1
0
mirror of synced 2026-10-26 00:39:22 +03:00

Commit Graph

  • f5a2f436df Fix missing DPoP and OIDC tokens for Wire integration test Herman Slatman 2024-01-09 18:24:37 +01:00
  • eb9893bd21 Refactor logic for processing WireID identifiers in Order Herman Slatman 2024-01-09 18:22:21 +01:00
  • 40668ae09e Refactor WireID target processing a bit Herman Slatman 2024-01-09 16:52:09 +01:00
  • 01169b2483 Make the Target optional in Challenge object Herman Slatman 2024-01-09 16:43:18 +01:00
  • 85309bb8ec Fix the integration test Herman Slatman 2024-01-09 00:33:01 +01:00
  • fdea5e7db3 Fix tests for new ACME orders with Wire IDs Herman Slatman 2024-01-08 23:16:31 +01:00
  • c1a7acc306 Make it compile with Go 1.20 again Herman Slatman 2024-01-08 22:21:27 +01:00
  • 84e9682476 feat: change the separator between user-id & device-id in a client-id. Use '!' instead of ':' beltram 2024-01-05 09:56:34 +01:00
  • 90b5347887 feat: try using the new ClientId & Handle format (i.e. plain URIs) beltram 2024-01-02 14:38:41 +01:00
  • 39bf889925 feat: remove query parameters from OIDC issuerUrl so that it allows us to use it to carry the OAuth ClientId in the Challenge.target field without at the same time undermining the idToken verification which relies on a issuer (iss) claim without this query parameter beltram 2023-12-15 15:17:17 +01:00
  • d6ceebba94 feat: update the protocol by including team & handle in the client dpop token, verifying the handle in the dpop challenge beltram 2023-11-22 14:59:45 +01:00
  • 6ffd913e28 feat: remove custom hardcoded OIDC challenge for Google beltram 2023-11-20 11:33:08 +01:00
  • 2be77385f6 fix: same issue as with oidc challenge beltram 2023-09-12 17:12:25 +02:00
  • ff07fdc0fd fix: oups beltram 2023-09-12 16:00:53 +02:00
  • 13df461e97 fix: could not reuse a signing key otherwise it would create in accounts & orders and fail the OIDC challenge. The OIDC challenge was not retryable beltram 2023-09-12 14:15:24 +02:00
  • 83f76433a8 b64 encode the kid since apparently it wasn't beltram 2023-07-28 16:47:11 +02:00
  • 8fd0192da3 print kid for debugging beltram 2023-07-28 16:19:12 +02:00
  • 4d028f7813 client jwk was there the whole time beltram 2023-07-28 15:59:18 +02:00
  • ed2bce9a3c fix: access token verification in DPoP challenge. Was previously verifying 'cnf.kid' against backend key whereas it must be against client's key beltram 2023-07-28 15:16:59 +02:00
  • 5fdf036a4d fix: invalid OID for display name in CSR beltram 2023-06-06 13:52:20 +02:00
  • 9d5c974f44 fix: PR review beltram 2023-05-26 10:23:24 +02:00
  • 1b32957ff6 fix: verify custom display_name extension is present beltram 2023-05-23 17:19:12 +02:00
  • ab9e1ddb28 Make MockDB implement acme.DB interface again Herman Slatman 2024-01-08 22:00:50 +01:00
  • 7b5740153d support for oidc id token beltram 2023-05-22 15:51:02 +02:00
  • f5b346ee36 i'm tired beltram 2023-05-22 15:12:47 +02:00
  • 03dbd91418 fix dpop token json serialization to db beltram 2023-05-22 14:33:32 +02:00
  • 613e6cae6e wip beltram 2023-05-22 12:37:36 +02:00
  • 0b68e1bbcf Add GetAllOrdersByAccountID to MockDB Herman Slatman 2024-01-08 21:44:10 +01:00
  • 8888262e45 cheat by allowing also looking up for ready orders beltram 2023-05-22 12:15:08 +02:00
  • 0bc530c98e log more things beltram 2023-05-22 11:51:33 +02:00
  • 2e128056dc have updateOrder also update the update joint table [order by account] beltram 2023-05-17 17:29:38 +02:00
  • 1a711e1b91 Add new Wire DB methods to acme.DB interface Herman Slatman 2024-01-08 21:34:01 +01:00
  • abe86002ee try by storing everything in db beltram 2023-05-16 14:33:11 +02:00
  • 76dfcb00e4 try silencing template data for dichotomies beltram 2023-05-15 10:36:43 +02:00
  • a32bb66e47 trying to pass access token to template beltram 2023-05-12 16:12:20 +02:00
  • ff41a1193d fix deviceId computing in dpop challenge beltram 2023-05-05 15:39:40 +02:00
  • 5ceed08ae0 Reorganize parsing target Stefan Berthold 2023-05-05 12:45:04 +02:00
  • 83ba0bdc51 Replace field access by accessor functions Stefan Berthold 2023-05-05 11:40:47 +02:00
  • c4fb19d01f passing expected issuer to rusty-jwt-cli beltram 2023-05-04 17:29:19 +02:00
  • 2b1223a080 simpler beltram 2023-05-04 14:47:54 +02:00
  • 036a144e09 add oidc target beltram 2023-05-04 14:39:45 +02:00
  • 97002040a5 fix: challenge target field was not mapped to db entity beltram 2023-05-04 10:57:49 +02:00
  • d32a3e23f0 wip beltram 2023-05-03 17:31:26 +02:00
  • b58de27675 fix: do not convert URIs to lowercase for comparison purpose beltram 2023-04-04 16:33:35 +02:00
  • 7c9f8020d5 fix: add URI prefix to handle beltram 2023-04-03 17:09:59 +02:00
  • 680b6ea08f adapt google demo for wire's special handle format "{firstname}_wire" beltram 2023-03-30 14:33:04 +02:00
  • a97991aa83 infer domain from google email address beltram 2023-03-29 15:40:50 +02:00
  • 49ad2d9967 fix google id token matching in oidc challenge beltram 2023-03-29 14:49:29 +02:00
  • a49966f4c9 try using google oidc for demo purpose beltram 2023-03-28 18:32:39 +02:00
  • 3576cc30c8 forward displayName in CSR with custom OID beltram 2023-03-08 11:05:27 +01:00
  • 4172b69816 remove displayName validation, potentially harmful beltram 2023-03-08 10:05:22 +01:00
  • 79501df5a2 fix: exclude displayName from SAN DNS beltram 2023-03-07 18:44:14 +01:00
  • 3f474f77d4 feat: change from impp prefix to just im beltram 2023-03-06 13:53:26 +01:00
  • b6ec4422b4 feat: adapt to dex and pass the 'keyauth' in payload instead of in id_token. Also have a different mapping for id_token claims name beltram 2023-02-23 19:07:12 +01:00
  • af31a167c6 skip empty entries for uniqueSortedLowerNames Stefan Berthold 2023-02-09 14:55:58 +01:00
  • 01ef526d08 change uri prefix to impp:wireapp= beltram 2023-02-09 11:13:39 +01:00
  • cc5fd0a6a5 fix san validation beltram 2023-02-09 11:07:04 +01:00
  • b3dd169190 cleanup my mess beltram 2023-02-08 15:29:06 +01:00
  • 3eb0ff43c0 fix orderNames size beltram 2023-02-08 10:36:16 +01:00
  • c41a99ad75 (finalize) have both display name & domain in SANs beltram 2023-02-08 10:15:00 +01:00
  • 5ba0ab3e44 fix csr domain validation in finalize beltram 2023-02-07 17:24:49 +01:00
  • 73ec6c89d0 fix csr org validation in finalize beltram 2023-02-07 15:27:18 +01:00
  • ca01c74333 avoid manipulating the key PEM format and take a plain PEM key as input beltram 2023-02-06 15:51:51 +01:00
  • 74ddad69dc fix: challenge is '.token' and not '.id' beltram 2023-02-03 12:58:55 +01:00
  • 83f6be1f58 print oidc options beltram 2023-02-02 12:58:10 +01:00
  • 2208b03744 avoid panic when OIDC config is not provided Stefan Berthold 2023-02-02 12:05:56 +01:00
  • 1fe61bee7b better observability beltram 2023-02-02 11:58:23 +01:00
  • e6dd211637 acquire DPoP signing key from provisioner Stefan Berthold 2023-02-02 11:14:29 +01:00
  • 227e932624 use json struct for challenge request payload otherwise it's a hell to craft from client side beltram 2023-02-02 10:27:23 +01:00
  • 5ca744567c simplify OIDC verification Stefan Berthold 2023-02-01 17:36:20 +01:00
  • da1e64aa53 update wire challenges' status on happy end Stefan Berthold 2023-01-31 17:36:06 +01:00
  • 8e0e35532c Add Wire authz and challenges (OIDC+DPOP) Stefan Berthold 2022-12-08 18:10:36 +01:00
  • 25c109e75d Change error message for CSR validation Herman Slatman 2024-01-08 20:05:16 +01:00
  • fc55fba5b5 Merge pull request #1664 from smallstep/dependabot/go_modules/google.golang.org/api-0.155.0 github-actions[bot] 2024-01-08 18:59:01 +01:00
  • 4ba2e22b8d Merge pull request #1663 from smallstep/herman/acme-cose-rs1-support Herman Slatman 2024-01-08 17:20:21 +01:00
  • a49d1f7dc0 Bump google.golang.org/api from 0.154.0 to 0.155.0 dependabot[bot] 2024-01-08 15:22:05 +00:00
  • e52836f0ab Add RS1 support for ACME device-attest-01 Herman Slatman 2024-01-07 21:25:36 +01:00
  • 508b6e8668 Check cnf claim with CSR or SSH public key fingerprint Mariano Cano 2023-12-28 17:09:39 -08:00
  • 581db00a00 Merge pull request #1661 from smallstep/herman/acme-challenge-client-proxy Herman Slatman 2024-01-03 19:36:48 +01:00
  • c3c4287010 Support ECDSA P-256 public keys in Nebula token validation Herman Slatman 2024-01-03 16:22:24 +01:00
  • 26248e8f8e Fix Nebula sign operations requiring curve to be specified Herman Slatman 2024-01-03 16:01:38 +01:00
  • c59d293d26 Add support for HTTP_PROXY and HTTPS_PROXY to ACME solver client Herman Slatman 2024-01-03 15:09:24 +01:00
  • 1d096cbcd4 Add an Unwrap to the Listener herman/wrapped-listener Herman Slatman 2023-12-28 20:33:29 +01:00
  • 82e0984018 Add WrappedListener Herman Slatman 2023-12-28 16:54:22 +01:00
  • b75773e193 Merge pull request #1655 from smallstep/dependabot/go_modules/google.golang.org/protobuf-1.32.0 github-actions[bot] 2023-12-27 13:16:20 +01:00
  • 5432316f2c Merge pull request #1657 from smallstep/dependabot/go_modules/github.com/go-chi/chi/v5-5.0.11 github-actions[bot] 2023-12-27 13:15:01 +01:00
  • a612efff5a Bump google.golang.org/protobuf from 1.31.0 to 1.32.0 dependabot[bot] 2023-12-27 12:11:04 +00:00
  • 428404870e Merge pull request #1654 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.60.1 github-actions[bot] 2023-12-27 13:09:23 +01:00
  • f3572b39c6 Bump github.com/go-chi/chi/v5 from 5.0.10 to 5.0.11 dependabot[bot] 2023-12-25 15:16:36 +00:00
  • fc22ecc3af Bump github.com/slackhq/nebula from 1.6.1 to 1.8.1 dependabot[bot] 2023-12-25 15:16:27 +00:00
  • e45be31055 Bump google.golang.org/grpc from 1.60.0 to 1.60.1 dependabot[bot] 2023-12-25 15:15:59 +00:00
  • 4a580f59fb Merge pull request #1649 from smallstep/dependabot/go_modules/google.golang.org/api-0.154.0 github-actions[bot] 2023-12-19 13:21:03 +01:00
  • 56daa26900 Bump google.golang.org/api from 0.153.0 to 0.154.0 dependabot[bot] 2023-12-19 12:15:39 +00:00
  • 9eecd12fc2 Merge pull request #1651 from smallstep/dependabot/go_modules/github.com/newrelic/go-agent/v3-3.29.0 github-actions[bot] 2023-12-19 13:12:34 +01:00
  • 40c58cb1ec Merge pull request #1650 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.60.0 github-actions[bot] 2023-12-19 13:11:20 +01:00
  • 9780cf7b80 Merge pull request #1648 from smallstep/dependabot/go_modules/github.com/google/uuid-1.5.0 github-actions[bot] 2023-12-19 11:39:20 +01:00
  • 0e3964ee80 Merge pull request #1652 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.17.0 github-actions[bot] 2023-12-19 10:57:57 +01:00
  • 5d446dedd6 Bump golang.org/x/crypto from 0.16.0 to 0.17.0 dependabot[bot] 2023-12-19 00:07:44 +00:00
  • 46237b8638 Bump github.com/newrelic/go-agent/v3 from 3.28.1 to 3.29.0 dependabot[bot] 2023-12-18 15:23:29 +00:00
  • 33e6f2bae2 Bump google.golang.org/grpc from 1.59.0 to 1.60.0 dependabot[bot] 2023-12-18 15:23:19 +00:00