Ralf Haferkamp b7990875c1 oidc: Remove "aud" claim validation of logout tokens (#6156) ...

The "aud" claim of the logout token is supposed to contain the client-id
of the client for which the token was issued. Our current implementation of
validating that claim is somewhat broken. We only allow to configure a single
value for the allowed client id. But we have different client-ids
accessing oCIS.

This completely removes the current validation of the `aud` claim until
we come up with a working solution. As we currently require a session id
to be present in the logout token the risk not validating the `aud`
claim is pretty low.

Related: #6149

2023-04-27 10:34:09 +02:00

..

autoprovision

Extract role assignments from claims

2023-03-20 15:12:09 +01:00

command

oidc: Remove "aud" claim validation of logout tokens (#6156)

2023-04-27 10:34:09 +02:00

config

oidc: Remove "aud" claim validation of logout tokens (#6156)

2023-04-27 10:34:09 +02:00

logging

refactor extensions -> services

2022-06-27 14:05:36 +02:00

metrics

rename folder extensions -> services

2022-06-27 14:05:36 +02:00

middleware

Fix backchannel logout

2023-04-20 18:04:52 +02:00

proxy

upgrade to go1.20 and auto set go mem limit (#5732)

2023-03-20 17:22:02 +01:00

router

Introduce TLS Settings for go-micro based http services

2022-11-03 11:58:53 +01:00

server

Remove Staticcheck warnings (#5394)

2023-01-13 15:29:14 +01:00

tracing

refactor extensions -> services

2022-06-27 14:05:36 +02:00

user/backend

Address some linter warnings

2023-03-20 15:12:09 +01:00

userroles

proxy: Rework oidc role mapper to allow multiple matching roles

2023-04-19 08:56:47 +02:00

webdav

rename folder extensions -> services

2022-06-27 14:05:36 +02:00