README.md in rodauth-oauth-1.3.2 vs README.md in rodauth-oauth-1.4.0
- old
+ new
@@ -16,12 +16,16 @@
* Hybrid OP
* Config OP
* Dynamic OP
* Form Post OP
* 3rd Party-Init OP
+* Session Management OP
+* RP-Initiated Logout OP
+* Front-Channel Logout OP
+* Back-Channel Logout OP
-(it also passes the conformance tests for the RP-Initiated Logout OP).
+The certifications were obtained using the [example OIDC server](/examples/oidc/authentication_server.rb) deployed [here](https://rodauth-oauth-oidc.onrender.com/).
## Features
This gem implements the following RFCs and features of OAuth:
@@ -41,26 +45,29 @@
* `oauth_jwt` - [JWT Access Tokens](https://tools.ietf.org/html/draft-ietf-oauth-access-token-jwt-07);
* `oauth_jwt_secured_authorization_request` - [JWT Secured Authorization Request](https://tools.ietf.org/html/draft-ietf-oauth-jwsreq-20);
* `oauth_jwt_secured_authorization_response_mode` - [JWT Secured Authorization Response_mode](https://openid.net/specs/openid-financial-api-jarm.html);
* `oauth_resource_indicators` - [Resource Indicators](https://datatracker.ietf.org/doc/html/rfc8707);
* Access Type (Token refresh online and offline);
-* `oauth_http_mac` - [MAC Authentication Scheme](https://tools.ietf.org/html/draft-hammer-oauth-v2-mac-token-02);
* `oauth_assertion_base` - [Assertion Framework](https://datatracker.ietf.org/doc/html/rfc7521);
* `oauth_saml_bearer_grant` - [SAML 2.0 Bearer Assertion](https://datatracker.ietf.org/doc/html/rfc7522);
* `oauth_jwt_bearer_grant` - [JWT Bearer Assertion](https://datatracker.ietf.org/doc/html/rfc7523);
* `oauth_dynamic_client_registration` - [Dynamic Client Registration Protocol](https://datatracker.ietf.org/doc/html/rfc7591) and [Dynamic Client Registration Management](https://www.rfc-editor.org/rfc/rfc7592);
* OAuth application and token management dashboards;
* The recommendations for [Native Apps](https://www.rfc-editor.org/rfc/rfc8252);
-It also implements the [OpenID Connect layer](https://openid.net/connect/) (via the `openid` feature) on top of the OAuth features it provides, including:
+It also implements several components of [OpenID Connect](https://openid.net/connect/) on top of the OAuth features it provides, including:
-* [OpenID Connect Core](https://gitlab.com/os85/rodauth-oauth/-/wikis/Id-Token-Authentication);
-* [OpenID Connect Discovery](https://gitlab.com/os85/rodauth-oauth/-/wikis/OIDC-Dynamic-Client-Registration);
-* [OpenID Multiple Response Types](https://gitlab.com/os85/rodauth-oauth/-/wikis/Hybrid-flow);
-* [OpenID Connect Dynamic Client Registration](https://gitlab.com/os85/rodauth-oauth/-/wikis/OIDC-Dynamic-Client-Registration);
-* [RP Initiated Logout](https://gitlab.com/os85/rodauth-oauth/-/wikis/RP-Initiated-Logout);
+* `oidc` - [OpenID Connect Core](https://gitlab.com/os85/rodauth-oauth/-/wikis/Id-Token-Authentication);
+ * `oidc_self_issued` - [Self-Issued OpenID Provider](https://openid.net/specs/openid-connect-core-1_0.html#SelfIssued)
+ * [OpenID Multiple Response Types](https://gitlab.com/os85/rodauth-oauth/-/wikis/Hybrid-flow);
+ * [OpenID Connect Discovery](https://gitlab.com/os85/rodauth-oauth/-/wikis/OIDC-Dynamic-Client-Registration);
+* `oidc_dynamic_client_registration` - [OpenID Connect Dynamic Client Registration](https://gitlab.com/os85/rodauth-oauth/-/wikis/OIDC-Dynamic-Client-Registration);
+* `oidc_session_management` - [Session Management](https://gitlab.com/os85/rodauth-oauth/-/wikis/Session-Management);
+* `oidc_rp_initiated_logout` - [RP Initiated Logout](https://gitlab.com/os85/rodauth-oauth/-/wikis/RP-Initiated-Logout);
+* `oidc_frontchannel_logout` - [Frontchannel Logout](https://gitlab.com/os85/rodauth-oauth/-/wikis/Frontchannel-Logout);
+* `oidc_backchannel_logout` - [Backchannel Logout](https://gitlab.com/os85/rodauth-oauth/-/wikis/Backchannel-Logout);
This gem supports also rails (through [rodauth-rails]((https://github.com/janko/rodauth-rails))).
## Installation
@@ -81,11 +88,11 @@
## Resources
| | |
| ------------- | ----------------------------------------------------------- |
-| Website | https://os85.gitlab.io/rodauth-oauth/ |
-| Documentation | https://os85.gitlab.io/rodauth-oauth/rdoc/ |
+| Website | https://honeyryderchuck.gitlab.io/rodauth-oauth/ |
+| Documentation | https://honeyryderchuck.gitlab.io/rodauth-oauth/rdoc/ |
| Wiki | https://gitlab.com/os85/rodauth-oauth/wikis/home |
| CI | https://gitlab.com/os85/rodauth-oauth/pipelines |
## Articles