v.1.9.0

• feat: SPID Notice n. 41 v. 2 - RP MUST use jwks or signed_jwks_uri

Full Changelog: v.1.8.1...v.1.9.0

v.1.8.1

• add Dockerfile

Full Changelog: v.1.7.0...v.1.8.1

v.1.7.0

• add option to download metadata from endpoint .well-known/openid-federation

v.1.6.5

Conformance to Avviso SPID n. 41 v. 2

• test 1.3.8: must be present the claim jwks or the claim signed_jwks_uri
• test 1.3.9: claim jwks_uri is renamed to signed_jwks_uri
• test 1.3.17: id_token_encryption_alg_values_supported MUST NOT be present
• test 1.3.18: id_token_encryption_enc_values_supported MUST NOT be present
• test 1.3.23: request_object_encryption_alg_values_supported MUST NOT be present
• test 1.3.24: request_object_encryption_enc_values_supported MUST NOT be present
• test 1.3.27: claim op_name is renamed to organization_name
• test 1.3.28: claim op_uri is renamed to homepage_uri

v.1.6.4

• fix testcase 10, 11 sequence diagram and refresh token request

v.1.6.3

• fix testcase 10, 11
• fix relax test 3.9.3 on error_description
• feat add test 3.1.1, 3.1.2
• fix test 3.5.15
• doc add num to tests
• fix aa entity-configuration authority_hint

v.1.6.1

• add test 3.3.26 "ID Token Payload: if grant_type was 'refresh_token', the value of acr MUST be 'https://www.spid.gov.it/SpidL1'"

v.1.6.0

• add test case for offline access CU2 (SPID Level 2)
• add test case for offline access CU3 (SPID Level 2)
• add test case for offline access CU2 (SPID Level 3)
• add test case for offline access not granted (SPID Level 1)
• add test case for offline access not granted (SPID Level 2)
• add test case for offline access not granted (SPID Level 3)
• add test case for offline access not valid due to acr_values incorrect order (SPID Level 1, SPID Level 2)
• add test case for offline access not valid due to acr_values incorrect order (SPID Level 1, SPID Level 3)

v.1.5.1

• add Attribute Authority sample reference implementation
• add Attribute Authority OpenAPI document (/attribute-authority/openapi)
• add Attribute Authority OpenAPI online documentation based on Redocly (/attribute-authority/apidoc)
• add Attribute Authority Entity Federation endpoint (/attribute-authority/.well-known/openid-federation)
• add Attribute Authority test case (rich authentication request for grant token)

v.1.4.0

• fix tests
• add self assessment functions
• add user switch helper