crypt/step-ca
1
0
Fork 0
mirror of synced 2026-10-24 12:59:18 +03:00
Code Activity
5,659 Commits 50 Branches 245 Tags
thor/admin-api-input-validation
Commit Graph

5659 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Thorsten Spieker
1fb5a2879f Preserve legacy provisioner reload compatibility 2026-07-30 15:14:27 +02:00
Thorsten Spieker
9c0c39c5db Centralize admin provisioner validation 2026-07-30 14:24:54 +02:00
Thorsten Spieker
528921b70d Return bad requests for invalid provisioner conversions 2026-07-30 14:17:07 +02:00
Thorsten Spieker
c9400bc7aa Validate provisioner type and details during conversion 2026-07-30 14:11:53 +02:00
Thorsten Spieker
31d11b4c58 Add changelog entry for admin API validation and webhook status fix 2026-07-29 15:55:54 +02:00
Thorsten Spieker
4913ab2f38 Return 200 instead of 201 on provisioner webhook update 
PUT (update) is not a resource-creation operation, so it should not
return 201 Created. Verified safe against the shipped ca.AdminClient,
which only checks for status >= 400.
 2026-07-29 15:52:17 +02:00
Thorsten Spieker
1cafc3d609 Return 400 for invalid provisioner configuration on update 
Authority.UpdateProvisioner wrapped Init() failures as an internal
server error (500), unlike StoreProvisioner which correctly treats
them as a client-side configuration problem (400). Bad or incomplete
provisioner details submitted via UpdateProvisioner now surface as a
400, matching StoreProvisioner's behavior.
 2026-07-29 15:47:37 +02:00
Thorsten Spieker
4bf182bae2 Validate provisioner payloads in admin create/update handlers 
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01LBsTWD57oxThZz44wVy3EL
 2026-07-29 15:39:45 +02:00
Thorsten Spieker
9eb2849a2e Add API-layer input validation for admin provisioner payloads 2026-07-29 15:27:49 +02:00
Herman Slatman
754893df3e Merge pull request #2715 from kanywst/fix/name-policy-empty-domain-panic 
Fix name policy panic on empty or short domain
 2026-07-14 15:38:02 +02:00
Herman Slatman
922bb24ba3 Merge pull request #2737 from maxtaran2010/fix/typos-in-comments 
Fix typos in comments and error messages
 2026-07-14 15:32:38 +02:00
Herman Slatman
849efbdbff Fix typo in tests 2026-07-14 15:26:30 +02:00
maxtaran2010
70f3415ee1 fix: correct typos in comments and error messages 
- imlements -> implements (acme/db/nosql/account.go)
- diplay -> display (acme/order.go)
- applictaion -> application (acme/api/middleware.go)
- underlaying -> underlying (authority/config/config.go)
- initializtion -> initialization (authority/options.go)
- creationg -> creating (authority/provisioner/wire/oidc_options.go)
- thats -> that (authority/provisioner/sign_options.go)
- parametrs -> parameters (authority/provisioner/oidc_test.go)
- pasing -> parsing (ca/identity/identity.go)
- Thay -> They (pki/pki.go)
- exluded/exluding -> excluded/excluding (policy/engine.go)
- contraint -> constraint (policy/options.go, policy/validate.go)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Signed-off-by: maxtaran2010 <ocotifuzo727@gmail.com>
 2026-07-14 15:26:30 +02:00
step-ci
c0aa959dca Merge pull request #2741 from smallstep/dependabot/go_modules/golang.org/x/net-0.57.0 
build(deps): bump golang.org/x/net from 0.56.0 to 0.57.0
 2026-07-14 06:12:16 -07:00
dependabot[bot]
79ef750062 build(deps): bump golang.org/x/net from 0.56.0 to 0.57.0 
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.56.0 to 0.57.0.
- [Commits](https://github.com/golang/net/compare/v0.56.0...v0.57.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-version: 0.57.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-14 09:06:44 +00:00
step-ci
6b8343c6b8 Merge pull request #2739 from smallstep/dependabot/go_modules/google.golang.org/api-0.288.0 
build(deps): bump google.golang.org/api from 0.287.1 to 0.288.0
 2026-07-14 02:04:49 -07:00
dependabot[bot]
9ace804882 build(deps): bump google.golang.org/api from 0.287.1 to 0.288.0 
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.287.1 to 0.288.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.287.1...v0.288.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-version: 0.288.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-14 08:46:14 +00:00
step-ci
bd4e63ad21 Merge pull request #2740 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.54.0 
build(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0
 2026-07-14 01:44:23 -07:00
dependabot[bot]
b82e371861 build(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.53.0 to 0.54.0.
- [Commits](https://github.com/golang/crypto/compare/v0.53.0...v0.54.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-version: 0.54.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-14 07:50:37 +00:00
step-ci
c7549d4cf1 Merge pull request #2738 from smallstep/dependabot/go_modules/cloud.google.com/go/longrunning-1.2.0 
build(deps): bump cloud.google.com/go/longrunning from 1.1.0 to 1.2.0
 2026-07-14 00:49:05 -07:00
step-ci
b1da8f46df Merge pull request #2742 from smallstep/dependabot/go_modules/golang.org/x/sync-0.22.0 
build(deps): bump golang.org/x/sync from 0.21.0 to 0.22.0
 2026-07-14 00:48:32 -07:00
dependabot[bot]
b2040ae96d build(deps): bump golang.org/x/sync from 0.21.0 to 0.22.0 
Bumps [golang.org/x/sync](https://github.com/golang/sync) from 0.21.0 to 0.22.0.
- [Commits](https://github.com/golang/sync/compare/v0.21.0...v0.22.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sync
  dependency-version: 0.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-13 15:33:30 +00:00
dependabot[bot]
1edc995526 build(deps): bump cloud.google.com/go/longrunning from 1.1.0 to 1.2.0 
Bumps [cloud.google.com/go/longrunning](https://github.com/googleapis/google-cloud-go) from 1.1.0 to 1.2.0.
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/documentai/CHANGES.md)
- [Commits](https://github.com/googleapis/google-cloud-go/compare/dlp/v1.1.0...ces/v1.2.0)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/longrunning
  dependency-version: 1.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-13 15:33:02 +00:00
step-ci
b923c9dedd Merge pull request #2733 from smallstep/dependabot/go_modules/google.golang.org/api-0.287.0 
build(deps): bump google.golang.org/api from 0.286.0 to 0.287.1
 2026-07-09 07:58:10 -07:00
dependabot[bot]
5004d1f9cc build(deps): bump google.golang.org/api from 0.286.0 to 0.287.1 
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.286.0 to 0.287.1.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.286.0...v0.287.1)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-version: 0.287.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-09 14:33:08 +00:00
step-ci
9870a3a4d6 Merge pull request #2734 from smallstep/dependabot/go_modules/github.com/go-chi/chi/v5-5.3.1 
build(deps): bump github.com/go-chi/chi/v5 from 5.3.0 to 5.3.1
 2026-07-09 02:21:21 -07:00
step-ci
7152f33271 Merge pull request #2735 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.82.0 
build(deps): bump google.golang.org/grpc from 1.81.1 to 1.82.0
 2026-07-09 02:20:52 -07:00
dependabot[bot]
7d9cf028df build(deps): bump google.golang.org/grpc from 1.81.1 to 1.82.0 
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.81.1 to 1.82.0.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.81.1...v1.82.0)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-version: 1.82.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-06 15:34:50 +00:00
dependabot[bot]
8cac371dfa build(deps): bump github.com/go-chi/chi/v5 from 5.3.0 to 5.3.1 
Bumps [github.com/go-chi/chi/v5](https://github.com/go-chi/chi) from 5.3.0 to 5.3.1.
- [Release notes](https://github.com/go-chi/chi/releases)
- [Changelog](https://github.com/go-chi/chi/blob/master/CHANGELOG.md)
- [Commits](https://github.com/go-chi/chi/compare/v5.3.0...v5.3.1)

---
updated-dependencies:
- dependency-name: github.com/go-chi/chi/v5
  dependency-version: 5.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-06 15:34:46 +00:00
step-ci
afa2e3d6d2 Merge pull request #2727 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.84.1 
build(deps): bump go.step.sm/crypto from 0.83.0 to 0.84.1
 2026-06-30 07:13:12 -07:00
dependabot[bot]
da019a587d build(deps): bump go.step.sm/crypto from 0.83.0 to 0.84.1 
Bumps [go.step.sm/crypto](https://github.com/smallstep/crypto) from 0.83.0 to 0.84.1.
- [Release notes](https://github.com/smallstep/crypto/releases)
- [Commits](https://github.com/smallstep/crypto/compare/v0.83.0...v0.84.1)

---
updated-dependencies:
- dependency-name: go.step.sm/crypto
  dependency-version: 0.84.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-30 14:04:39 +00:00
step-ci
3092b38cdd Merge pull request #2726 from smallstep/dependabot/go_modules/github.com/newrelic/go-agent/v3-3.44.1 
build(deps): bump github.com/newrelic/go-agent/v3 from 3.44.0 to 3.44.1
 2026-06-30 07:03:21 -07:00
step-ci
4f4656c986 Merge pull request #2728 from smallstep/dependabot/go_modules/google.golang.org/api-0.286.0 
build(deps): bump google.golang.org/api from 0.285.0 to 0.286.0
 2026-06-30 07:02:54 -07:00
step-ci
30a299ede6 Merge pull request #2729 from smallstep/dependabot/go_modules/cloud.google.com/go/longrunning-1.1.0 
build(deps): bump cloud.google.com/go/longrunning from 1.0.0 to 1.1.0
 2026-06-30 07:02:32 -07:00
dependabot[bot]
9dba070525 build(deps): bump cloud.google.com/go/longrunning from 1.0.0 to 1.1.0 
Bumps [cloud.google.com/go/longrunning](https://github.com/googleapis/google-cloud-go) from 1.0.0 to 1.1.0.
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/documentai/CHANGES.md)
- [Commits](https://github.com/googleapis/google-cloud-go/compare/ai/v1.0.0...dlp/v1.1.0)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/longrunning
  dependency-version: 1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-29 15:33:26 +00:00
dependabot[bot]
790003271b build(deps): bump google.golang.org/api from 0.285.0 to 0.286.0 
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.285.0 to 0.286.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.285.0...v0.286.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-version: 0.286.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-29 15:33:13 +00:00
dependabot[bot]
bd73408a18 build(deps): bump github.com/newrelic/go-agent/v3 from 3.44.0 to 3.44.1 
Bumps [github.com/newrelic/go-agent/v3](https://github.com/newrelic/go-agent) from 3.44.0 to 3.44.1.
- [Release notes](https://github.com/newrelic/go-agent/releases)
- [Changelog](https://github.com/newrelic/go-agent/blob/master/CHANGELOG.md)
- [Commits](https://github.com/newrelic/go-agent/compare/v3.44.0...v3.44.1)

---
updated-dependencies:
- dependency-name: github.com/newrelic/go-agent/v3
  dependency-version: 3.44.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-29 15:32:56 +00:00
step-ci
af6ef0cd10 Merge pull request #2718 from smallstep/dependabot/go_modules/github.com/coreos/go-oidc/v3-3.19.0 
build(deps): bump github.com/coreos/go-oidc/v3 from 3.18.0 to 3.19.0
 2026-06-24 05:54:58 -07:00
dependabot[bot]
eb3196c06f build(deps): bump github.com/coreos/go-oidc/v3 from 3.18.0 to 3.19.0 
Bumps [github.com/coreos/go-oidc/v3](https://github.com/coreos/go-oidc) from 3.18.0 to 3.19.0.
- [Release notes](https://github.com/coreos/go-oidc/releases)
- [Commits](https://github.com/coreos/go-oidc/compare/v3.18.0...v3.19.0)

---
updated-dependencies:
- dependency-name: github.com/coreos/go-oidc/v3
  dependency-version: 3.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-24 12:50:27 +00:00
step-ci
b054c44424 Merge pull request #2720 from smallstep/dependabot/github_actions/actions/checkout-7.0.0 
build(deps): bump actions/checkout from 6.0.3 to 7.0.0
 2026-06-23 04:03:10 -07:00
step-ci
3ed3113c80 Merge pull request #2719 from smallstep/dependabot/go_modules/github.com/newrelic/go-agent/v3-3.44.0 
build(deps): bump github.com/newrelic/go-agent/v3 from 3.43.3 to 3.44.0
 2026-06-23 03:55:52 -07:00
dependabot[bot]
8bfcef1ebe build(deps): bump actions/checkout from 6.0.3 to 7.0.0 
Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.3 to 7.0.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](df4cb1c069...9c091bb21b)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-22 15:32:52 +00:00
dependabot[bot]
e5a50334f0 build(deps): bump github.com/newrelic/go-agent/v3 from 3.43.3 to 3.44.0 
Bumps [github.com/newrelic/go-agent/v3](https://github.com/newrelic/go-agent) from 3.43.3 to 3.44.0.
- [Release notes](https://github.com/newrelic/go-agent/releases)
- [Changelog](https://github.com/newrelic/go-agent/blob/master/CHANGELOG.md)
- [Commits](https://github.com/newrelic/go-agent/compare/v3.43.3...v3.44.0)

---
updated-dependencies:
- dependency-name: github.com/newrelic/go-agent/v3
  dependency-version: 3.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-22 15:32:40 +00:00
step-ci
0840e23d32 Merge pull request #2711 from smallstep/dependabot/go_modules/google.golang.org/api-0.284.0 
build(deps): bump google.golang.org/api from 0.283.0 to 0.285.0
 2026-06-18 05:39:42 -07:00
dependabot[bot]
6f2fc88782 build(deps): bump google.golang.org/api from 0.283.0 to 0.285.0 
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.283.0 to 0.285.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.283.0...v0.285.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-version: 0.284.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-18 12:35:58 +00:00
step-ci
df97461bbd Merge pull request #2709 from smallstep/dependabot/go_modules/golang.org/x/net-0.56.0 
build(deps): bump golang.org/x/net from 0.55.0 to 0.56.0
 2026-06-18 05:34:48 -07:00
dependabot[bot]
07d7963497 build(deps): bump golang.org/x/net from 0.55.0 to 0.56.0 
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.55.0 to 0.56.0.
- [Commits](https://github.com/golang/net/compare/v0.55.0...v0.56.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-version: 0.56.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-18 11:50:48 +00:00
step-ci
36b13b741c Merge pull request #2710 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.83.0 
build(deps): bump go.step.sm/crypto from 0.82.0 to 0.83.0
 2026-06-18 04:49:25 -07:00
step-ci
be771f437d Merge pull request #2712 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.53.0 
build(deps): bump golang.org/x/crypto from 0.52.0 to 0.53.0
 2026-06-18 04:48:41 -07:00
kanywst
95a4f61ae6 Fix name policy panic on empty or short domain 2026-06-18 20:00:55 +09:00