Livio Amstutz
|
b8d892443c
|
claims assertion
|
2020-10-14 16:41:04 +02:00 |
|
Livio Amstutz
|
d6203fb0d5
|
chore: move CAOS_OIDC_DEV to const (and ensure TestValidateIssuer runs (even on machines with env set))
|
2020-10-07 08:49:23 +02:00 |
|
Livio Amstutz
|
b311610d06
|
feat: check allowed scopes (and pass clientID to GetUserinfoFromScopes)
|
2020-10-07 08:44:26 +02:00 |
|
Livio Amstutz
|
f845ce2010
|
comments
|
2020-09-29 08:34:37 +02:00 |
|
Livio Amstutz
|
507a437c56
|
scope form encoding
|
2020-09-29 08:13:51 +02:00 |
|
Livio Amstutz
|
1661b40fbe
|
fix tests
|
2020-09-28 15:06:14 +02:00 |
|
Livio Amstutz
|
0cad2e4652
|
jwt profile and authorization handling
|
2020-09-28 13:55:22 +02:00 |
|
Livio Amstutz
|
d368b2d950
|
refactoring
|
2020-09-28 09:07:46 +02:00 |
|
Livio Amstutz
|
d7ed59db2b
|
refactoring
|
2020-09-28 08:14:10 +02:00 |
|
Livio Amstutz
|
542ec6ed7b
|
refactoring
|
2020-09-25 16:41:25 +02:00 |
|
Fabi
|
6cfd02e4c9
|
feat: prompt option (#59)
* feat: prompt option
* Update pkg/rp/relaying_party.go
Co-authored-by: Livio Amstutz <livio.a@gmail.com>
Co-authored-by: Livio Amstutz <livio.a@gmail.com>
|
2020-09-21 15:11:42 +02:00 |
|
Livio Amstutz
|
60560ce239
|
fix: marshal user info address (#58)
|
2020-09-21 10:44:19 +02:00 |
|
Livio Amstutz
|
c90a9d53c8
|
cleanup
|
2020-09-16 16:23:38 +02:00 |
|
adlerhurst
|
28f731c219
|
fix: remove test because we know it works. :P
fix: key as string instead of bytes
|
2020-09-16 15:48:52 +02:00 |
|
Livio Amstutz
|
779ad703c8
|
add NewJWTProfileAssertionFromKeyJSON
|
2020-09-16 15:35:21 +02:00 |
|
Livio Amstutz
|
0547bfbc1e
|
Merge remote-tracking branch 'origin/service-accounts' into service-accounts
|
2020-09-16 15:22:26 +02:00 |
|
Livio Amstutz
|
64797c1df6
|
cleanup
|
2020-09-16 15:22:15 +02:00 |
|
Silvan
|
4a917fb9ca
|
Update pkg/rp/tockenexchange.go
|
2020-09-16 15:18:42 +02:00 |
|
adlerhurst
|
ad0966c1ab
|
Merge branch 'service-accounts' of github.com:caos/oidc into service-accounts
|
2020-09-16 14:12:45 +02:00 |
|
adlerhurst
|
fd3daa2335
|
fix: jwt profile request in op
|
2020-09-16 14:12:41 +02:00 |
|
Livio Amstutz
|
693ce1a07a
|
differ between oauth2 and oidc relaying party
|
2020-09-16 10:51:33 +02:00 |
|
Livio Amstutz
|
d97df8a9b2
|
Merge remote-tracking branch 'origin/service-accounts' into service-accounts
|
2020-09-16 06:44:23 +02:00 |
|
Livio Amstutz
|
2e75f54069
|
update mocks
|
2020-09-16 06:44:16 +02:00 |
|
adlerhurst
|
cae42cccad
|
fix: parse error
|
2020-09-15 18:03:49 +02:00 |
|
Livio Amstutz
|
a56a4a018a
|
harmonize jwtProfile and existing interfaces / functions
|
2020-09-15 16:59:27 +02:00 |
|
Livio Amstutz
|
87b30dcd66
|
fix cli
|
2020-09-15 08:10:08 +02:00 |
|
Livio Amstutz
|
5a9e6e2c2a
|
let tests work
|
2020-09-15 08:06:43 +02:00 |
|
Livio Amstutz
|
2dfdaa2223
|
fix state handling in auth request
|
2020-09-15 08:06:18 +02:00 |
|
Livio Amstutz
|
5a98ec4623
|
add missing error handling
|
2020-09-15 07:32:14 +02:00 |
|
Livio Amstutz
|
8790b54e0d
|
update some op interfaces
|
2020-09-15 07:25:44 +02:00 |
|
Livio Amstutz
|
45230569d3
|
change RP interfaces
|
2020-09-14 07:52:16 +02:00 |
|
Livio Amstutz
|
ed6cbe4fe2
|
Merge remote-tracking branch 'origin/service-accounts' into service-accounts
|
2020-09-14 07:06:20 +02:00 |
|
Livio Amstutz
|
143ff3482c
|
change verifier interfaces
|
2020-09-11 10:45:07 +02:00 |
|
adlerhurst
|
17a72ccc97
|
fix: storage interface
|
2020-09-10 18:31:53 +02:00 |
|
Livio Amstutz
|
3777f1436d
|
Merge remote-tracking branch 'origin/service-accounts' into service-accounts
|
2020-09-10 16:24:58 +02:00 |
|
adlerhurst
|
a731a46ccf
|
fix: aud
|
2020-09-10 16:24:48 +02:00 |
|
Livio Amstutz
|
f8707958fc
|
Merge remote-tracking branch 'origin/service-accounts' into service-accounts
|
2020-09-10 16:24:29 +02:00 |
|
Livio Amstutz
|
6be292a984
|
Merge branch 'master' into service-accounts
|
2020-09-10 16:21:40 +02:00 |
|
adlerhurst
|
9d8fc4fe8a
|
Merge branch 'master' into service-accounts
|
2020-09-10 15:43:41 +02:00 |
|
adlerhurst
|
7700cb3539
|
fix: implement storage
|
2020-09-10 15:43:21 +02:00 |
|
Livio Amstutz
|
8f07a5b9c9
|
feat: add possibility to add verifier opts to default RP
|
2020-09-10 15:19:55 +02:00 |
|
Livio Amstutz
|
f645dd3543
|
fix: unmarshalling of audience as array (#53)
|
2020-09-10 08:35:37 +02:00 |
|
Livio Amstutz
|
eaf47fde8e
|
change some interfaces
|
2020-09-09 16:00:19 +02:00 |
|
Livio Amstutz
|
bfbd4adb1c
|
some ideas to implement jwt client assertion
|
2020-09-08 17:09:27 +02:00 |
|
Livio Amstutz
|
a37a8461a5
|
lot of unfinished changes
|
2020-09-08 16:07:49 +02:00 |
|
Livio Amstutz
|
9cb0fff23f
|
Merge remote-tracking branch 'origin/service-accounts' into service-accounts
|
2020-09-07 12:40:54 +02:00 |
|
adlerhurst
|
7487af3db4
|
add func for creating JWT token
|
2020-09-07 12:39:22 +02:00 |
|
Livio Amstutz
|
6a0dd7c270
|
Merge branch 'master' into service-accounts
# Conflicts:
# pkg/oidc/authorization.go
|
2020-09-07 12:36:10 +02:00 |
|
Livio Amstutz
|
abd3b6f521
|
fix: handle single aud string claim, extract en/decoder interface, comments (#51)
* en/decoding abstraction
* some comments
* fix token validation and error messages
* fix: audience mapping (single aud string)
* fix tests with VerifyIdToken
* reformat imports
* go mod tidy
* Update pkg/oidc/authorization.go
Co-authored-by: Silvan <silvan.reusser@gmail.com>
* Update pkg/oidc/authorization.go
Co-authored-by: Silvan <silvan.reusser@gmail.com>
* Update pkg/op/authrequest_test.go
Co-authored-by: Silvan <silvan.reusser@gmail.com>
* fix capitalization
Co-authored-by: Silvan <silvan.reusser@gmail.com>
|
2020-09-07 12:32:35 +02:00 |
|
adlerhurst
|
7a109a763d
|
feat: service account token exchange
|
2020-09-02 17:52:22 +02:00 |
|