DuendeSoftware/IdentityServer

Issues

• Upgrade from IS4 to IS7 can break RFC 7662

  #1628 opened a month ago by eduardsocea
  1

• Delete retired keys even if they can't be unprotected

  #1572 opened 7 months ago by RolandGuijt
  1

• Bug whereby DefaultBackChannelLogoutService.SendLogoutNotificationsAsync can result in concurrent access to underlying DbContext and an System.InvalidOperationException

  #1627 opened a month ago by mackie1001
  1

• Persistent cookies and server side sessions.

  #1622 opened a month ago by AndersAbel
  0

• Consider allowing multiple IEventSink registrations

  #1531 opened 9 months ago by AndersAbel
  3

• Cookie Expiration with Serverside sessions doesn't revoke tokens or send backchannel logout notifications

  #1552 opened 7 months ago by AndersAbel
  2

• Consider custom reuse of DefaultTokenValidator

  #1579 opened 5 months ago by AndersAbel
  1

• Consider automatic single logout when an IdentityServer session is overwritten

  #1619 opened 2 months ago by AndersAbel
  1

• Consider reworking Operation Cancelled to exception filter

  #1617 opened 2 months ago by AndersAbel
  0

• `ClientConfigurationStore` should depend on `IConfigurationDbContext`

  #1616 opened 2 months ago by AndersAbel
  0

• Client Secret usage audit

  #1614 opened 2 months ago by jasonliao-cb
  5

• Fix repeating error message when using Device Flow

  #1613 opened 2 months ago by RolandGuijt
  0

• Consider adding support for per client rate limiting

  #1591 opened 3 months ago by AndersAbel
  6

• Rename DPoPProofValidatonContext

  #1612 opened 3 months ago by josephdecock
  0

• .NET 9 Support

  #1593 opened 3 months ago by brockallen
  0

• License Usage API

  #1596 opened 3 months ago by josephdecock
  1

• Consider improving the nullability annotations on the RefreshTokenCreationRequest

  #1611 opened 3 months ago by RolandGuijt
  0

• Consider lowering the ClockSkew in TokenValidator

  #1553 opened 7 months ago by AndersAbel
  1

• OpenTelemetry ASP.NET Core Instrumentation Compatability

  #1575 opened 6 months ago by qhris
  2

• Add custom validator for Introspection

  #1609 opened 3 months ago by josephdecock
  0

• Fall back to other token types when passed an invalid token_type_hint

  #1578 opened 3 months ago by YC
  2

• Consider adding more cache header options to `DiscoveryOptions`

  #1589 opened 3 months ago by RolandGuijt
  2

• Consider allowing customization of PromptValuesSupported

  #1530 opened 3 months ago by josephdecock
  5

• Manually test static signing credentials from x509 certs

  #1602 opened 3 months ago by josephdecock
  1

• Consider refresh method on IBackChannelAuthenticationRequestStore

  #1588 opened 3 months ago by AndersAbel
  4

• Expiry time when `UseX509Certificate` is set to `true`

  #1571 opened 7 months ago by AndersAbel
  3

• Consider not issuing TokenIssuedFailureEvent for use_dpop_nonce error

  #1598 opened 3 months ago by runegri
  2

• License emulation for non-prod environments

  #1561 opened 7 months ago by AndersAbel
  1

• EF: Consider handling OperationCanceledException instead of TaskCanceledException in UnhandledExceptionLoggingFilter

  #1587 opened 3 months ago by RolandGuijt
  0

• Don't include PAR in discovery if feature is not enabled in license

  #1580 opened 5 months ago by josephdecock
  1

• Let EF migrations create default table names

  #1542 opened 8 months ago by AndersAbel
  0

• Claim Issuer not persisted when using Server Side Sessions

  #1546 opened 8 months ago by dheardal
  4

• IdentityServer Error LogLevel

  #1547 opened 8 months ago by ruudhe
  1

• Identity Server Login and Logout Localization Limitations

  #1557 opened 8 months ago by PascalAlbrechtComparis
  7

• Add server side session support for the external cookie scheme

  #1551 opened 7 months ago by AndersAbel
  2

• Consider letting redirect url respect response_mode after receiving invalid request on authorization endpoint

  #1554 opened 7 months ago by RolandGuijt
  0

• Consider extensibility point for sub/sid validation during endsession

  #1555 opened 7 months ago by josephdecock
  2

• Consider adding more validation to processed max_age and prompt

  #1567 opened 7 months ago by josephdecock
  0

• Update licensing component

  #1594 opened 3 months ago by brockallen
  1

• Consider switching to Microsoft.NET.Sdk.Web sdk

  #1574 opened 6 months ago by josephdecock
  1

• Investigate EF Core 8 performance issues

  #1564 opened 7 months ago by AndersAbel
  3

• PromptMode Login with Pushed Authorization Requests Get Stuck in Login Loop

  #1562 opened 7 months ago by andrew-from-toronto
  3

• Infinite loop when max_age=0

  #1545 opened 7 months ago by RolandGuijt
  0

• Add logging when DistributedCacheStateDataFormatter returns null

  #1540 opened 7 months ago by AndersAbel
  8

• GetIdentityServerRelativeUrl should take into account when IdentityServer is running at a subpath

  #1543 opened 8 months ago by RolandGuijt
  1

• Investigate support for X509 Certs and EC Keys

  #1533 opened 9 months ago by josephdecock
  1

• CryptographicException while calling /.well-known/openid-configuration (.NET 8)

  #1534 opened 9 months ago by Tobias-08
  14

• Check for empty ClientIds and Types collections in PersistedGrantFilter

  #1524 opened 10 months ago by RolandGuijt
  2

• Consider post-quantum cryptography sample

  #1529 opened 9 months ago by josephdecock
  0

• Rewrite LicenseValidator.ValidateClient to not use ConcurrentDictionary

  #1526 opened 9 months ago by AndersAbel
  1