feat (admin-ui) : Update Client Form per wireframe

[duttarnab]

Refactor the Client form according to the screenshots below.

• Also, please notice the style conventions, i.e. pay attention to the case (not random upper and lower case…)
• id_token not IDToken
• Acronyms are all caps, e.g. JWT, TLS, ACR
• Make sure you pay attention to which fields are single value versus list
• Check to make sure all elements are on the correct tab
• You do not have to use left navigation -- that doesn't matter. The current top tabs are ok.

---

---

---

---

---

---

---

---

[duttarnab]

Tab-wise mapping of fieldsName with old fields name (Old field Name/Old tab Name)
Basic

• Authn method token endpoint (Authentication Method to token endpoint/ Encryption Signing)
• Supress authorization (Skip Authorization Flow?/ Basic)
• Redirect Regex (redirectUrisRegex/New field)

Tokens

• Access token type (Access Token as JWT/Advance) - JWT (true), Reference (false)
• Include claims in id_token (Include Claims In IdToken/Advance)
• Add auth_time to id_token (Require AuthTime/Advance)
• Run introspection script before JWT access token (Run Introspection Script Before AccessToken As Jwt Creation And Include Claims/Client Attributes)
• Token binding confirmation method for id_token (IdToken Binding Confirmation method/Advance)
• Access token additional audiences (Additional Audience/Client Attributes)
• Access token lifetime (Access Token Lifetime/Advance)
• Refresh token lifetime (Refresh Token Lifetime/Advance)
• Default max authn age (Default Maximun Authentication Age/Advance)

Logout

• Front channel. logout URI (Front Channel Logout URI/Advanced)
• Post logout redirect URI (Post logout redirect URIs/Basic)
• Back channel. logout URI (Back Channel Logout URI/Client Attributes)
• Back channel. logout session required (Back Channel Logout Session Required/Client Attributes)
• Front channel. logout session required (Logout Session Required/Advance)

Software Info

• Client URI (Client URI/Advanced)
• Policy URI (Policy URI/Basic)
• Logo URI (Logo URI/Basic)
• Terms of service URI (Terms of service URI/Advanced)
• Contacts (Contacts/Advanced)
• Authorized JS origins (Authorized Javascript Origins/Advanced)
• Software id (Software Id/Advanced)
• Software version (Software Version/Advanced)
• Software statement (Software Statement/Advanced)

CIBA/PAR/UMA

• Token delivery method (CIBA Token Delivery Mode/Advanced)
• Client notification endpoint (CIBA Client Notification Endpoint/Advanced)
• Require user code param (CIBA User Code Parameter?/Advanced)
• Request lifetime (parLifetime/New field)
• Require PAR (requirePar/New field)
• RPT token type (Rpt As Jwt/Advanced) - JWT (true), Reference (false)
• Claims redirect URI (Claim Redirect URIs/Advanced)

Encryption/Signing

• Client JWKS URI (Jwks URI/Encryption/Signing)

• Client JWKS (Jwks/Encryption/Signing)

• id_token
  a JWS alg for signing (JWS alg Algorithm for signing the ID Token/Encryption/Signing)
  b JWS alg for encryption (JWE alg Algorithm for encrypting the ID Token/Encryption/Signing)
  c JWS enc for encryption (JWE enc Algorithm for encrypting the ID Token)

• Access token
  a JWS alg for signing (Access Token Signing Algorithm/Encryption/Signing)

• Userinfo
  a JWS alg for signing (JWS alg Algorithm for signing userinfo responses)
  b JWS alg for encryption (JWE alg Algorithm for encrypting userinfo responses)
  c JWS enc for encryption (JWE enc Algorithm for encrypting userinfo responses)

• JARM
  a JWS alg for signing (authorizationSignedResponseAlg/New Field)
  b JWS alg for encryption (authorizationEncryptedResponseAlg/New Field)
  c JWS enc for encryption (authorizationEncryptedResponseEnc/ New Field)

• Request Object
  a JWS alg for signing (JWS enc Algorithm for signing request objects)
  b JWS alg for encryption (JWE alg Algorithm for encrypting request objects)
  c JWS enc for encryption (JWE enc Algorithm for encrypting request objects)

Advanced Client Properties

• id_token subject type (Subject Type/Basic)
• Sector Identifier URI (Sector Identifier URI/Basic)
• Persist Authorizations (Persist Client Authorizations/Basic)
• Allow spontaneous scopes (Allow Spontaneous Scopes/Client Attributes)
• Spontaneous scopes (spontaneousScopes/New field)
• Initiate Login URI (Initiate Login URI/Advanced)
• Request URIs (Request URIs/Advanced)
• Default ACR (Default Acr Values/Advanced)
• Allowed ACRs (authorizedAcrValues/New field)
• Default prompt=login (defaultPromptLogin/New field)
• TLS Subject DN (Tls Client Auth Subject Dn/Client Attributes)
• Client Expiration Date (client_expiration_date/Basic)

Client Scripts

• Spontaneous Scopes (Spontaneous Scopes/Client Scripts)
• Update Token (updateTokenScriptDns/ New Field)
• Post Authn (Post Authn Scripts/Client Scripts)
• Introspection (Introspection Scripts/Client Scripts)
• Password Grant (ropcScripts/New field)
• OAuth Consent (Consent Gathering Scripts/Client Scripts)
• UMA RPT Claims (Rpt Scripts/Client Scripts)

[duttarnab]

Done