14 Commits

Author	SHA1	Message	Date
ErickSkrauch	2111e1769f	Introduce an API endpoint to obtain public keys, that can be used to verify access tokens on other services	2024-06-14 04:36:49 +02:00
ErickSkrauch	17109f8eb5	Remove unused HS256 signing algorithm	2024-06-14 03:21:00 +02:00
ErickSkrauch	0a666e1e12	Extract public key from private pem file at runtime	2024-06-14 03:03:10 +02:00
ErickSkrauch	2a4f29801d	Fixes ACCOUNTS-2. Catch decryption exception for OAuth2 flow	2020-08-23 00:23:36 +03:00
ErickSkrauch	9da58beccf	Add deprecation notices	2019-12-11 14:24:31 +03:00
ErickSkrauch	2caf0558de	Use paragonie's Base64UrlSafe encoding library	2019-12-11 14:16:11 +03:00
ErickSkrauch	016a193263	Introduce revokation mechanism	2019-12-10 01:38:09 +03:00
ErickSkrauch	f0a73f2b7a	Make tokens, created by client credentials grant to live forever	2019-12-06 18:31:04 +03:00
ErickSkrauch	6fb32ec76d	Use libsodium to encrypt all data, related to OAuth2	2019-12-06 14:37:51 +03:00
ErickSkrauch	642db2e045	Use libsodium to encrypt data, stored in jwt tokens	2019-12-05 19:37:46 +03:00
ErickSkrauch	a81ef5cac2	Replace separate minecraft access tokens with JWT	2019-12-04 21:10:15 +03:00
ErickSkrauch	6ad66b28cf	Generate keys pair if they aren't exists	2019-08-02 19:16:34 +03:00
ErickSkrauch	f2ab7346aa	Fixed almost everything, but all functional tests are broken at the last minute :(	2019-08-02 03:29:20 +03:00
ErickSkrauch	45c2ed601d	Replace emarref/jwt with lcobucci/jwt ... Refactor all JWT-related components Replace RS256 with ES256 as a preferred JWT algorithm	2019-08-01 12:17:12 +03:00