Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Feat: Pre-Authenticated URL #4388

Merged
merged 89 commits into from
Jul 10, 2024
Merged

Feat: Pre-Authenticated URL #4388

merged 89 commits into from
Jul 10, 2024

Conversation

tung2744
Copy link
Contributor

ref DEV-1402

@linear Linear
Copy link

linear bot commented Jun 21, 2024

DEV-1402 Implement App Initiated SSO to Web

@tung2744 tung2744 force-pushed the feat-app-initiated-sso-to-web branch 2 times, most recently from 16c5d86 to 283c04e Compare July 2, 2024 14:03
tung2744 and others added 27 commits July 5, 2024 14:53
@tung2744
Rename Session to ListableSession
2b2b117
@tung2744
Use new session.Session interface as session
09da881
@tung2744
Prevent unexpected use of session.ListableSession as session.Session
6acaf41
@tung2744
Fix compilation error in tests
4c36545
@tung2744
Resolve to the correct offline grant session with token hash
dd92aa6
@tung2744
Create OfflineGrantRefreshToken on issue offline grant
d367a4a
@tung2744
Ensure client id, scopes, authorization id are resolved correctly
5e76741
@tung2744
Return an error if the provided refresh token hash is not matching an…
7ab5f25 
…y token hash in offline grant
@tung2744
Ensure token hash comparisons are consuming constant time
87a00dd
@tung2744
Rename session.Session to session.ResolvedSession
4859e6d
@tung2744
Rename ClientID to InitialClientID in offline grant
3fdea22
@tung2744
Prefix old fields with Deprecated_
d3bcaa5
@tung2744
Define scope https://authgear.com/scopes/app-initiated-sso-to-web
ab22917
@tung2744
Remove all usage of deprecated fields of offline grant
2dd7a02
@tung2744
Add config for client to enable app-initiated-sso-to-web
ccbb0d3
@tung2744
Return ErrInvalidSession if session is invalid
45deb73
@tung2744
Issue device secret in authorization code flow if app-initiated-sso-t…
25a9f52 
…o-web scope exist
@tung2744
Do not return a deleted offline grant
35fcbce
@tung2744
Issue id_token with ds_hash
6196301
@louischan-oursky @tung2744
Support multiple tokens in a single offline grant
1572aa0 
ref DEV-1403
@tung2744
Add grant_type=urn:ietf:params:oauth:grant-type:token-exchange
94f8f9b
@tung2744
Validate token exchange request in App-Initiated-SSO-To-Web
e3ba5b8
@tung2744
Issue app initiated sso to web token
fc9a865
@tung2744
Support scope parameter in biometric request
f42a24b
@tung2744
Create a service to issue app initiated sso to web token
b521a74
@tung2744
Implement device secret rotation
8469811
@tung2744
Fix some incorrect interfaces and run make generate
5c8a445
@tung2744 tung2744 force-pushed the feat-app-initiated-sso-to-web branch from 0e11d73 to 67d5a53 Compare July 5, 2024 07:10
tung2744 and others added 13 commits July 5, 2024 18:21
@louischan-oursky louischan-oursky self-requested a review July 10, 2024 08:34
@louischan-oursky louischan-oursky self-assigned this Jul 10, 2024
@tung2744 tung2744 changed the title Feat: App initiated sso to web Feat: Pre-Authenticated URL Jul 10, 2024
@louischan-oursky louischan-oursky merged commit 26a809e into main Jul 10, 2024
19 checks passed
@louischan-oursky louischan-oursky deleted the feat-app-initiated-sso-to-web branch August 8, 2024 13:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@louischan-oursky louischan-oursky louischan-oursky approved these changes

Assignees

@louischan-oursky louischan-oursky

Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@tung2744 @louischan-oursky