cim/zitadel-oidc
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
565 commits 8 branches 227 tags 3.4 MiB
Commit graph

95 commits

Author SHA1 Message Date
Livio Amstutz
a63fbee93d
fix: improve JWS and key verification (#128) 
* fix: improve JWS and key verification

* fix: get remote keys if no cached key matches

* fix: get remote keys if no cached key matches

* fix exactMatch

* fix exactMatch

* chore: change default branch name in .releaserc.js
 2021-09-14 15:13:44 +02:00
Livio Amstutz
147c6dca6e fixes 2021-07-06 08:58:35 +02:00
Livio Amstutz
0b446618c7 custom claims for assertion and jwt profile request 2021-06-23 14:01:31 +02:00
Livio Amstutz
850faa159d
fix: rp verification process (#95) 
* fix: rp verification process

* types

* comments

* fix cli client
 2021-06-23 11:08:54 +02:00
Livio Amstutz
400f5c4de4
fix: parse max_age and prompt correctly (and change scope type) (#105) 
* fix: parse max_age and prompt correctly (and change scope type)

* remove unnecessary omitempty
 2021-06-16 08:34:01 +02:00
Livio Amstutz
5119d7aea3 begin refresh token 2021-04-29 09:20:01 +02:00
Livio Amstutz
1518c843de
feat: token introspection (#83) 
* introspect

* introspect and client assertion

* introspect and client assertion

* scopes

* token introspection

* introspect

* refactoring

* fixes

* clenaup

* Update example/internal/mock/storage.go

Co-authored-by: Fabi <38692350+fgerschwiler@users.noreply.github.com>

* clenaup

Co-authored-by: Fabi <38692350+fgerschwiler@users.noreply.github.com>
 2021-02-15 13:43:50 +01:00
Livio Amstutz
24120554e5 feat: add clock skew and option to put userinfo (profile, email, phone, address) into id_token 2020-11-26 15:46:08 +01:00
Fabi
13b14734b9
fix: append client id to aud (#71) 
* fix: append client id to aud

* fix: append client id to aud

* Update pkg/oidc/token.go

Co-authored-by: Livio Amstutz <livio.a@gmail.com>

Co-authored-by: Livio Amstutz <livio.a@gmail.com>
 2020-11-16 08:26:19 +01:00
Livio Amstutz
2ebbd7a2e0 fix: grant_types_supported in discovery 2020-10-21 10:36:34 +02:00
Livio Amstutz
736d6902d9 solve PR issues 2020-10-15 15:23:33 +02:00
Livio Amstutz
d89470a33f improve userinfo token handling 2020-10-15 12:39:07 +02:00
Livio Amstutz
b8d892443c claims assertion 2020-10-14 16:41:04 +02:00
Livio Amstutz
f845ce2010 comments 2020-09-29 08:34:37 +02:00
Livio Amstutz
507a437c56 scope form encoding 2020-09-29 08:13:51 +02:00
Livio Amstutz
1661b40fbe fix tests 2020-09-28 15:06:14 +02:00
Livio Amstutz
0cad2e4652 jwt profile and authorization handling 2020-09-28 13:55:22 +02:00
Livio Amstutz
d7ed59db2b refactoring 2020-09-28 08:14:10 +02:00
Livio Amstutz
542ec6ed7b refactoring 2020-09-25 16:41:25 +02:00
Livio Amstutz
60560ce239
fix: marshal user info address (#58) 2020-09-21 10:44:19 +02:00
Livio Amstutz
c90a9d53c8 cleanup 2020-09-16 16:23:38 +02:00
adlerhurst
28f731c219 fix: remove test because we know it works. :P 
fix: key as string instead of bytes
 2020-09-16 15:48:52 +02:00
Livio Amstutz
779ad703c8 add NewJWTProfileAssertionFromKeyJSON 2020-09-16 15:35:21 +02:00
Livio Amstutz
64797c1df6 cleanup 2020-09-16 15:22:15 +02:00
adlerhurst
fd3daa2335 fix: jwt profile request in op 2020-09-16 14:12:41 +02:00
adlerhurst
cae42cccad fix: parse error 2020-09-15 18:03:49 +02:00
Livio Amstutz
a56a4a018a harmonize jwtProfile and existing interfaces / functions 2020-09-15 16:59:27 +02:00
Livio Amstutz
45230569d3 change RP interfaces 2020-09-14 07:52:16 +02:00
Livio Amstutz
143ff3482c change verifier interfaces 2020-09-11 10:45:07 +02:00
adlerhurst
a731a46ccf fix: aud 2020-09-10 16:24:48 +02:00
adlerhurst
9d8fc4fe8a Merge branch 'master' into service-accounts 2020-09-10 15:43:41 +02:00
adlerhurst
7700cb3539 fix: implement storage 2020-09-10 15:43:21 +02:00
Livio Amstutz
f645dd3543
fix: unmarshalling of audience as array (#53) 2020-09-10 08:35:37 +02:00
Livio Amstutz
bfbd4adb1c some ideas to implement jwt client assertion 2020-09-08 17:09:27 +02:00
Livio Amstutz
a37a8461a5 lot of unfinished changes 2020-09-08 16:07:49 +02:00
Livio Amstutz
6a0dd7c270 Merge branch 'master' into service-accounts 
# Conflicts:
#	pkg/oidc/authorization.go
 2020-09-07 12:36:10 +02:00
Livio Amstutz
abd3b6f521
fix: handle single aud string claim, extract en/decoder interface, comments (#51) 
* en/decoding abstraction

* some comments

* fix token validation and error messages

* fix: audience mapping (single aud string)

* fix tests with VerifyIdToken

* reformat imports

* go mod tidy

* Update pkg/oidc/authorization.go

Co-authored-by: Silvan <silvan.reusser@gmail.com>

* Update pkg/oidc/authorization.go

Co-authored-by: Silvan <silvan.reusser@gmail.com>

* Update pkg/op/authrequest_test.go

Co-authored-by: Silvan <silvan.reusser@gmail.com>

* fix capitalization

Co-authored-by: Silvan <silvan.reusser@gmail.com>
 2020-09-07 12:32:35 +02:00
adlerhurst
7a109a763d feat: service account token exchange 2020-09-02 17:52:22 +02:00
Livio Amstutz
57cf8ee9c7
fix: add code_challenge_methods_supported to discovery endpoint (#43) 
* fix: add code_challenge_methods_supported to discovery endpoint

* fix mock
 2020-08-20 16:27:51 +02:00
Livio Amstutz
2966355b0e
fix: add authorizations to userinfo (#37) 2020-07-09 13:40:32 +02:00
livio-a
2b9f7dfd18
Fix: userinfo (#15) 
* add idea to gitignore

* working userinfo

* cleanup

* tests
 2020-03-06 17:14:30 +01:00
Livio Amstutz
e8f3010910 feat: terminate session (front channel logout) 2020-03-03 11:31:23 +01:00
Livio Amstutz
4cf6c6d5f0 fix: another typo 2020-02-28 18:11:38 +01:00
Livio Amstutz
c3169868d8 fix: code challenge 2020-02-28 18:07:01 +01:00
Livio Amstutz
6d0890e280 initial commit 2020-01-31 15:22:16 +01:00