1
0
mirror of synced 2026-10-24 12:59:18 +03:00

Commit Graph

  • c5792392a7 Add basic support for OIDC provider instantiation through discovery Herman Slatman 2024-01-31 16:27:42 +01:00
  • cd21f8d51f Refactor OIDC verifier instantation to happen only once Herman Slatman 2024-01-31 15:49:45 +01:00
  • 19feae520b Add test for ACME initialization with Wire challenges Herman Slatman 2024-01-31 14:24:06 +01:00
  • 59ea73129a Merge pull request #1693 from smallstep/dependabot/go_modules/github.com/hashicorp/vault/api-1.11.0 github-actions[bot] 2024-01-30 11:55:12 +01:00
  • 78d889a047 Bump github.com/hashicorp/vault/api from 1.10.0 to 1.11.0 dependabot[bot] 2024-01-30 10:50:12 +00:00
  • 2fcb33bd3a Merge pull request #1695 from smallstep/dependabot/go_modules/github.com/newrelic/go-agent/v3-3.29.1 github-actions[bot] 2024-01-30 11:49:02 +01:00
  • fe926e9ad6 Merge pull request #1694 from smallstep/dependabot/go_modules/github.com/google/uuid-1.6.0 github-actions[bot] 2024-01-30 11:48:37 +01:00
  • 8123d6a405 Merge pull request #1692 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.42.1 github-actions[bot] 2024-01-30 11:48:14 +01:00
  • d9cf8aa685 Bump github.com/newrelic/go-agent/v3 from 3.29.0 to 3.29.1 dependabot[bot] 2024-01-29 16:00:25 +00:00
  • eeaabbc481 Bump github.com/google/uuid from 1.5.0 to 1.6.0 dependabot[bot] 2024-01-29 16:00:17 +00:00
  • 11220903d2 Bump go.step.sm/crypto from 0.42.0 to 0.42.1 dependabot[bot] 2024-01-29 16:00:00 +00:00
  • 14e8d47118 Skip Wire option validation and initialization if not enabled Herman Slatman 2024-01-29 16:58:50 +01:00
  • 8a9b1b3f79 Move Wire option validation to provisioner initialization Herman Slatman 2024-01-29 16:45:13 +01:00
  • 79943d2e5e Merge branch 'wire-acme-extensions' into herman/wire-acme-improvements Herman Slatman 2024-01-29 15:09:43 +01:00
  • a0e4cba024 Merge branch 'master' into wire-acme-extensions Herman Slatman 2024-01-29 15:08:41 +01:00
  • dd1ff9c15b Implementation of the Prometheus endpoint (#1669) v0.25.3-rc5 Panagiotis Siatras 2024-01-26 09:47:27 +02:00
  • 675e418fc3 Merge branch 'master' into wire-acme-extensions v0.25.3-rc4 Herman Slatman 2024-01-24 20:41:07 +01:00
  • 502334fd82 Merge pull request #1689 from smallstep/beltram/wire-acme-extensions Herman Slatman 2024-01-24 20:36:20 +01:00
  • a38132aa58 Fix policy check for Wire user and device identifiers Herman Slatman 2024-01-24 20:28:45 +01:00
  • 93ba1654ea Fix tests to work with Wire UserID and DeviceID Herman Slatman 2024-01-24 13:45:20 +01:00
  • 4d4719a48f Change URLs used in DPoP template test Herman Slatman 2024-01-24 12:42:00 +01:00
  • 9eed61a9c5 use switch statement beltram 2024-01-23 11:42:09 +01:00
  • b8eb559ee9 Update acme/order.go beltram 2024-01-23 11:39:39 +01:00
  • 27ea4de240 Merge pull request #1687 from smallstep/dependabot/go_modules/google.golang.org/api-0.157.0 github-actions[bot] 2024-01-22 20:59:05 -08:00
  • b0833d7992 Merge pull request #1686 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.42.0 github-actions[bot] 2024-01-22 12:21:57 -08:00
  • bcaf8a5624 Bump google.golang.org/api from 0.156.0 to 0.157.0 dependabot[bot] 2024-01-22 15:45:36 +00:00
  • 18d3b7f61e Bump go.step.sm/crypto from 0.41.0 to 0.42.0 dependabot[bot] 2024-01-22 15:44:51 +00:00
  • 356e7070ef Allow usage of externally supplied TLS config Venky Gopal 2024-01-21 09:26:40 -05:00
  • fbc1e895c2 Allow x509 Service CA implementation to be injected through ca and authority options Venky Gopal 2024-01-21 08:50:09 -05:00
  • a3de984ee3 fix: use 2 separate identifiers for Wire beltram 2024-01-19 09:55:15 +01:00
  • 6ee0d70bec Add check for empty deviceID in target URI template evaluation Herman Slatman 2024-01-18 15:13:34 +01:00
  • 7e6356ece2 Merge pull request #1670 from smallstep/herman/remove-rusty-cli Herman Slatman 2024-01-17 23:14:20 +01:00
  • 9cc3295a28 empty commit v0.25.3-rc3 max furman 2024-01-17 09:04:42 -08:00
  • 51d1270541 Merge pull request #1681 from smallstep/herman/fix-wire-extensions v0.25.3-rc.1 Herman Slatman 2024-01-17 16:09:54 +01:00
  • 19dbd02451 Add audience validation to access, dpop and id token Herman Slatman 2024-01-17 16:04:58 +01:00
  • 2f3819aa4e Use key authorization from ID token and handle -> preferred_username Herman Slatman 2024-01-17 14:12:09 +01:00
  • 36e14de882 Improve Wire persistence errors Herman Slatman 2024-01-17 13:02:12 +01:00
  • f150a4f850 Remove sync.Once for Wire configuration validation Herman Slatman 2024-01-17 12:35:16 +01:00
  • f221232a80 Fix ACME Validate test for Wire DPoP challenge Herman Slatman 2024-01-17 11:38:54 +01:00
  • b9254744a2 Fix validations for DPoP client ID, nonce and issuer Herman Slatman 2024-01-17 11:33:50 +01:00
  • 0a7fe6ebe9 Comment DPoP token checks that fail e2e test (currently) Herman Slatman 2024-01-17 00:47:34 +01:00
  • 0f0f060149 Improve access and dpop token validation Herman Slatman 2024-01-17 00:09:24 +01:00
  • 17578b57f2 Merge pull request #1673 from smallstep/herman/wire-template-transform Herman Slatman 2024-01-16 21:17:38 +01:00
  • 31bba6fbd8 Merge branch 'wire-acme-extensions' into herman/remove-rusty-cli Herman Slatman 2024-01-16 21:08:52 +01:00
  • 33be5523da Merge branch 'master' into wire-acme-extensions Herman Slatman 2024-01-16 21:08:33 +01:00
  • 7680da7c57 Add realistic OIDC payload to Wire integration test Herman Slatman 2024-01-16 16:32:35 +01:00
  • 99934ec9a3 Improve test coverage for wireOIDC01Validate Herman Slatman 2024-01-16 16:24:54 +01:00
  • 37106a438a Fix Wire integration test by acting on realistic access/dpop token Herman Slatman 2024-01-16 14:52:07 +01:00
  • 7520736f5b Improve test coverage for wireDPOP01Validate Herman Slatman 2024-01-16 14:01:48 +01:00
  • a24b2a5c84 Add test case for validateWireOIDCClaims Herman Slatman 2024-01-16 10:15:32 +01:00
  • 8f129a6ced Add test for wireDPOP01Validate Herman Slatman 2024-01-15 22:36:31 +01:00
  • d84abac4df Add test for wireOIDC01Validate Herman Slatman 2024-01-15 21:59:20 +01:00
  • a2304c8498 Add tests for Wire ID parsing Herman Slatman 2024-01-15 20:27:56 +01:00
  • c46434f6e0 Make the example Wire handle consistent Herman Slatman 2024-01-15 19:44:02 +01:00
  • bca179d611 Make the Wire API integration test a bit more like the real flow Herman Slatman 2024-01-15 19:15:15 +01:00
  • 3a840bf605 Merge pull request #1676 from smallstep/dependabot/go_modules/google.golang.org/api-0.156.0 v0.25.3-rc2 github-actions[bot] 2024-01-15 18:03:02 +01:00
  • 5b35f5c2d7 Bump google.golang.org/api from 0.155.0 to 0.156.0 dependabot[bot] 2024-01-15 15:42:13 +00:00
  • ff7e2f9c2d Merge pull request #1675 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.41.0 github-actions[bot] 2024-01-15 16:39:27 +01:00
  • 2efd1f682d Fix expected error type check Herman Slatman 2024-01-15 16:31:00 +01:00
  • ee4f51a7af Bump go.step.sm/crypto from 0.40.0 to 0.41.0 dependabot[bot] 2024-01-15 15:27:23 +00:00
  • 7d5a79190d Add tests for Wire OIDC and DPoP token persistence Herman Slatman 2024-01-15 16:25:53 +01:00
  • 768a08965d Store transformed OIDC token Herman Slatman 2024-01-15 13:47:44 +01:00
  • 29202eff26 Add support for functions in OIDC token transformation template Herman Slatman 2024-01-15 13:17:44 +01:00
  • d5b0d92bce Fix Wire ID token test comment Herman Slatman 2024-01-12 17:03:55 +01:00
  • 0ad381b092 Add OIDC token template transformation Herman Slatman 2024-01-12 16:48:21 +01:00
  • 2c27e865cb Fix linting issue Herman Slatman 2024-01-12 12:04:04 +01:00
  • 231f03ae28 Use a struct for the Wire DPoP token herman/wire-dpop-struct Herman Slatman 2024-01-12 11:46:25 +01:00
  • 9bb1b24bf1 Change kid and dpop validation Herman Slatman 2024-01-12 10:44:49 +01:00
  • 3f37feae78 Merge pull request #1671 from smallstep/herman/wire-configuration-refactor Herman Slatman 2024-01-12 10:26:14 +01:00
  • c8160caacd Fix test; reworded error message Herman Slatman 2024-01-12 10:22:25 +01:00
  • 24795720e1 Perform initialization of DPoP and OIDC options once Herman Slatman 2024-01-12 10:16:02 +01:00
  • 79739e5073 Change signature algorithm property name Herman Slatman 2024-01-12 09:48:49 +01:00
  • 7eacb68361 Merge branch 'herman/remove-rusty-cli' into herman/wire-configuration-refactor Herman Slatman 2024-01-11 21:29:15 +01:00
  • 44721a7d58 Remove debug err print Herman Slatman 2024-01-11 21:24:39 +01:00
  • 348363abce Add Wire DPoP proof claims verification Herman Slatman 2024-01-11 21:19:24 +01:00
  • 1bf807add3 Use base64 encoded signing key format Herman Slatman 2024-01-11 17:04:08 +01:00
  • 1f5f756fce Make Wire options more robust Herman Slatman 2024-01-11 16:14:53 +01:00
  • 6ef64b6ed6 Refactor the Wire option configuration Herman Slatman 2024-01-11 15:08:44 +01:00
  • b6fc0005d5 Add verification of maximum expiry time for Wire tokens Herman Slatman 2024-01-11 14:24:34 +01:00
  • b964c97750 Add validation of handle and token to Wire verification Herman Slatman 2024-01-11 13:47:17 +01:00
  • acad227b25 Put Wire options in lower level wire struct Herman Slatman 2024-01-11 13:18:43 +01:00
  • cd9480ab14 Fix test for parseAndVerifyWireAccessToken Herman Slatman 2024-01-11 12:42:43 +01:00
  • 897688a831 Merge branch 'wire-acme-extensions' into herman/remove-rusty-cli Herman Slatman 2024-01-11 12:03:52 +01:00
  • ca8855767d Fix and add more tests to Wire order identifier validation Herman Slatman 2024-01-11 11:47:06 +01:00
  • 70a2f431fa Address review remarks Herman Slatman 2024-01-11 11:06:39 +01:00
  • f1c54d6852 Merge pull request #1665 from smallstep/herman/fix-error-msg-csr-validation Herman Slatman 2024-01-11 09:51:02 +01:00
  • de25740567 Change name of test for Wire Order Herman Slatman 2024-01-10 21:16:04 +01:00
  • c7892e9cd3 Remove the rusty-jwt-cli configuration Herman Slatman 2024-01-10 20:51:19 +01:00
  • a423151207 Merge branch 'wire-acme-extensions' into herman/remove-rusty-cli Herman Slatman 2024-01-10 20:48:55 +01:00
  • ffd887f8cc Fix tests for ACME Wire provisioner Herman Slatman 2024-01-10 20:23:01 +01:00
  • 8997ce1a1e Disable wire-dpop-01 and wire-oidc-01 by default Herman Slatman 2024-01-10 20:06:02 +01:00
  • bf8c17e3ec Remove the Wire oidc and dpop from attestation formats Herman Slatman 2024-01-10 19:12:22 +01:00
  • 033aef9f9d Merge branch 'wire-acme-extensions' into herman/remove-rusty-cli Herman Slatman 2024-01-10 18:57:51 +01:00
  • 6a98fea1f3 Fix linter issues Herman Slatman 2024-01-10 18:36:24 +01:00
  • 8faf26c593 Change KeyAuth back to old behavior (for now) Herman Slatman 2024-01-10 18:32:18 +01:00
  • bf5f1201ea fix: keyauth was not bound to the id token beltram 2024-01-09 14:38:17 +01:00
  • e2a2e00526 Make template use DeviceId for now Herman Slatman 2024-01-10 17:08:29 +01:00
  • 29fa6621b1 Remove the Wire CLI invocatation Herman Slatman 2024-01-10 15:12:28 +01:00
  • 7a464cdb17 Use require to check for errors in Wire integration test Herman Slatman 2024-01-09 21:52:00 +01:00
  • 776a839a42 Fix linter issues and improve error handling Herman Slatman 2024-01-09 21:31:10 +01:00