5 commits

Author	SHA1	Message	Date
Moto Ishizawa	25e4228e35	server: add expires_in field to the response of token endpoint	2016-09-11 23:47:18 +09:00
Eric Chiang	fa8f98acac	server: fix registration redirect for servers listenin at non-base URLs	2016-08-19 16:25:32 -07:00
Bobby Rullo	75473b4cba	refresh tokens: grant claims based on scopes ... Before, this logic was only in the OIDCServer.CodeToken() method; now it has been pulled out so that other paths, like OIDCServer.RefreshToken() can use it. The net affect, is that now refresh tokens can be used to get cross-client authenticated ID Tokens.	2016-06-14 14:14:36 -07:00
Bobby Rullo	e71c5086ba	server: CodeToken now does Cross-Client auth	2016-06-07 17:22:41 -07:00
Bobby Rullo	9b4740862c	server: /auth accepts, validates X-client scopes	2016-06-07 17:16:11 -07:00