Commit graph

63 commits

Author SHA1 Message Date
Livio Amstutz
cd7695e2a9 Merge branch 'main' into op
# Conflicts:
#	pkg/oidc/introspection.go
#	pkg/oidc/userinfo.go
2021-11-02 10:17:05 +01:00
Witold Konior
763d3334e7
feat: Enable parsing email_verified from string. (#139)
* Enable parsing email_verified from string.

AWS Cognito will return email_verified from /userinfo endpoint as string.
This fix will accept proper boolean values as well as string values.

Links for reference:
https://forums.aws.amazon.com/thread.jspa?messageID=949441&#949441
https://discuss.elastic.co/t/openid-error-after-authenticating-against-aws-cognito/206018/11

* feat: Enable parsing email_verified from string.
2021-11-02 09:14:33 +01:00
Livio Amstutz
162990f974 some linting 2021-10-28 16:04:58 +02:00
Livio Amstutz
2ad9f081da add missing omitempty 2021-10-28 15:37:00 +02:00
Livio Amstutz
1d72aff00a tests and cleanup 2021-10-28 15:21:47 +02:00
Livio Amstutz
9721c25336 begin revocation 2021-10-28 07:59:43 +02:00
Livio Amstutz
cef977adc2 Merge branch 'main' into op
# Conflicts:
#	pkg/client/rp/relaying_party.go
2021-10-28 07:51:28 +02:00
Livio Amstutz
3b89a976b3 cleanup 2021-10-25 12:07:08 +02:00
Livio Amstutz
052a86f28a ClaimsSignature 2021-10-25 12:06:00 +02:00
Livio Amstutz
484182a0f8 handle response mode 2021-10-25 11:57:26 +02:00
Livio Amstutz
f067d723f2 handle request object 2021-10-25 11:53:59 +02:00
Livio Amstutz
72a9829117 document discovery configuration 2021-10-21 14:36:55 +02:00
陈杨文
ff2c164057
fix: improve example & fix userinfo marshal (#132)
* fix: example client should track state, call cli.CodeFlow need context

* fix: oidc userinfo can UnmarshalJSON with address

* rp Discover use client.Discover

* add instruction for example to README.md
2021-10-08 08:20:45 +02:00
Livio Amstutz
0ab5ea5a57 refactor: remove utils pkg
BREAKING CHANGE: utils package has been removed in favor of specific new
packages (http, crypto, strings)
2021-09-27 11:58:28 +02:00
Livio Amstutz
251c476e17 fixes 2021-09-27 11:57:14 +02:00
Livio Amstutz
f90e685c76 Merge branch 'main' into op 2021-09-27 08:17:20 +02:00
Livio Amstutz
a63fbee93d
fix: improve JWS and key verification (#128)
* fix: improve JWS and key verification

* fix: get remote keys if no cached key matches

* fix: get remote keys if no cached key matches

* fix exactMatch

* fix exactMatch

* chore: change default branch name in .releaserc.js
2021-09-14 15:13:44 +02:00
Livio Amstutz
d2d3395c25 fix: improve error handling 2021-08-20 07:47:07 +02:00
Livio Amstutz
5715d1528f remove duplicate method 2021-08-20 07:40:06 +02:00
Livio Amstutz
147c6dca6e fixes 2021-07-06 08:58:35 +02:00
Livio Amstutz
0b446618c7 custom claims for assertion and jwt profile request 2021-06-23 14:01:31 +02:00
Livio Amstutz
850faa159d
fix: rp verification process (#95)
* fix: rp verification process

* types

* comments

* fix cli client
2021-06-23 11:08:54 +02:00
Livio Amstutz
400f5c4de4
fix: parse max_age and prompt correctly (and change scope type) (#105)
* fix: parse max_age and prompt correctly (and change scope type)

* remove unnecessary omitempty
2021-06-16 08:34:01 +02:00
Livio Amstutz
5119d7aea3 begin refresh token 2021-04-29 09:20:01 +02:00
Livio Amstutz
1518c843de
feat: token introspection (#83)
* introspect

* introspect and client assertion

* introspect and client assertion

* scopes

* token introspection

* introspect

* refactoring

* fixes

* clenaup

* Update example/internal/mock/storage.go

Co-authored-by: Fabi <38692350+fgerschwiler@users.noreply.github.com>

* clenaup

Co-authored-by: Fabi <38692350+fgerschwiler@users.noreply.github.com>
2021-02-15 13:43:50 +01:00
Livio Amstutz
24120554e5 feat: add clock skew and option to put userinfo (profile, email, phone, address) into id_token 2020-11-26 15:46:08 +01:00
Fabi
13b14734b9
fix: append client id to aud (#71)
* fix: append client id to aud

* fix: append client id to aud

* Update pkg/oidc/token.go

Co-authored-by: Livio Amstutz <livio.a@gmail.com>

Co-authored-by: Livio Amstutz <livio.a@gmail.com>
2020-11-16 08:26:19 +01:00
Livio Amstutz
2ebbd7a2e0 fix: grant_types_supported in discovery 2020-10-21 10:36:34 +02:00
Livio Amstutz
736d6902d9 solve PR issues 2020-10-15 15:23:33 +02:00
Livio Amstutz
d89470a33f improve userinfo token handling 2020-10-15 12:39:07 +02:00
Livio Amstutz
b8d892443c claims assertion 2020-10-14 16:41:04 +02:00
Livio Amstutz
f845ce2010 comments 2020-09-29 08:34:37 +02:00
Livio Amstutz
507a437c56 scope form encoding 2020-09-29 08:13:51 +02:00
Livio Amstutz
1661b40fbe fix tests 2020-09-28 15:06:14 +02:00
Livio Amstutz
0cad2e4652 jwt profile and authorization handling 2020-09-28 13:55:22 +02:00
Livio Amstutz
d7ed59db2b refactoring 2020-09-28 08:14:10 +02:00
Livio Amstutz
542ec6ed7b refactoring 2020-09-25 16:41:25 +02:00
Livio Amstutz
60560ce239
fix: marshal user info address (#58) 2020-09-21 10:44:19 +02:00
Livio Amstutz
c90a9d53c8 cleanup 2020-09-16 16:23:38 +02:00
adlerhurst
28f731c219 fix: remove test because we know it works. :P
fix: key as string instead of bytes
2020-09-16 15:48:52 +02:00
Livio Amstutz
779ad703c8 add NewJWTProfileAssertionFromKeyJSON 2020-09-16 15:35:21 +02:00
Livio Amstutz
64797c1df6 cleanup 2020-09-16 15:22:15 +02:00
adlerhurst
fd3daa2335 fix: jwt profile request in op 2020-09-16 14:12:41 +02:00
adlerhurst
cae42cccad fix: parse error 2020-09-15 18:03:49 +02:00
Livio Amstutz
a56a4a018a harmonize jwtProfile and existing interfaces / functions 2020-09-15 16:59:27 +02:00
Livio Amstutz
45230569d3 change RP interfaces 2020-09-14 07:52:16 +02:00
Livio Amstutz
143ff3482c change verifier interfaces 2020-09-11 10:45:07 +02:00
adlerhurst
a731a46ccf fix: aud 2020-09-10 16:24:48 +02:00
adlerhurst
9d8fc4fe8a Merge branch 'master' into service-accounts 2020-09-10 15:43:41 +02:00
adlerhurst
7700cb3539 fix: implement storage 2020-09-10 15:43:21 +02:00