Livio Amstutz
b60f1ed7a8
errors
2021-09-27 09:08:34 +02:00
Livio Amstutz
f90e685c76
Merge branch 'main' into op
2021-09-27 08:17:20 +02:00
Livio Amstutz
a63fbee93d
fix: improve JWS and key verification ( #128 )
...
* fix: improve JWS and key verification
* fix: get remote keys if no cached key matches
* fix: get remote keys if no cached key matches
* fix exactMatch
* fix exactMatch
* chore: change default branch name in .releaserc.js
2021-09-14 15:13:44 +02:00
Timo Volkmann
99812e0b8e
pkce: encode code verifier with base64 without padding
...
Co-authored-by: Livio Amstutz <livio.a@gmail.com>
2021-09-13 13:56:38 +02:00
Timo Volkmann
af3a497b6d
fix: make pkce code_verifier spec compliant #125
...
follow recommendations for code_verifier: https://datatracker.ietf.org/doc/html/rfc7636#section-4.1
2021-09-09 14:33:59 +02:00
Livio Amstutz
07c9890c95
fix: errors
2021-08-27 13:55:02 +02:00
Beardo Moore
581885afb1
task: Ease dev host name constraints
...
This changes the requirements for a issuer hostname to allow anything
that is `http`. The reason for this is because the user of the library
already has to make a conscious decision to set `CAOS_OIDC_DEV` so they
should already understand the risks of not using `https`. The primary
motivation for this change is to allow IdPs to be created in a
containerized integration test environment. Specifically setting up a
docker compose file that starts all parts of the system with a test IdP
using this library where the DNS name will not be `localhost`.
2021-08-26 20:32:51 +00:00
Livio Amstutz
aab1a979e5
correct verifier
2021-08-20 07:51:23 +02:00
Livio Amstutz
37a504cb43
fix and add some tests
2021-08-20 07:49:00 +02:00
Livio Amstutz
8b40741e7a
return correct scope list
2021-08-20 07:48:20 +02:00
Livio Amstutz
38a1f315de
fix json response
2021-08-20 07:47:45 +02:00
Livio Amstutz
d2d3395c25
fix: improve error handling
2021-08-20 07:47:07 +02:00
Livio Amstutz
6cc3c91d07
remove deprecated encrypted private key conversion
2021-08-20 07:41:33 +02:00
Livio Amstutz
5715d1528f
remove duplicate method
2021-08-20 07:40:06 +02:00
Livio Amstutz
807da0b27d
remove unnecessary context
2021-08-20 07:39:34 +02:00
Livio Amstutz
1132c9d93d
fix: removeUserinfoScopes return new slice (without manipulating passed one) ( #110 )
2021-07-21 08:27:38 +02:00
Livio Amstutz
8a35b89815
fix: supported ui locales from config ( #107 )
2021-07-09 09:20:03 +02:00
Livio Amstutz
147c6dca6e
fixes
2021-07-06 08:58:35 +02:00
Livio Amstutz
58e27e8073
simplify KeyProvider interface
2021-06-30 14:10:38 +02:00
Livio Amstutz
0b446618c7
custom claims for assertion and jwt profile request
2021-06-23 14:01:31 +02:00
Livio Amstutz
e9fc710b1f
Merge branch 'master' into jwt-profile-storage
...
# Conflicts:
# pkg/op/verifier_jwt_profile.go
2021-06-23 13:51:20 +02:00
Livio Amstutz
850faa159d
fix: rp verification process ( #95 )
...
* fix: rp verification process
* types
* comments
* fix cli client
2021-06-23 11:08:54 +02:00
Livio Amstutz
39fef3e7fb
fix: simplify JWTProfileVerifier interface
2021-06-21 14:04:38 +02:00
Livio Amstutz
400f5c4de4
fix: parse max_age and prompt correctly (and change scope type) ( #105 )
...
* fix: parse max_age and prompt correctly (and change scope type)
* remove unnecessary omitempty
2021-06-16 08:34:01 +02:00
Livio Amstutz
3e336a4075
fix: check refresh token grant type ( #100 )
2021-05-31 11:35:03 +02:00
Livio Amstutz
14faebbb77
fix: check grant types and add refresh token to discovery
2021-05-27 13:44:11 +02:00
Livio Amstutz
d362dd7546
handle error
2021-05-11 15:20:22 +02:00
Livio Amstutz
90b87289cb
Update pkg/op/token_code.go
...
Co-authored-by: Fabi <38692350+fgerschwiler@users.noreply.github.com>
2021-05-11 15:17:10 +02:00
Livio Amstutz
2a11a1979e
rename storage methods and fix mocks
2021-05-11 10:48:11 +02:00
Livio Amstutz
3a46908051
Merge branch 'master' into refresh-token
2021-05-11 10:27:43 +02:00
Livio Amstutz
be04244212
amr and scopes
2021-05-11 10:26:25 +02:00
Livio Amstutz
540a7bd7be
improve Loopback check
2021-04-29 12:43:21 +02:00
Livio Amstutz
5119d7aea3
begin refresh token
2021-04-29 09:20:01 +02:00
Livio Amstutz
72fc86164c
fix: allow loopback redirect_uri for native apps
2021-04-26 14:31:26 +02:00
Livio Amstutz
a2601f1584
fix: return error when delegating user in jwt profile request ( #94 )
2021-04-23 11:53:03 +02:00
Livio Amstutz
b258b3cadb
fix: url safe encryption with no padding ( #93 )
2021-04-19 13:41:27 +02:00
Elio Bischof
5cd7bae505
fix: cli client ( #92 )
...
* fix: cli client
* fix: print shutdown error correctly
2021-04-08 09:54:39 +02:00
Livio Amstutz
8f6e2c5974
chore: improve signer log messages
2021-03-05 07:53:35 +01:00
Livio Amstutz
d7d7daab2d
fix: encoding of basic auth header values
2021-03-05 07:44:37 +01:00
Elio Bischof
f2f509a522
fix: wrap original fetch key error
2021-03-02 23:58:34 +01:00
Livio Amstutz
e1f0456228
merge
2021-02-22 14:57:15 +01:00
Livio Amstutz
97a567f554
Merge branch 'master' into signingkey
...
# Conflicts:
# pkg/op/mock/storage.mock.go
2021-02-22 14:56:37 +01:00
Livio Amstutz
1518c843de
feat: token introspection ( #83 )
...
* introspect
* introspect and client assertion
* introspect and client assertion
* scopes
* token introspection
* introspect
* refactoring
* fixes
* clenaup
* Update example/internal/mock/storage.go
Co-authored-by: Fabi <38692350+fgerschwiler@users.noreply.github.com>
* clenaup
Co-authored-by: Fabi <38692350+fgerschwiler@users.noreply.github.com>
2021-02-15 13:43:50 +01:00
Livio Amstutz
1049c44c3e
Merge remote-tracking branch 'origin/token-introspection' into signingkey
...
# Conflicts:
# pkg/op/mock/storage.mock.go
# pkg/op/storage.go
2021-02-12 13:02:04 +01:00
Livio Amstutz
5678693d44
clenaup
2021-02-12 12:52:33 +01:00
Livio Amstutz
0c7b2605bd
clenaup
2021-02-12 07:02:10 +01:00
Livio Amstutz
01ff740f4e
fixes
2021-02-12 06:47:16 +01:00
Livio Amstutz
0ca2370d48
refactoring
2021-02-11 17:38:58 +01:00
Livio Amstutz
138da8a208
introspect
2021-02-10 16:42:01 +01:00
Livio Amstutz
134999bc33
Merge branch 'master' into token-introspection
2021-02-04 07:52:34 +01:00
