Commit Graph

76 Commits

Author SHA1 Message Date
Fabi 2370409a55 fix: allow additional scopes (#69)
* feat: allow additional scopes

* fix: mocks and tests

* fix: restrict additional scopes

* fix: restrict additional scopes

* fix: remove comments

* fix: remove comments
2020-11-03 08:07:02 +01:00
Livio Amstutz deb33653d4 fix: decode basic auth header components (clientID, clientSecret) 2020-10-23 15:59:44 +02:00
Livio Amstutz 84a295c2b5 update configuration.mock.go 2020-10-21 10:38:38 +02:00
Livio Amstutz 2ebbd7a2e0 fix: grant_types_supported in discovery 2020-10-21 10:36:34 +02:00
Livio Amstutz 736d6902d9 solve PR issues 2020-10-15 15:23:33 +02:00
Livio Amstutz 5cc884766e improve ValidateAuthReqScopes 2020-10-15 14:02:53 +02:00
Livio Amstutz ed33332dce merging and missing mocks 2020-10-15 13:41:31 +02:00
Livio Amstutz d89470a33f improve userinfo token handling 2020-10-15 12:39:07 +02:00
Livio Amstutz 8be8306511 Merge branch 'master' into serializing
# Conflicts:
#	example/internal/mock/storage.go
#	pkg/op/mock/storage.mock.go
#	pkg/op/storage.go
2020-10-15 11:19:20 +02:00
Livio Amstutz 44c341d42e improve userinfo token handling 2020-10-15 09:41:50 +02:00
Fabi 9943f20215 feat: bearer access token includes tokenid and subject (#62) 2020-10-15 09:38:06 +02:00
Livio Amstutz b8d892443c claims assertion 2020-10-14 16:41:04 +02:00
Livio Amstutz d6203fb0d5 chore: move CAOS_OIDC_DEV to const (and ensure TestValidateIssuer runs (even on machines with env set)) 2020-10-07 08:49:23 +02:00
Livio Amstutz b311610d06 feat: check allowed scopes (and pass clientID to GetUserinfoFromScopes) 2020-10-07 08:44:26 +02:00
Livio Amstutz f845ce2010 comments 2020-09-29 08:34:37 +02:00
Livio Amstutz 0cad2e4652 jwt profile and authorization handling 2020-09-28 13:55:22 +02:00
Livio Amstutz d368b2d950 refactoring 2020-09-28 09:07:46 +02:00
Livio Amstutz 542ec6ed7b refactoring 2020-09-25 16:41:25 +02:00
Livio Amstutz c90a9d53c8 cleanup 2020-09-16 16:23:38 +02:00
Livio Amstutz 64797c1df6 cleanup 2020-09-16 15:22:15 +02:00
Livio Amstutz 2e75f54069 update mocks 2020-09-16 06:44:16 +02:00
Livio Amstutz a56a4a018a harmonize jwtProfile and existing interfaces / functions 2020-09-15 16:59:27 +02:00
Livio Amstutz 5a9e6e2c2a let tests work 2020-09-15 08:06:43 +02:00
Livio Amstutz 8790b54e0d update some op interfaces 2020-09-15 07:25:44 +02:00
Livio Amstutz 45230569d3 change RP interfaces 2020-09-14 07:52:16 +02:00
Livio Amstutz ed6cbe4fe2 Merge remote-tracking branch 'origin/service-accounts' into service-accounts 2020-09-14 07:06:20 +02:00
Livio Amstutz 143ff3482c change verifier interfaces 2020-09-11 10:45:07 +02:00
adlerhurst 17a72ccc97 fix: storage interface 2020-09-10 18:31:53 +02:00
Livio Amstutz 3777f1436d Merge remote-tracking branch 'origin/service-accounts' into service-accounts 2020-09-10 16:24:58 +02:00
adlerhurst a731a46ccf fix: aud 2020-09-10 16:24:48 +02:00
Livio Amstutz f8707958fc Merge remote-tracking branch 'origin/service-accounts' into service-accounts 2020-09-10 16:24:29 +02:00
adlerhurst 7700cb3539 fix: implement storage 2020-09-10 15:43:21 +02:00
Livio Amstutz eaf47fde8e change some interfaces 2020-09-09 16:00:19 +02:00
Livio Amstutz bfbd4adb1c some ideas to implement jwt client assertion 2020-09-08 17:09:27 +02:00
Livio Amstutz a37a8461a5 lot of unfinished changes 2020-09-08 16:07:49 +02:00
Livio Amstutz 9cb0fff23f Merge remote-tracking branch 'origin/service-accounts' into service-accounts 2020-09-07 12:40:54 +02:00
adlerhurst 7487af3db4 add func for creating JWT token 2020-09-07 12:39:22 +02:00
Livio Amstutz 6a0dd7c270 Merge branch 'master' into service-accounts
# Conflicts:
#	pkg/oidc/authorization.go
2020-09-07 12:36:10 +02:00
Livio Amstutz abd3b6f521 fix: handle single aud string claim, extract en/decoder interface, comments (#51)
* en/decoding abstraction

* some comments

* fix token validation and error messages

* fix: audience mapping (single aud string)

* fix tests with VerifyIdToken

* reformat imports

* go mod tidy

* Update pkg/oidc/authorization.go

Co-authored-by: Silvan <silvan.reusser@gmail.com>

* Update pkg/oidc/authorization.go

Co-authored-by: Silvan <silvan.reusser@gmail.com>

* Update pkg/op/authrequest_test.go

Co-authored-by: Silvan <silvan.reusser@gmail.com>

* fix capitalization

Co-authored-by: Silvan <silvan.reusser@gmail.com>
2020-09-07 12:32:35 +02:00
adlerhurst 7a109a763d feat: service account token exchange 2020-09-02 17:52:22 +02:00
Livio Amstutz c828290ef1 fix: improve interceptor handling (#49) 2020-08-28 14:51:38 +02:00
Livio Amstutz d02653e75d fix: add authorization to cors (#48) 2020-08-24 16:08:07 +02:00
Fabi b2b25c5b8c Merge pull request #47 from caos/fix-cors
fix: cors
2020-08-24 08:19:29 +02:00
Livio Amstutz 6e71c17f1d pass origin into GetUserinfoFromToken 2020-08-24 07:52:22 +02:00
Livio Amstutz 57cf8ee9c7 fix: add code_challenge_methods_supported to discovery endpoint (#43)
* fix: add code_challenge_methods_supported to discovery endpoint

* fix mock
2020-08-20 16:27:51 +02:00
Livio Amstutz c88e6b4ab3 fix: explicit allow Origin from request 2020-08-10 15:49:32 +02:00
Fabi c6e22dff69 feat: dev mode on client, check client configuration (#41)
* fix: tests

* fix: tests

* fix: tests
2020-08-06 13:10:49 +02:00
Fabi 3507057c66 fix: remove bracket (#40) 2020-07-29 09:01:13 +02:00
JCustin e6356f101d Update pkg/op/authrequest.go
Co-authored-by: Fabi <38692350+fgerschwiler@users.noreply.github.com>
2020-07-28 13:26:14 -07:00
JCustin c68975601b Update pkg/op/authrequest.go
Co-authored-by: Fabi <38692350+fgerschwiler@users.noreply.github.com>
2020-07-28 13:26:04 -07:00