Commit graph

664 commits

Author SHA1 Message Date
Fabi
13b14734b9
fix: append client id to aud (#71)
* fix: append client id to aud

* fix: append client id to aud

* Update pkg/oidc/token.go

Co-authored-by: Livio Amstutz <livio.a@gmail.com>

Co-authored-by: Livio Amstutz <livio.a@gmail.com>
2020-11-16 08:26:19 +01:00
Fabi
2370409a55
fix: allow additional scopes (#69)
* feat: allow additional scopes

* fix: mocks and tests

* fix: restrict additional scopes

* fix: restrict additional scopes

* fix: remove comments

* fix: remove comments
2020-11-03 08:07:02 +01:00
Fabi
3019f85fed
Merge pull request #70 from caos/dependabot/go_modules/golang.org/x/text-0.3.4
chore(deps): bump golang.org/x/text from 0.3.3 to 0.3.4
2020-11-02 10:26:55 +01:00
dependabot[bot]
ab9cef7605
chore(deps): bump golang.org/x/text from 0.3.3 to 0.3.4
Bumps [golang.org/x/text](https://github.com/golang/text) from 0.3.3 to 0.3.4.
- [Release notes](https://github.com/golang/text/releases)
- [Commits](https://github.com/golang/text/compare/v0.3.3...v0.3.4)

Signed-off-by: dependabot[bot] <support@github.com>
2020-10-29 04:06:24 +00:00
Fabi
6162e217e9
Merge pull request #68 from caos/basic-auth-encoding
fix: decode basic auth header components (clientID, clientSecret)
2020-10-23 16:07:05 +02:00
Livio Amstutz
deb33653d4 fix: decode basic auth header components (clientID, clientSecret) 2020-10-23 15:59:44 +02:00
Livio Amstutz
939e109515
chore(workflow): update github actions in release workflow (#65)
* chore(workflow): update github actions in release workflow

* chore(workflow): add github-actions to dependabot.yml

* fix dependabot.yml
2020-10-21 11:15:57 +02:00
Fabi
a2cafb633a
Merge pull request #67 from caos/discovery
fix: grant_types_supported in discovery
2020-10-21 11:09:37 +02:00
Livio Amstutz
84a295c2b5 update configuration.mock.go 2020-10-21 10:38:38 +02:00
Livio Amstutz
2ebbd7a2e0 fix: grant_types_supported in discovery 2020-10-21 10:36:34 +02:00
Livio Amstutz
3acc62e79e cleanup 2020-10-20 07:39:36 +02:00
Livio Amstutz
06dcac4c2f fix: remove signing key creation (when not found) 2020-10-19 15:26:34 +02:00
Fabi
4390119d1d
Merge pull request #64 from caos/jwt-userinfo
fix: UserInfo with JWT access token
2020-10-16 10:50:08 +02:00
Livio Amstutz
9b480be13a fix: UserInfo with JWT access token (return error in DecryptAES) 2020-10-16 10:47:33 +02:00
Fabi
c1699a2d93
Merge pull request #60 from caos/serializing
feat: private claims (incl. serialisation refactoring and jwt profile fix)
2020-10-15 15:27:00 +02:00
Livio Amstutz
736d6902d9 solve PR issues 2020-10-15 15:23:33 +02:00
Livio Amstutz
5cc884766e improve ValidateAuthReqScopes 2020-10-15 14:02:53 +02:00
Livio Amstutz
ed33332dce merging and missing mocks 2020-10-15 13:41:31 +02:00
Livio Amstutz
01a89c5142 Merge branch 'master' into serializing
# Conflicts:
#	pkg/op/userinfo.go
2020-10-15 13:34:15 +02:00
Fabi
d508af0a0e
Merge pull request #63 from caos/fix-concated-token
fix: possible nil pointer on userinfo
2020-10-15 13:26:35 +02:00
Livio Amstutz
f40a07feeb fix: possible nil pointer on userinfo 2020-10-15 12:42:04 +02:00
Livio Amstutz
d89470a33f improve userinfo token handling 2020-10-15 12:39:07 +02:00
Livio Amstutz
8be8306511 Merge branch 'master' into serializing
# Conflicts:
#	example/internal/mock/storage.go
#	pkg/op/mock/storage.mock.go
#	pkg/op/storage.go
2020-10-15 11:19:20 +02:00
Livio Amstutz
44c341d42e improve userinfo token handling 2020-10-15 09:41:50 +02:00
Fabi
9943f20215
feat: bearer access token includes tokenid and subject (#62) 2020-10-15 09:38:06 +02:00
Livio Amstutz
b8d892443c claims assertion 2020-10-14 16:41:04 +02:00
dependabot[bot]
49324646d7
chore(deps): bump github.com/sirupsen/logrus from 1.6.0 to 1.7.0 (#61)
Bumps [github.com/sirupsen/logrus](https://github.com/sirupsen/logrus) from 1.6.0 to 1.7.0.
- [Release notes](https://github.com/sirupsen/logrus/releases)
- [Changelog](https://github.com/sirupsen/logrus/blob/master/CHANGELOG.md)
- [Commits](https://github.com/sirupsen/logrus/compare/v1.6.0...v1.7.0)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-10-13 07:12:47 +02:00
Livio Amstutz
d6203fb0d5 chore: move CAOS_OIDC_DEV to const (and ensure TestValidateIssuer runs (even on machines with env set)) 2020-10-07 08:49:23 +02:00
Livio Amstutz
b311610d06 feat: check allowed scopes (and pass clientID to GetUserinfoFromScopes) 2020-10-07 08:44:26 +02:00
Livio Amstutz
b2903212ab cleanup 2020-09-30 08:40:28 +02:00
Livio Amstutz
707029d431 update example 2020-09-29 08:40:32 +02:00
Livio Amstutz
f845ce2010 comments 2020-09-29 08:34:37 +02:00
Livio Amstutz
507a437c56 scope form encoding 2020-09-29 08:13:51 +02:00
Livio Amstutz
1661b40fbe fix tests 2020-09-28 15:06:14 +02:00
Livio Amstutz
0cad2e4652 jwt profile and authorization handling 2020-09-28 13:55:22 +02:00
Livio Amstutz
d368b2d950 refactoring 2020-09-28 09:07:46 +02:00
Livio Amstutz
d7ed59db2b refactoring 2020-09-28 08:14:10 +02:00
Livio Amstutz
542ec6ed7b refactoring 2020-09-25 16:41:25 +02:00
Fabi
6cfd02e4c9
feat: prompt option (#59)
* feat: prompt option

* Update pkg/rp/relaying_party.go

Co-authored-by: Livio Amstutz <livio.a@gmail.com>

Co-authored-by: Livio Amstutz <livio.a@gmail.com>
2020-09-21 15:11:42 +02:00
Livio Amstutz
60560ce239
fix: marshal user info address (#58) 2020-09-21 10:44:19 +02:00
Florian Forster
f6863b95f3
docs(OAuth 2.0): JWT Profile (#57) 2020-09-21 07:03:22 +02:00
Fabi
e96815fddc
Merge pull request #56 from caos/service-accounts
feat: jwt profile grant
2020-09-16 16:58:01 +02:00
Livio Amstutz
c90a9d53c8 cleanup 2020-09-16 16:23:38 +02:00
adlerhurst
28f731c219 fix: remove test because we know it works. :P
fix: key as string instead of bytes
2020-09-16 15:48:52 +02:00
Livio Amstutz
779ad703c8 add NewJWTProfileAssertionFromKeyJSON 2020-09-16 15:35:21 +02:00
Livio Amstutz
0547bfbc1e Merge remote-tracking branch 'origin/service-accounts' into service-accounts 2020-09-16 15:22:26 +02:00
Livio Amstutz
64797c1df6 cleanup 2020-09-16 15:22:15 +02:00
Silvan
4a917fb9ca
Update pkg/rp/tockenexchange.go 2020-09-16 15:18:42 +02:00
adlerhurst
5b6175acfc fix: dependencies 2020-09-16 14:37:32 +02:00
adlerhurst
ad0966c1ab Merge branch 'service-accounts' of github.com:caos/oidc into service-accounts 2020-09-16 14:12:45 +02:00