- version update to .Net Standard 2.1
- fixed early disposal of memorycache
- fixed early disposal of key
- fixed memory leaks & minor refactoring
- bugfix to prevent endless amount of authz calls when user doesn't have any permissions
- upgrade packages
- change to netstandard 2.0
- bugfix custom permissions not found
- memorystream disposal
- upgrade to netcoreapp2.1
- httpclientfactory implementation
- additional jwt-token source "cookie"
- use of constants for jwt-token source (session, cookie or header)
- resolve errors in unit tests
- use of constants for jwt-token keys (session, cookie keys)
- add JWT-token to Cookie if AuthOptions "AddJwtCookie"-setting is true, independent of the AuthOptions "AutomaticTokenRefresh"-setting
- change ReadMe and extra logging during token refresh
- added the current principal to the
IIPermissionApplicationNameProvider.ApplicationName(...)
method, so one can use the claims of the current user in the logic.
- Fixed the service registration which gave runtime exceptions due to previous change.
- Made it possible to override the default behaviour of retrieving the ApplicationName
- Update Digipolis.DataProtection.Postgres to 3.0.0 (.NET Standard 2.0 compatible)
- Support for OAuth jwt-up token (userid in X-Authenticated-UserId claim)
- Upgrade to ASP.NET Core 2.0
- Added header jwt token read with option JwtTokenSource in AuthService.
- Added option to disable token lifetimevalidation to enable easier testing.
- Added support for serviceaccount permissions
- AspNet CookieAuth authentication ticket lifetime configurable through options
- Add querystring to return url on redirect
- Token refresh when using jwt in session
- Clear the authentication cookie on redirect to login.
- Return http status codes instead of redirects when request is XMLHttpRequest or call to /api route with CookieAuth
- Added possibility to disable the jwt token cookie
- Added possibility to add the jwt token to the session state
- conversion to csproj en MSBuild.
- Audience validation on token refresh only when set in options and partial match
- Added shared data protection key storage for load ballanced setup
- Added PDP api key
- Removed caching of PDP response without permission
- Added possibility to disable jwt token signature verification for testing purposes
- Bugfix token validation on linux
- Bugfix client_redirect url buildup due to nginx changing host header
- Added development permissions feature
- Initial version