Livio Amstutz
|
50ab51bb46
|
introspect and client assertion
|
2021-01-28 08:41:36 +01:00 |
|
Livio Amstutz
|
a1a21f0d59
|
introspect
|
2021-01-08 15:01:23 +01:00 |
|
Livio Amstutz
|
b23f37f7eb
|
fix: clock skew when using jwt profile
|
2020-12-21 21:04:07 +01:00 |
|
Livio Amstutz
|
b2f23dc5b7
|
Merge branch 'master' into signingkey
|
2020-12-16 08:01:37 +01:00 |
|
Fabi
|
27f3bc0f4a
|
fix: change callbackpath (#74)
* fix: append client id to aud
* handle new callback path
Co-authored-by: Livio Amstutz <livio.a@gmail.com>
|
2020-11-30 11:21:09 +01:00 |
|
Livio Amstutz
|
36800145d6
|
renaming
|
2020-11-26 16:12:27 +01:00 |
|
Livio Amstutz
|
24120554e5
|
feat: add clock skew and option to put userinfo (profile, email, phone, address) into id_token
|
2020-11-26 15:46:08 +01:00 |
|
Fabi
|
13b14734b9
|
fix: append client id to aud (#71)
* fix: append client id to aud
* fix: append client id to aud
* Update pkg/oidc/token.go
Co-authored-by: Livio Amstutz <livio.a@gmail.com>
Co-authored-by: Livio Amstutz <livio.a@gmail.com>
|
2020-11-16 08:26:19 +01:00 |
|
Fabi
|
2370409a55
|
fix: allow additional scopes (#69)
* feat: allow additional scopes
* fix: mocks and tests
* fix: restrict additional scopes
* fix: restrict additional scopes
* fix: remove comments
* fix: remove comments
|
2020-11-03 08:07:02 +01:00 |
|
Livio Amstutz
|
deb33653d4
|
fix: decode basic auth header components (clientID, clientSecret)
|
2020-10-23 15:59:44 +02:00 |
|
Livio Amstutz
|
84a295c2b5
|
update configuration.mock.go
|
2020-10-21 10:38:38 +02:00 |
|
Livio Amstutz
|
2ebbd7a2e0
|
fix: grant_types_supported in discovery
|
2020-10-21 10:36:34 +02:00 |
|
Livio Amstutz
|
3acc62e79e
|
cleanup
|
2020-10-20 07:39:36 +02:00 |
|
Livio Amstutz
|
06dcac4c2f
|
fix: remove signing key creation (when not found)
|
2020-10-19 15:26:34 +02:00 |
|
Livio Amstutz
|
736d6902d9
|
solve PR issues
|
2020-10-15 15:23:33 +02:00 |
|
Livio Amstutz
|
5cc884766e
|
improve ValidateAuthReqScopes
|
2020-10-15 14:02:53 +02:00 |
|
Livio Amstutz
|
ed33332dce
|
merging and missing mocks
|
2020-10-15 13:41:31 +02:00 |
|
Livio Amstutz
|
d89470a33f
|
improve userinfo token handling
|
2020-10-15 12:39:07 +02:00 |
|
Livio Amstutz
|
8be8306511
|
Merge branch 'master' into serializing
# Conflicts:
# example/internal/mock/storage.go
# pkg/op/mock/storage.mock.go
# pkg/op/storage.go
|
2020-10-15 11:19:20 +02:00 |
|
Livio Amstutz
|
44c341d42e
|
improve userinfo token handling
|
2020-10-15 09:41:50 +02:00 |
|
Fabi
|
9943f20215
|
feat: bearer access token includes tokenid and subject (#62)
|
2020-10-15 09:38:06 +02:00 |
|
Livio Amstutz
|
b8d892443c
|
claims assertion
|
2020-10-14 16:41:04 +02:00 |
|
Livio Amstutz
|
d6203fb0d5
|
chore: move CAOS_OIDC_DEV to const (and ensure TestValidateIssuer runs (even on machines with env set))
|
2020-10-07 08:49:23 +02:00 |
|
Livio Amstutz
|
b311610d06
|
feat: check allowed scopes (and pass clientID to GetUserinfoFromScopes)
|
2020-10-07 08:44:26 +02:00 |
|
Livio Amstutz
|
f845ce2010
|
comments
|
2020-09-29 08:34:37 +02:00 |
|
Livio Amstutz
|
0cad2e4652
|
jwt profile and authorization handling
|
2020-09-28 13:55:22 +02:00 |
|
Livio Amstutz
|
d368b2d950
|
refactoring
|
2020-09-28 09:07:46 +02:00 |
|
Livio Amstutz
|
542ec6ed7b
|
refactoring
|
2020-09-25 16:41:25 +02:00 |
|
Livio Amstutz
|
c90a9d53c8
|
cleanup
|
2020-09-16 16:23:38 +02:00 |
|
Livio Amstutz
|
64797c1df6
|
cleanup
|
2020-09-16 15:22:15 +02:00 |
|
Livio Amstutz
|
2e75f54069
|
update mocks
|
2020-09-16 06:44:16 +02:00 |
|
Livio Amstutz
|
a56a4a018a
|
harmonize jwtProfile and existing interfaces / functions
|
2020-09-15 16:59:27 +02:00 |
|
Livio Amstutz
|
5a9e6e2c2a
|
let tests work
|
2020-09-15 08:06:43 +02:00 |
|
Livio Amstutz
|
8790b54e0d
|
update some op interfaces
|
2020-09-15 07:25:44 +02:00 |
|
Livio Amstutz
|
45230569d3
|
change RP interfaces
|
2020-09-14 07:52:16 +02:00 |
|
Livio Amstutz
|
ed6cbe4fe2
|
Merge remote-tracking branch 'origin/service-accounts' into service-accounts
|
2020-09-14 07:06:20 +02:00 |
|
Livio Amstutz
|
143ff3482c
|
change verifier interfaces
|
2020-09-11 10:45:07 +02:00 |
|
adlerhurst
|
17a72ccc97
|
fix: storage interface
|
2020-09-10 18:31:53 +02:00 |
|
Livio Amstutz
|
3777f1436d
|
Merge remote-tracking branch 'origin/service-accounts' into service-accounts
|
2020-09-10 16:24:58 +02:00 |
|
adlerhurst
|
a731a46ccf
|
fix: aud
|
2020-09-10 16:24:48 +02:00 |
|
Livio Amstutz
|
f8707958fc
|
Merge remote-tracking branch 'origin/service-accounts' into service-accounts
|
2020-09-10 16:24:29 +02:00 |
|
adlerhurst
|
7700cb3539
|
fix: implement storage
|
2020-09-10 15:43:21 +02:00 |
|
Livio Amstutz
|
eaf47fde8e
|
change some interfaces
|
2020-09-09 16:00:19 +02:00 |
|
Livio Amstutz
|
bfbd4adb1c
|
some ideas to implement jwt client assertion
|
2020-09-08 17:09:27 +02:00 |
|
Livio Amstutz
|
a37a8461a5
|
lot of unfinished changes
|
2020-09-08 16:07:49 +02:00 |
|
Livio Amstutz
|
9cb0fff23f
|
Merge remote-tracking branch 'origin/service-accounts' into service-accounts
|
2020-09-07 12:40:54 +02:00 |
|
adlerhurst
|
7487af3db4
|
add func for creating JWT token
|
2020-09-07 12:39:22 +02:00 |
|
Livio Amstutz
|
6a0dd7c270
|
Merge branch 'master' into service-accounts
# Conflicts:
# pkg/oidc/authorization.go
|
2020-09-07 12:36:10 +02:00 |
|
Livio Amstutz
|
abd3b6f521
|
fix: handle single aud string claim, extract en/decoder interface, comments (#51)
* en/decoding abstraction
* some comments
* fix token validation and error messages
* fix: audience mapping (single aud string)
* fix tests with VerifyIdToken
* reformat imports
* go mod tidy
* Update pkg/oidc/authorization.go
Co-authored-by: Silvan <silvan.reusser@gmail.com>
* Update pkg/oidc/authorization.go
Co-authored-by: Silvan <silvan.reusser@gmail.com>
* Update pkg/op/authrequest_test.go
Co-authored-by: Silvan <silvan.reusser@gmail.com>
* fix capitalization
Co-authored-by: Silvan <silvan.reusser@gmail.com>
|
2020-09-07 12:32:35 +02:00 |
|
adlerhurst
|
7a109a763d
|
feat: service account token exchange
|
2020-09-02 17:52:22 +02:00 |
|