You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
* upgrade gradle wrapper to v8.6
* add jitpack config
* updated versions and cleanup build.gradle
* Idtoken time skew (#3)
* Skip issue time validation or change the allowed time skew
Allows to completely disable ID tokens issue time validation, or change the default of 10 minutes to a custom allowed time skew in seconds.
* Update documentation to change the allowed id token time skew
---------
Co-authored-by: Tim Klingeleers <Mardaneus86@users.noreply.github.com>
* Fix NullPointerException for issuer without scheme in id token (#4)
Uri.getScheme() may return null if no scheme is contained in the given
string. This could cause a crash during id token validation when this
was the case for the contained "iss" claim.
Co-authored-by: Florian Märkl <info@florianmaerkl.de>
* Add methods to request access token synchronous (#5)
Co-authored-by: Luca Figoli <luca.figoli@consultant.aruba.it>
* fix configHash in app configuration (#6)
Co-authored-by: Maksim <taikonavt@gmail.com>
* fix the build
* cleanup
* add link to Jitpack for install details
* updated agp version
* upgraded gradle wrapper
---------
Co-authored-by: Tim Klingeleers <Mardaneus86@users.noreply.github.com>
Co-authored-by: Florian Märkl <info@florianmaerkl.de>
Co-authored-by: Luca Figoli <luca.figoli@consultant.aruba.it>
Co-authored-by: Maksim <taikonavt@gmail.com>
@@ -619,7 +619,7 @@ AppAuthConfiguration appAuthConfig = new AppAuthConfiguration.Builder()
619
619
620
620
ID Token validation was introduced in `0.8.0` but not all authorization servers or configurations support it correctly.
621
621
622
-
- For testing environments [setSkipIssuerHttpsCheck](https://github.com/openid/AppAuth-Android/blob/master/library/java/net/openid/appauth/AppAuthConfiguration.java#L129) can be used to bypass the fact the issuer needs to be HTTPS.
622
+
- For testing environments [setSkipIssuerHttpsCheck](https://github.com/openid/AppAuth-Android/blob/master/library/java/net/openid/appauth/AppAuthConfiguration.java#L143) can be used to bypass the fact the issuer needs to be HTTPS.
- To change the default allowed time skew of 10 minutes for the issue time, [setAllowedIssueTimeSkew](https://github.com/openid/AppAuth-Android/blob/master/library/java/net/openid/appauth/AppAuthConfiguration.java#L159) can be used.
- For testing environments [setSkipIssueTimeValidation](https://github.com/openid/AppAuth-Android/blob/master/library/java/net/openid/appauth/AppAuthConfiguration.java#L151) can be used to bypass the issue time validation.
0 commit comments