33 Commits

Author	SHA1	Message	Date
Quentin Gliech	6ded397977	Use minijinja templates to map OIDC claims to user attributes	2023-11-08 12:05:58 +01:00
Quentin Gliech	9b5c8fb44b	Allow running the authentication service on a different base path	2023-10-06 14:07:55 +02:00
Quentin Gliech	54071c4969	Make the HTTP client factory reuse the underlying client ... This avoids duplicating clients, and makes it so that they all share the same connection pool.	2023-09-14 16:52:01 +02:00
Quentin Gliech	0bb34ed3e0	Add the Sentry event ID in error response headers	2023-09-08 15:19:43 +02:00
Quentin Gliech	07ca145174	Cache the upstream OAuth 2.0 provider metadata	2023-08-28 18:30:40 +02:00
Quentin Gliech	a39f71c181	Handle cookies better by setting the right flags & expiration	2023-08-25 14:35:46 +02:00
Quentin Gliech	08f58db08b	Replace the OTEL-based tracing layer with tracing based layers	2023-04-18 14:45:43 +02:00
Quentin Gliech	87914cbcb3	Capture better errors in Sentry	2023-01-31 16:25:15 +01:00
Quentin Gliech	875025467e	Log more errors and setup Sentry integration	2023-01-30 18:04:44 +01:00
Quentin Gliech	a9facab131	Box the repository everywhere	2023-01-20 17:53:04 +01:00
Quentin Gliech	876bc9fcb3	handlers: extract the PgRepository from the request ... Also fix a bunch of clippy errors & doctests	2023-01-18 18:22:13 +01:00
Quentin Gliech	9005931e2a	handlers: box the rng and clock, and extract it from the state	2023-01-18 17:49:59 +01:00
Quentin Gliech	142fdbd45a	storage: make the Clock a trait	2023-01-18 12:20:30 +01:00
Quentin Gliech	73a921cc30	Split the storage trait from the implementation	2023-01-18 10:38:22 +01:00
Quentin Gliech	195203823a	storage: wrap the postgres repository in a struct	2023-01-13 18:03:37 +01:00
Quentin Gliech	35787aa072	data-model: have more structs use a state machine	2023-01-09 18:02:32 +01:00
Quentin Gliech	870a37151f	storage: upstream oauth session repository + unit tests	2022-12-30 15:39:51 +01:00
Quentin Gliech	5969b574e2	WIP: repository pattern for upstream oauth2 links	2022-12-30 10:16:22 +01:00
Quentin Gliech	68890b7291	handlers: remove most usage of anyhow	2022-12-08 15:29:15 +01:00
Quentin Gliech	102571512e	storage: unify most oauth2 related errors	2022-12-08 15:29:15 +01:00
Quentin Gliech	f7f65e314b	storage: unify the compat login errors	2022-12-08 15:29:15 +01:00
Quentin Gliech	1ddc05ff01	storage: start unifying database errors	2022-12-08 15:29:15 +01:00
Quentin Gliech	23fd833d45	Save the post auth action during upstream OAuth login	2022-12-05 19:39:51 +01:00
Quentin Gliech	4d93f4d4f0	Refactor the upstream oauth session cookie	2022-12-05 19:39:51 +01:00
Quentin Gliech	2e7112ef13	GraphQL API	2022-12-05 19:39:51 +01:00
Quentin Gliech	fcb6190a56	Simplify route error handling	2022-12-05 19:39:51 +01:00
Quentin Gliech	28bfce7e45	Save the ID token during an upstream authorization	2022-12-05 19:39:51 +01:00
Quentin Gliech	bf432a31e1	OIDC account linking and login	2022-12-05 19:39:51 +01:00
Quentin Gliech	22a337cd45	WIP: handle account linking	2022-12-05 19:39:51 +01:00
Quentin Gliech	cde9187adc	Lookup and save upstream links	2022-12-05 19:39:51 +01:00
Quentin Gliech	4227fa7a83	Add a global HTTP client factory	2022-12-05 19:39:51 +01:00
Quentin Gliech	16088fc11c	Refactor the provider client credentials extraction	2022-12-05 19:39:51 +01:00
Quentin Gliech	bedcf44741	WIP: upstream OIDC provider support	2022-12-05 19:39:51 +01:00