4154 Commits (herman/wire-dpop-struct)

 

All Branches   

Search

Author	SHA1	Message	Date
Herman Slatman	231f03ae28	Use a struct for the Wire DPoP token	4 months ago
Herman Slatman	9bb1b24bf1	Change `kid` and `dpop` validation	4 months ago
Herman Slatman	3f37feae78	Merge pull request #1671 from smallstep/herman/wire-configuration-refactor ... Wire ACME extension configuration refactor	4 months ago
Herman Slatman	c8160caacd	Fix test; reworded error message	4 months ago
Herman Slatman	24795720e1	Perform initialization of DPoP and OIDC options once	4 months ago
Herman Slatman	79739e5073	Change signature algorithm property name	4 months ago
Herman Slatman	7eacb68361	Merge branch 'herman/remove-rusty-cli' into herman/wire-configuration-refactor	4 months ago
Herman Slatman	44721a7d58	Remove debug err print	4 months ago
Herman Slatman	348363abce	Add Wire `DPoP` proof claims verification	4 months ago
Herman Slatman	1bf807add3	Use base64 encoded signing key format	4 months ago
Herman Slatman	1f5f756fce	Make Wire options more robust	4 months ago
Herman Slatman	6ef64b6ed6	Refactor the `Wire` option configuration	4 months ago
Herman Slatman	b6fc0005d5	Add verification of maximum expiry time for Wire tokens	4 months ago
Herman Slatman	b964c97750	Add validation of `handle` and `token` to Wire verification	4 months ago
Herman Slatman	acad227b25	Put Wire options in lower level `wire` struct	4 months ago
Herman Slatman	cd9480ab14	Fix test for `parseAndVerifyWireAccessToken`	4 months ago
Herman Slatman	897688a831	Merge branch 'wire-acme-extensions' into herman/remove-rusty-cli	4 months ago
Herman Slatman	ca8855767d	Fix and add more tests to Wire order identifier validation	4 months ago
Herman Slatman	70a2f431fa	Address review remarks	4 months ago
Herman Slatman	de25740567	Change name of test for Wire Order	4 months ago
Herman Slatman	c7892e9cd3	Remove the `rusty-jwt-cli` configuration	4 months ago
Herman Slatman	a423151207	Merge branch 'wire-acme-extensions' into herman/remove-rusty-cli	4 months ago
Herman Slatman	ffd887f8cc	Fix tests for ACME Wire provisioner	4 months ago
Herman Slatman	8997ce1a1e	Disable `wire-dpop-01` and `wire-oidc-01` by default	4 months ago
Herman Slatman	bf8c17e3ec	Remove the Wire `oidc` and `dpop` from attestation formats	4 months ago
Herman Slatman	033aef9f9d	Merge branch 'wire-acme-extensions' into herman/remove-rusty-cli	4 months ago
Herman Slatman	6a98fea1f3	Fix linter issues	4 months ago
Herman Slatman	8faf26c593	Change `KeyAuth` back to old behavior (for now)	4 months ago
beltram	bf5f1201ea	fix: keyauth was not bound to the id token	4 months ago
Herman Slatman	e2a2e00526	Make template use `DeviceId` for now	4 months ago
Herman Slatman	29fa6621b1	Remove the Wire CLI invocatation	4 months ago
Herman Slatman	7a464cdb17	Use `require` to check for errors in Wire integration test	4 months ago
Herman Slatman	776a839a42	Fix linter issues and improve error handling	4 months ago
Herman Slatman	f5a2f436df	Fix missing `DPoP` and `OIDC` tokens for Wire integration test	4 months ago
Herman Slatman	eb9893bd21	Refactor logic for processing `WireID` identifiers in Order ... Processing `WireID` identifiers, the Wire subject, and the Wire DPoP and OIDC tokens is now conditional.	4 months ago
Herman Slatman	40668ae09e	Refactor `WireID` target processing a bit	4 months ago
Herman Slatman	01169b2483	Make the `Target` optional in `Challenge` object ... This is a non-standard property in the ACME challenge response, so we shouldn't return it if it's not set. Also made it an optional field in the DB.	4 months ago
Herman Slatman	85309bb8ec	Fix the integration test	4 months ago
Herman Slatman	fdea5e7db3	Fix tests for new ACME orders with Wire IDs	4 months ago
Herman Slatman	c1a7acc306	Make it compile with Go 1.20 again	4 months ago
beltram	84e9682476	feat: change the separator between user-id & device-id in a client-id. Use '!' instead of ':'	4 months ago
beltram	90b5347887	feat: try using the new ClientId & Handle format (i.e. plain URIs)	4 months ago
beltram	39bf889925	feat: remove query parameters from OIDC issuerUrl so that it allows us to use it to carry the OAuth ClientId in the Challenge.target field without at the same time undermining the idToken verification which relies on a issuer (iss) claim without this query parameter	4 months ago
beltram	d6ceebba94	feat: update the protocol by including team & handle in the client dpop token, verifying the handle in the dpop challenge	4 months ago
beltram	6ffd913e28	feat: remove custom hardcoded OIDC challenge for Google	4 months ago
beltram	2be77385f6	fix: same issue as with oidc challenge	4 months ago
beltram	ff07fdc0fd	fix: oups	4 months ago
beltram	13df461e97	fix: could not reuse a signing key otherwise it would create in accounts & orders and fail the OIDC challenge. The OIDC challenge was not retryable	4 months ago
beltram	83f76433a8	b64 encode the kid since apparently it wasn't	4 months ago
beltram	8fd0192da3	print kid for debugging	4 months ago