresher class * export generateScope * export oidc from matrix * mark experimental * Apply suggestions from code review Co-authored-by: Richard van der Hoff <1389908+richvdh@users.noreply.github.com> * remove some vars in test * make TokenRefresher un-abstract, comments and improvements * remove invalid jsdoc * Update src/oidc/tokenRefresher.ts Co-authored-by: Richard van der Hoff <1389908+richvdh@users.noreply.github.com> * Code review improvements * document TokenRefreshFunction --------- Co-authored-by: Richard van der Hoff <1389908+richvdh@users.noreply.github.com>	2023-10-09 20:46:43 +00:00
Kerry	6e8d15e5ed	add claims to completeauhtorizationcodegrant response (#3765)	2023-10-04 05:05:54 +01:00
Michael Telatynski	b186d79dde	Fix jest/valid-expects lints (#3586)	2023-07-12 17:11:52 +00:00
Kerry	5df4ebaada	OIDC: Log in (#3554) ... * use oidc-client-ts during oidc discovery * export new type for auth config * deprecate generateAuthorizationUrl in favour of generateOidcAuthorizationUrl * testing util for oidc configurations * test generateOidcAuthorizationUrl * lint * test discovery * dont pass whole client wellknown to oidc validation funcs * add nonce * use oidc-client-ts for oidc response * validate user state and update tests * use oidc-client-ts for code exchange * use oidc-client-ts in completing auth grant * use client userState for homeserver * more comments	2023-07-11 02:20:19 +00:00
Kerry	b8fa030d5d	OIDC: use oidc-client-ts (#3544) ... * use oidc-client-ts during oidc discovery * export new type for auth config * deprecate generateAuthorizationUrl in favour of generateOidcAuthorizationUrl * testing util for oidc configurations * test generateOidcAuthorizationUrl * lint * test discovery * dont pass whole client wellknown to oidc validation funcs * add nonce * use client userState for homeserver	2023-07-09 21:19:32 +00:00
Kerry	09de76bd43	OIDC: validate id token (#3531) ... * validate id token * comments * tidy comments	2023-07-03 21:12:15 +00:00
Kerry	9de4a057df	OIDC: navigate to authorization endpoint (#3499) ... * utils for authorization step in OIDC code grant * tidy * completeAuthorizationCodeGrant util functions * response_mode=query * add scope to bearertoken type * add is_guest to whoami response type * doc comments Co-authored-by: Richard van der Hoff <1389908+richvdh@users.noreply.github.com> * use shimmed TextEncoder * fetchMockJest -> fetchMock * comment * bearertokenresponse * test for lowercase bearer * handle lowercase token_type --------- Co-authored-by: Richard van der Hoff <1389908+richvdh@users.noreply.github.com>	2023-06-26 23:46:53 +00:00
Kerry	df78d7cf67	OIDC: add dynamic client registration util function (#3481) ... * rename OidcDiscoveryError to OidcError * oidc client registration functions * test registerOidcClient * tidy test file * reexport OidcDiscoveryError for backwards compatibility	2023-06-21 21:55:25 +00:00
Kerry	c66850e897	OIDC: Validate m.authentication configuration (#3419) ... * validate m.authentication, fetch issuer wellknown * move validation functions into separate file * test validateWellKnownAuthentication * test validateOIDCIssuerWellKnown * add authentication cases to autodiscovery tests * test invalid authentication config on wk * improve types * test case for account:false * use hasOwnProperty in validateWellKnownAuthentication * comments * make registration_endpoint optional	2023-06-11 21:32:44 +00:00