TMS Sphinx v2.6.0.0 Full Source Delphi 10-13
Download TMS Sphinx v2.6.0.0 Full Source Delphi 10-13
Delphi framework for Identity Access Management, including authorization and authentication. OAuth2 compliant authorization mechanism, supporting grants: implicit, client credentials and authorization code with PKCE (Proof Key for Code Exchange). Follows OpenID Connect specification for login workflow and identity token issuance.
Build your SSO Auth server in minutes, with non-visual components based on TMS Sparkle and TMS XData technologies.
Build-in optional self-user registration feature provides GUI allowing users to sign up for your software.
Make sure your users are real ones by requiring e-mail confirmation.
Full-features user interface includes a “forgot password” that allows users to recover the password themselves.
Both web and native applications are supported. Add authentication to your native applications using standard OAuth 2 flow.
Protecting your client applications by requiring users to login is as simple as dropping and configuring a non-visual TSphinxLogin component in the form
Version 2.6 (October-2026)
-
New: TOidcClient.TokenEndpointAuthMethod and TSphinxExternalProvider.TokenEndpointAuthMethod properties allow sending the client credentials in the request body (
client_secret_post), as required by some providers. By default, it's detected from the provider discovery document. -
Improved: TOidcClient now accepts an
expires_invalue returned as a JSON string, which some providers (e.g. Microsoft) do. It was previously ignored, so the token was considered to never expire. Ticket #27296. -
Fixed: The logout endpoint showed an error page when it received a malformed
id_token_hint. It now ignores the hint and proceeds with a regular logout, asking the user for confirmation. -
Fixed: The logout endpoint could skip the user confirmation when the
id_token_hinthad an empty audience (aud) claim and the application accepted an empty client id in TSphinxConfig.OnGetClient.