implements authorization code grant#17

Merged

vinder-io merged 48 commits into

feature/VI-2-implements-authorization-code-grant

Jan 24, 2026

Commits on Jan 22, 2026

feat: this commit introduces records for parameters and authorization scheme
https-richardy
committed
feat: this commit introduces code and codeverifier properties in client authentication credentials to support the authorization_code flow
https-richardy
committed
feat: introduce supportedgranttype static class with authorizationcode and clientcredentials constants to represent supported grant types
https-richardy
committed
feat: support authorization_code grant in credentials validator with specific validations for code and code_verifier
https-richardy
committed
feat: define redirecturi value object representing a redirect uri address in the domain
https-richardy
committed
feat: introduce redirecturis collection in tenant entity to support multiple redirect uris
https-richardy
committed
feat: introduce global using for vinder.federation.domain.concepts
https-richardy
committed
feat: introduce redirecturi policy interface to validate oauth redirect uris
https-richardy
committed
feat: define authorization errors class with standardized authorization error definitions
https-richardy
committed
feat: introduce metadata property in securitytoken to support additional token metadata
https-richardy
committed
feat: introduce authorizationcode value in tokentype enum to support additional authentication flows
https-richardy
committed
feat: introduce global usings for domain policies and concepts
https-richardy
committed
feat: implement redirecturipolicy for redirect uri validation per rfc 6749
https-richardy
committed
feat: introduce global using for payloads.authorization namespace
https-richardy
committed
feat: implement authorization handler for authorization parameters validation and redirect uri enforcement
https-richardy
committed
feat: support authorization flow mapping through authorization and redirecturi mappers
https-richardy
committed
feat: align redirect uri validation with rfc 6749 section 3.1.2.3
https-richardy
committed
feat: define global using for system.security.cryptography namespace
https-richardy
committed
feat: introduce supported pkce methods class defining supported pkce methods
https-richardy
committed
feat: introduce pkcecodeverifier utility for pkce code verifier validation
https-richardy
committed
feat: implement authorization parameters validator enforcing oauth2 pkce requirements
https-richardy
committed
feat: introduce global usings for authorization payloads and validators
https-richardy
committed
feat: register authorization parameters validator for authorization parameters validation
https-richardy
committed
feat: define global usings for federation policies and identity handlers and fix usings syntax
https-richardy
committed
feat: enable redirect uri policy resolution through dependency injection
https-richardy
committed
feat: enable razor pages support in application pipeline
https-richardy
committed
feat: introduce global using for payloads.authorization
https-richardy
committed
feat: introduce global using for microsoft.aspnetcore.mvc.razorpages
https-richardy
committed
feat: rework authorize page with async handlers and oauth openid authorization logic
https-richardy
committed
fix: fix global using syntax for vinder.federation.application.payloads.permission
https-richardy
committed
feat: refactor authorization page with tailwind styling and authentication flow adjustments
https-richardy
committed
feat: expand authorization page error handling for tenant and redirect uri validation
https-richardy
committed
feat: redesign authorization page with modern two column layout and responsive tailwind ui
https-richardy
committed
feat: simplify login page by removing header and auxiliary options
https-richardy
committed

Commits on Jan 23, 2026

Commits on Jan 24, 2026