Gateway
-
Users cannot be updated after first authentication #4176
Management
-
Certificates are not initialized in cluster environment #4183
-
Email templates are not initialized in cluster environment #4182
-
Nimbus dependency is missing #4184
-
Registration confirmation email template expires after field is not working #4186
-
Reporters are not initialized in cluster environment #4177
-
User providers are not initialized in cluster environment #4180
Gateway
-
Account is disabled after reset password (complete user registration option) #3627
Gateway
Gateway
-
[oidc] Propagate initial Authorization Request #2848
-
[SSO] Clients with different identity providers on same domain, can log in users via SSO #2675
-
[oidc] UserInfo with POST method returns 401 #2865
-
[oidc] [dcr] Reject registration where a redirect_uri has a fragment #2866
-
[oidc] auth_time should be a long value #2867
Oauth2
-
Redirect_uri matching act as a wildcard by default #2190
Gateway
Gateway
-
[Autologin] fetch all user information after registration and reset password #2847
Gateway
-
Do not try to load local image resources if src tag is an absolute http link #1970
General
-
NullPointerException with unknown client #1895
Idp
-
Role Mapper does not handle attribute value with '=' #1936
Management
Oidc
-
Missing SubjectTypesSupported in oidc/.well-known/openid-configuration response #1928
Scim
-
Org.bson.codecs.configuration.CodecConfigurationExceptionCan’t find a codec for class io.gravitee.am.gateway.handler.scim.model.Attribute #1953
Certificate
Gateway
Identityprovider
Management
-
Scopes are still present when a security domain is deleted. #346
Oauth2
-
A refresh_token is provided even for a client without this grant type #338
-
Access token additional parameters #341
-
Access token after Implicit/Hybrid flow is the same as Resource Owner Flow #446
-
Authorization codemissing client_id #343
-
Authorization server must throw invalid request exception if request includes a parameter more than once #363
-
Client can ask for any scope, even if scope are not defined from domain settings #337
-
Different behaviors between no scope and empty scope #340
-
Flow with redirect_uri (auth_code / implicit) #371
-
Gateway returns a 500 when providing an invalid Basic auth header #339
-
Invalid set-cookie value #352
-
Scope approvals are never removed #362
-
Unsupported response_type with authorize endpoint #342
-
Wrong "sub" claim for resource owner password grant flow #374
-
[authorization code] An unknown client / invalid client must not be redirected to login form #353
-
[authorization code] Login form must not be accessed directly #358
-
[authorization code] No redirect_uri must result on an error #357
-
[revocation] No error / error_description when the client_id is not the one used to generate token #385
-
[revocation] No error and error_description when the client is unknown #384
Oidc
-
At_hash ID Token claim is required for Implicit and Hybrid flow #396
-
Client cannot be found in case of failure #408
-
Handle nonce parameter for existing tokens #316
-
Hybrid Flow - response type code+token should not have an id_token in response even with scope openid #439
-
Hybrid flow Authorization Error Response must be return in the fragment component of the Redirection URI #413
-
Implicit flow should use fragment in redirection uri instead of query-param #400
-
Mismatch redirect_uri should end up with default AM error page #409
-
No error_description when calling UserInfo endpoint #378
-
Nonce parameter is required for implicit flow #395
-
OpenIDScopeUpgrader - ScopeAlreadyExistsException for newly created database #418
-
Some Location HTTP redirect_uri are not absolute #415
-
Sub claim must be an internal identifier #376
-
UserInfo Response 'sub' claim mismatch ID Token 'sub' claim #394
-
[implicit] redirect_uri is required #402
Plugins
-
PluginContextFactoryImpl - Unable to refresh plugin context #430
Gateway
-
Management] add healthcheck probes #453
Idp
Oauth2
Oidc
-
Complete OpenID Provider Metadata #330
-
Hybrid Flow handle multiple response type #332
-
Implicit flow handle id_token response type #334
-
Not the same nonce in the ID Token as in the authorization request #299
-
Request with prompt=login when user logged in #319
-
Request with prompt=none when not logged in #300
-
Requesting Claims using Scope Values #380
-
Requesting Claims using the "claims" Request Parameter #325
-
Requesting ID Token with max_age=1 seconds restriction #301
-
Requesting ID Token with max_age=10000 seconds restriction #302
-
Revoke tokens issued from an code using twice #328
-
Signed ID Token has no kid #298
-
UserInfo Endpoint access with POST and bearer body #317
Openid
OIDC
Oauth2
Dashboard
-
Do not fetch all access and refresh token information for "count" analytics #249
General
-
Add the "client_credentials" grant type to the default admin client #244 (Thanks to pletessier)
Global
-
Enable SSL/HTTPS at gateway level #247
Identity-provider
Oauth2
Management-api
-
Browser error when a client has no grant types #14
Management-ui
-
Fix splash screen image flickering #44
Oauth2
-
Access token collision #8
-
CORS header not settled for /oauth/token #9
-
Display authenticated user during token validation #32
-
Error when generating an access token using application/xml #25
-
HTTP Error 500 when client_id does not exist #36
-
Not able to authenticate user using inline identity provider #29
-
Refresh token does not work as expected #7