Commit Graph

182 Commits

Author SHA1 Message Date
Livio Amstutz 01ff740f4e fixes 2021-02-12 06:47:16 +01:00
Livio Amstutz 0ca2370d48 refactoring 2021-02-11 17:38:58 +01:00
Livio Amstutz 138da8a208 introspect 2021-02-10 16:42:01 +01:00
Livio Amstutz 134999bc33 Merge branch 'master' into token-introspection 2021-02-04 07:52:34 +01:00
Livio Amstutz fa92a20615 fix: make GenerateJWTProfileToken public (#82) v0.13.3 2021-02-03 13:04:06 +01:00
Livio Amstutz 345fc7e837 token introspection 2021-02-03 10:42:01 +01:00
Livio Amstutz 4b426c899a scopes 2021-02-02 11:41:50 +01:00
Livio Amstutz 960be5af1f introspect and client assertion 2021-02-01 17:17:40 +01:00
dependabot[bot] ba01bdf1ef chore(deps): bump github.com/google/uuid from 1.1.2 to 1.2.0 (#81)
Bumps [github.com/google/uuid](https://github.com/google/uuid) from 1.1.2 to 1.2.0.
- [Release notes](https://github.com/google/uuid/releases)
- [Commits](https://github.com/google/uuid/compare/v1.1.2...v1.2.0)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-01-29 09:39:01 +01:00
dependabot[bot] 95cd01094a chore(deps): bump github.com/stretchr/testify from 1.6.1 to 1.7.0 (#79)
Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.6.1 to 1.7.0.
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](https://github.com/stretchr/testify/compare/v1.6.1...v1.7.0)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-01-29 09:38:16 +01:00
dependabot[bot] f47821584e chore(deps): bump golang.org/x/text from 0.3.4 to 0.3.5 (#78)
Bumps [golang.org/x/text](https://github.com/golang/text) from 0.3.4 to 0.3.5.
- [Release notes](https://github.com/golang/text/releases)
- [Commits](https://github.com/golang/text/compare/v0.3.4...v0.3.5)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-01-29 09:37:46 +01:00
Livio Amstutz 50ab51bb46 introspect and client assertion 2021-01-28 08:41:36 +01:00
Livio Amstutz a1a21f0d59 introspect 2021-01-08 15:01:23 +01:00
Silvan d693f6113d Merge pull request #75 from caos/fix-clockskew
fix: clock skew when using jwt profile
v0.13.2
2020-12-21 21:08:01 +01:00
Livio Amstutz b23f37f7eb fix: clock skew when using jwt profile 2020-12-21 21:04:07 +01:00
Fabi 27f3bc0f4a fix: change callbackpath (#74)
* fix: append client id to aud

* handle new callback path

Co-authored-by: Livio Amstutz <livio.a@gmail.com>
v0.13.1
2020-11-30 11:21:09 +01:00
Fabi c07d40296e Merge pull request #73 from caos/skew
feat: add clock skew and userinfo id_token options
v0.13.0
2020-11-27 11:07:49 +01:00
Livio Amstutz 36800145d6 renaming 2020-11-26 16:12:27 +01:00
Livio Amstutz 24120554e5 feat: add clock skew and option to put userinfo (profile, email, phone, address) into id_token 2020-11-26 15:46:08 +01:00
Livio Amstutz f5d0e64ff1 chore(example): dynamic scopes in example (#72) 2020-11-24 15:56:12 +01:00
Fabi 13b14734b9 fix: append client id to aud (#71)
* fix: append client id to aud

* fix: append client id to aud

* Update pkg/oidc/token.go

Co-authored-by: Livio Amstutz <livio.a@gmail.com>

Co-authored-by: Livio Amstutz <livio.a@gmail.com>
v0.12.5
2020-11-16 08:26:19 +01:00
Fabi 2370409a55 fix: allow additional scopes (#69)
* feat: allow additional scopes

* fix: mocks and tests

* fix: restrict additional scopes

* fix: restrict additional scopes

* fix: remove comments

* fix: remove comments
v0.12.4
2020-11-03 08:07:02 +01:00
Fabi 3019f85fed Merge pull request #70 from caos/dependabot/go_modules/golang.org/x/text-0.3.4
chore(deps): bump golang.org/x/text from 0.3.3 to 0.3.4
2020-11-02 10:26:55 +01:00
dependabot[bot] ab9cef7605 chore(deps): bump golang.org/x/text from 0.3.3 to 0.3.4
Bumps [golang.org/x/text](https://github.com/golang/text) from 0.3.3 to 0.3.4.
- [Release notes](https://github.com/golang/text/releases)
- [Commits](https://github.com/golang/text/compare/v0.3.3...v0.3.4)

Signed-off-by: dependabot[bot] <support@github.com>
2020-10-29 04:06:24 +00:00
Fabi 6162e217e9 Merge pull request #68 from caos/basic-auth-encoding
fix: decode basic auth header components (clientID, clientSecret)
v0.12.3
2020-10-23 16:07:05 +02:00
Livio Amstutz deb33653d4 fix: decode basic auth header components (clientID, clientSecret) 2020-10-23 15:59:44 +02:00
Livio Amstutz 939e109515 chore(workflow): update github actions in release workflow (#65)
* chore(workflow): update github actions in release workflow

* chore(workflow): add github-actions to dependabot.yml

* fix dependabot.yml
2020-10-21 11:15:57 +02:00
Fabi a2cafb633a Merge pull request #67 from caos/discovery
fix: grant_types_supported in discovery
v0.12.2
2020-10-21 11:09:37 +02:00
Livio Amstutz 84a295c2b5 update configuration.mock.go 2020-10-21 10:38:38 +02:00
Livio Amstutz 2ebbd7a2e0 fix: grant_types_supported in discovery 2020-10-21 10:36:34 +02:00
Fabi 4390119d1d Merge pull request #64 from caos/jwt-userinfo
fix: UserInfo with JWT access token
v0.12.1
2020-10-16 10:50:08 +02:00
Livio Amstutz 9b480be13a fix: UserInfo with JWT access token (return error in DecryptAES) 2020-10-16 10:47:33 +02:00
Fabi c1699a2d93 Merge pull request #60 from caos/serializing
feat: private claims (incl. serialisation refactoring and jwt profile fix)
v0.12.0
2020-10-15 15:27:00 +02:00
Livio Amstutz 736d6902d9 solve PR issues 2020-10-15 15:23:33 +02:00
Livio Amstutz 5cc884766e improve ValidateAuthReqScopes 2020-10-15 14:02:53 +02:00
Livio Amstutz ed33332dce merging and missing mocks 2020-10-15 13:41:31 +02:00
Livio Amstutz 01a89c5142 Merge branch 'master' into serializing
# Conflicts:
#	pkg/op/userinfo.go
2020-10-15 13:34:15 +02:00
Fabi d508af0a0e Merge pull request #63 from caos/fix-concated-token
fix: possible nil pointer on userinfo
v0.11.1
2020-10-15 13:26:35 +02:00
Livio Amstutz f40a07feeb fix: possible nil pointer on userinfo 2020-10-15 12:42:04 +02:00
Livio Amstutz d89470a33f improve userinfo token handling 2020-10-15 12:39:07 +02:00
Livio Amstutz 8be8306511 Merge branch 'master' into serializing
# Conflicts:
#	example/internal/mock/storage.go
#	pkg/op/mock/storage.mock.go
#	pkg/op/storage.go
2020-10-15 11:19:20 +02:00
Livio Amstutz 44c341d42e improve userinfo token handling 2020-10-15 09:41:50 +02:00
Fabi 9943f20215 feat: bearer access token includes tokenid and subject (#62) v0.11.0 2020-10-15 09:38:06 +02:00
Livio Amstutz b8d892443c claims assertion 2020-10-14 16:41:04 +02:00
dependabot[bot] 49324646d7 chore(deps): bump github.com/sirupsen/logrus from 1.6.0 to 1.7.0 (#61)
Bumps [github.com/sirupsen/logrus](https://github.com/sirupsen/logrus) from 1.6.0 to 1.7.0.
- [Release notes](https://github.com/sirupsen/logrus/releases)
- [Changelog](https://github.com/sirupsen/logrus/blob/master/CHANGELOG.md)
- [Commits](https://github.com/sirupsen/logrus/compare/v1.6.0...v1.7.0)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-10-13 07:12:47 +02:00
Livio Amstutz d6203fb0d5 chore: move CAOS_OIDC_DEV to const (and ensure TestValidateIssuer runs (even on machines with env set)) 2020-10-07 08:49:23 +02:00
Livio Amstutz b311610d06 feat: check allowed scopes (and pass clientID to GetUserinfoFromScopes) 2020-10-07 08:44:26 +02:00
Livio Amstutz b2903212ab cleanup 2020-09-30 08:40:28 +02:00
Livio Amstutz 707029d431 update example 2020-09-29 08:40:32 +02:00
Livio Amstutz f845ce2010 comments 2020-09-29 08:34:37 +02:00