Description

Delphi framework for Identity Access Management, including authorization and authentication. OAuth2 compliant authorization mechanism, supporting grants: implicit, client credentials and authorization code with PKCE (Proof Key for Code Exchange). Follows OpenID Connect specification for login workflow and identity token issuance.

Build your SSO Auth server in minutes, with non-visual components based on TMS Sparkle and TMS XData technologies.

Build-in optional self-user registration feature provides GUI allowing users to sign up for your software.

Make sure your users are real ones by requiring e-mail confirmation.

Full-features user interface includes a “forgot password” that allows users to recover the password themselves.

Both web and native applications are supported. Add authentication to your native applications using standard OAuth 2 flow.

Protecting your client applications by requiring users to login is as simple as dropping and configuring a non-visual TSphinxLogin component in the form

v2.2

• New : end_session_endpoint is now published in the OpenID Connect discovery metadata.
• New : TSphinxLogin.LogoutAndEndSession and TSphinxWebLogin.LogoutAndEndSession methods for client-side SSO logout, clearing the local session and redirecting to the identity provider''s end-session endpoint.
• New : TSphinxClientApp.PostLogoutRedirectUris property allows registering the list of URIs accepted as post_logout_redirect_uri in a logout request.
• New : TOidcClient.BuildLogoutUrl method builds the logout URL for the authorization server, supporting optional id_token_hint and post_logout_redirect_uri parameters.
• New : Support for WinArm64EC platform, introduced in Delphi 13.1.
• New : Mobile application authentication is now supported via custom URL schemes. TSphinxLogin now exposes a RedirectUri property and a HandleCallback method for iOS and Android.
• New : Logout web application is now served by the Sphinx server, providing a localized UI for the user to confirm or cancel the logout action.
• New : End session (logout) endpoint is now implemented, following the OpenID Connect RP-Initiated Logout specification.
• Fixed : TOidcClient.OnHttpClientCreate name fixed, it was misspelled as OnHttpClienCreate.

Additional Information