IdentityServer3 Versions Save

• Patch for #1332

• Updated internals to use Autofac's OWIN support
• Fixed a few OIDC protocol bugs discovered in conformance testing

• Add GetSignInMessage OWIN extension method

• Added logging to diagnose certain HRD errors
• Added error page URL for signin message releated errors on login page
• Fixed a logging bug around sessions
• minor bug fixes

• bug fix related to session state and persistent logins
• added helper extension method to login user from outside of IdentityServer (such as a registration page)
• bug fix related to redirecting to invalid redirect_uri
• added configuration setting to control how many sign in message cookies purged
• added content-type to end session callback to fix problems in safari and iOS
• added option to control cookie's secure flag (for load balancer scenarios)
• changed signout behavior to not require authenticated user (but can be required via new flag)

Bug fixes and new features:

• Registrations can now have child registrations
• Registrations can be marked as per-HTTP request
• Registrations can resolve dependencies outside the callback function
• Added allowed CORS origins per client (via the new ICorsPolicyService)
• Added ability for any client to use client credential flow in addition to a user-centric flow (e.g. implicit + client cred flow)
• Added ability to update access token claims when refreshing an access token using a refresh token
• Added ability to do an auto-redirect to the post logout redirect URI after logout

Some of these changes required an update to the database schema. If you are using the EF persistence layer, check the following docs: https://identityserver.github.io/Documentation/docs/ef/migrations.html

• Added token revocation endpoint
• Added support for more data types in JSON/JWT output
• fixed a bug in localization string IDs

Fixes:

https://github.com/IdentityServer/Thinktecture.IdentityServer3/issues/834

• more bugfixes
• reworked logging and eventing
• more input validation and hardening
• updated documentation
• added welcome page
• updated handling of login_hint and acr_values
• updated nuget package names
• updated docs site (https://identityserver.github.io/Documentation/)

• bug fixes & cleanup
• reworked logging
• add events for key operations
• extensible client secret validation
• added OpenID Connect session management spec (status change notifications)
• support for client key rotation
• support for localization
• and a lot of minor stuff

...and created a new documentation site: https://thinktecture.github.io/Thinktecture.IdentityServer.v3.Documentation/