Commit graph

624 commits

Author SHA1 Message Date
Florian Forster
f6863b95f3
docs(OAuth 2.0): JWT Profile (#57) 2020-09-21 07:03:22 +02:00
Fabi
e96815fddc
Merge pull request #56 from caos/service-accounts
feat: jwt profile grant
2020-09-16 16:58:01 +02:00
Livio Amstutz
c90a9d53c8 cleanup 2020-09-16 16:23:38 +02:00
adlerhurst
28f731c219 fix: remove test because we know it works. :P
fix: key as string instead of bytes
2020-09-16 15:48:52 +02:00
Livio Amstutz
779ad703c8 add NewJWTProfileAssertionFromKeyJSON 2020-09-16 15:35:21 +02:00
Livio Amstutz
0547bfbc1e Merge remote-tracking branch 'origin/service-accounts' into service-accounts 2020-09-16 15:22:26 +02:00
Livio Amstutz
64797c1df6 cleanup 2020-09-16 15:22:15 +02:00
Silvan
4a917fb9ca
Update pkg/rp/tockenexchange.go 2020-09-16 15:18:42 +02:00
adlerhurst
5b6175acfc fix: dependencies 2020-09-16 14:37:32 +02:00
adlerhurst
ad0966c1ab Merge branch 'service-accounts' of github.com:caos/oidc into service-accounts 2020-09-16 14:12:45 +02:00
adlerhurst
fd3daa2335 fix: jwt profile request in op 2020-09-16 14:12:41 +02:00
Livio Amstutz
693ce1a07a differ between oauth2 and oidc relaying party 2020-09-16 10:51:33 +02:00
Livio Amstutz
d97df8a9b2 Merge remote-tracking branch 'origin/service-accounts' into service-accounts 2020-09-16 06:44:23 +02:00
Livio Amstutz
2e75f54069 update mocks 2020-09-16 06:44:16 +02:00
adlerhurst
cae42cccad fix: parse error 2020-09-15 18:03:49 +02:00
Livio Amstutz
a56a4a018a harmonize jwtProfile and existing interfaces / functions 2020-09-15 16:59:27 +02:00
Livio Amstutz
87b30dcd66 fix cli 2020-09-15 08:10:08 +02:00
Livio Amstutz
2e6d1f83f7 fix server example 2020-09-15 08:08:04 +02:00
Livio Amstutz
5a9e6e2c2a let tests work 2020-09-15 08:06:43 +02:00
Livio Amstutz
2dfdaa2223 fix state handling in auth request 2020-09-15 08:06:18 +02:00
Livio Amstutz
3c2ad6a53d update app example 2020-09-15 08:05:20 +02:00
Livio Amstutz
5a98ec4623 add missing error handling 2020-09-15 07:32:14 +02:00
Livio Amstutz
8790b54e0d update some op interfaces 2020-09-15 07:25:44 +02:00
Livio Amstutz
45230569d3 change RP interfaces 2020-09-14 07:52:16 +02:00
Livio Amstutz
ed6cbe4fe2 Merge remote-tracking branch 'origin/service-accounts' into service-accounts 2020-09-14 07:06:20 +02:00
Livio Amstutz
143ff3482c change verifier interfaces 2020-09-11 10:45:07 +02:00
adlerhurst
17a72ccc97 fix: storage interface 2020-09-10 18:31:53 +02:00
Livio Amstutz
3777f1436d Merge remote-tracking branch 'origin/service-accounts' into service-accounts 2020-09-10 16:24:58 +02:00
adlerhurst
a731a46ccf fix: aud 2020-09-10 16:24:48 +02:00
Livio Amstutz
f8707958fc Merge remote-tracking branch 'origin/service-accounts' into service-accounts 2020-09-10 16:24:29 +02:00
Livio Amstutz
6be292a984 Merge branch 'master' into service-accounts 2020-09-10 16:21:40 +02:00
Florian Forster
30f60da90d
chore: use only go mod native version (#52)
* chore: use only go mod native version

* chore: new go versions

* update go version in go.mod

Co-authored-by: Livio Amstutz <livio.a@gmail.com>
2020-09-10 15:53:17 +02:00
adlerhurst
9d8fc4fe8a Merge branch 'master' into service-accounts 2020-09-10 15:43:41 +02:00
adlerhurst
7700cb3539 fix: implement storage 2020-09-10 15:43:21 +02:00
Fabi
bcb6acbef1
Merge pull request #54 from caos/verifier-opts
feat: add possibility to add verifier opts to default RP
2020-09-10 15:42:05 +02:00
Livio Amstutz
8f07a5b9c9 feat: add possibility to add verifier opts to default RP 2020-09-10 15:19:55 +02:00
Livio Amstutz
f645dd3543
fix: unmarshalling of audience as array (#53) 2020-09-10 08:35:37 +02:00
Livio Amstutz
eaf47fde8e change some interfaces 2020-09-09 16:00:19 +02:00
Livio Amstutz
bfbd4adb1c some ideas to implement jwt client assertion 2020-09-08 17:09:27 +02:00
Livio Amstutz
a37a8461a5 lot of unfinished changes 2020-09-08 16:07:49 +02:00
Livio Amstutz
9cb0fff23f Merge remote-tracking branch 'origin/service-accounts' into service-accounts 2020-09-07 12:40:54 +02:00
adlerhurst
7487af3db4 add func for creating JWT token 2020-09-07 12:39:22 +02:00
Livio Amstutz
6a0dd7c270 Merge branch 'master' into service-accounts
# Conflicts:
#	pkg/oidc/authorization.go
2020-09-07 12:36:10 +02:00
Livio Amstutz
abd3b6f521
fix: handle single aud string claim, extract en/decoder interface, comments (#51)
* en/decoding abstraction

* some comments

* fix token validation and error messages

* fix: audience mapping (single aud string)

* fix tests with VerifyIdToken

* reformat imports

* go mod tidy

* Update pkg/oidc/authorization.go

Co-authored-by: Silvan <silvan.reusser@gmail.com>

* Update pkg/oidc/authorization.go

Co-authored-by: Silvan <silvan.reusser@gmail.com>

* Update pkg/op/authrequest_test.go

Co-authored-by: Silvan <silvan.reusser@gmail.com>

* fix capitalization

Co-authored-by: Silvan <silvan.reusser@gmail.com>
2020-09-07 12:32:35 +02:00
dependabot[bot]
822ffb581f
chore(deps): bump github.com/gorilla/schema from 1.1.0 to 1.2.0 (#45)
Bumps [github.com/gorilla/schema](https://github.com/gorilla/schema) from 1.1.0 to 1.2.0.
- [Release notes](https://github.com/gorilla/schema/releases)
- [Commits](https://github.com/gorilla/schema/compare/v1.1.0...v1.2.0)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-09-07 10:15:44 +02:00
dependabot[bot]
d642904c35
chore(deps): bump github.com/gorilla/handlers from 1.4.2 to 1.5.0 (#44)
Bumps [github.com/gorilla/handlers](https://github.com/gorilla/handlers) from 1.4.2 to 1.5.0.
- [Release notes](https://github.com/gorilla/handlers/releases)
- [Commits](https://github.com/gorilla/handlers/compare/v1.4.2...v1.5.0)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-09-07 10:15:29 +02:00
dependabot[bot]
2794ff12d5
chore(deps): bump github.com/gorilla/mux from 1.7.4 to 1.8.0 (#46)
Bumps [github.com/gorilla/mux](https://github.com/gorilla/mux) from 1.7.4 to 1.8.0.
- [Release notes](https://github.com/gorilla/mux/releases)
- [Commits](https://github.com/gorilla/mux/compare/v1.7.4...v1.8.0)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-09-07 07:40:34 +02:00
dependabot[bot]
c7a15ae970
chore(deps): bump github.com/google/uuid from 1.1.1 to 1.1.2 (#50)
Bumps [github.com/google/uuid](https://github.com/google/uuid) from 1.1.1 to 1.1.2.
- [Release notes](https://github.com/google/uuid/releases)
- [Commits](https://github.com/google/uuid/compare/v1.1.1...v1.1.2)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-09-07 07:40:22 +02:00
adlerhurst
7a109a763d feat: service account token exchange 2020-09-02 17:52:22 +02:00
Livio Amstutz
c828290ef1
fix: improve interceptor handling (#49) 2020-08-28 14:51:38 +02:00