460 Commits (herman/wire-dpop-struct)

Author	SHA1	Message	Date
Herman Slatman	231f03ae28	Use a struct for the Wire DPoP token	5 months ago
Herman Slatman	9bb1b24bf1	Change `kid` and `dpop` validation	5 months ago
Herman Slatman	24795720e1	Perform initialization of DPoP and OIDC options once	5 months ago
Herman Slatman	79739e5073	Change signature algorithm property name	5 months ago
Herman Slatman	7eacb68361	Merge branch 'herman/remove-rusty-cli' into herman/wire-configuration-refactor	5 months ago
Herman Slatman	44721a7d58	Remove debug err print	5 months ago
Herman Slatman	348363abce	Add Wire `DPoP` proof claims verification	5 months ago
Herman Slatman	1bf807add3	Use base64 encoded signing key format	5 months ago
Herman Slatman	1f5f756fce	Make Wire options more robust	5 months ago
Herman Slatman	6ef64b6ed6	Refactor the `Wire` option configuration	5 months ago
Herman Slatman	b6fc0005d5	Add verification of maximum expiry time for Wire tokens	5 months ago
Herman Slatman	b964c97750	Add validation of `handle` and `token` to Wire verification	5 months ago
Herman Slatman	acad227b25	Put Wire options in lower level `wire` struct	5 months ago
Herman Slatman	cd9480ab14	Fix test for `parseAndVerifyWireAccessToken`	5 months ago
Herman Slatman	897688a831	Merge branch 'wire-acme-extensions' into herman/remove-rusty-cli	5 months ago
Herman Slatman	ca8855767d	Fix and add more tests to Wire order identifier validation	5 months ago
Herman Slatman	70a2f431fa	Address review remarks	5 months ago
Herman Slatman	de25740567	Change name of test for Wire Order	5 months ago
Herman Slatman	c7892e9cd3	Remove the `rusty-jwt-cli` configuration	5 months ago
Herman Slatman	a423151207	Merge branch 'wire-acme-extensions' into herman/remove-rusty-cli	5 months ago
Herman Slatman	ffd887f8cc	Fix tests for ACME Wire provisioner	5 months ago
Herman Slatman	033aef9f9d	Merge branch 'wire-acme-extensions' into herman/remove-rusty-cli	5 months ago
Herman Slatman	8faf26c593	Change `KeyAuth` back to old behavior (for now)	5 months ago
beltram	bf5f1201ea	fix: keyauth was not bound to the id token	5 months ago
Herman Slatman	29fa6621b1	Remove the Wire CLI invocatation	5 months ago
Herman Slatman	7a464cdb17	Use `require` to check for errors in Wire integration test	5 months ago
Herman Slatman	776a839a42	Fix linter issues and improve error handling	5 months ago
Herman Slatman	f5a2f436df	Fix missing `DPoP` and `OIDC` tokens for Wire integration test	5 months ago
Herman Slatman	eb9893bd21	Refactor logic for processing `WireID` identifiers in Order ... Processing `WireID` identifiers, the Wire subject, and the Wire DPoP and OIDC tokens is now conditional.	5 months ago
Herman Slatman	40668ae09e	Refactor `WireID` target processing a bit	5 months ago
Herman Slatman	01169b2483	Make the `Target` optional in `Challenge` object ... This is a non-standard property in the ACME challenge response, so we shouldn't return it if it's not set. Also made it an optional field in the DB.	5 months ago
Herman Slatman	85309bb8ec	Fix the integration test	5 months ago
Herman Slatman	fdea5e7db3	Fix tests for new ACME orders with Wire IDs	5 months ago
Herman Slatman	c1a7acc306	Make it compile with Go 1.20 again	5 months ago
beltram	84e9682476	feat: change the separator between user-id & device-id in a client-id. Use '!' instead of ':'	5 months ago
beltram	90b5347887	feat: try using the new ClientId & Handle format (i.e. plain URIs)	5 months ago
beltram	d6ceebba94	feat: update the protocol by including team & handle in the client dpop token, verifying the handle in the dpop challenge	5 months ago
beltram	6ffd913e28	feat: remove custom hardcoded OIDC challenge for Google	5 months ago
beltram	2be77385f6	fix: same issue as with oidc challenge	5 months ago
beltram	ff07fdc0fd	fix: oups	5 months ago
beltram	13df461e97	fix: could not reuse a signing key otherwise it would create in accounts & orders and fail the OIDC challenge. The OIDC challenge was not retryable	5 months ago
beltram	83f76433a8	b64 encode the kid since apparently it wasn't	5 months ago
beltram	8fd0192da3	print kid for debugging	5 months ago
beltram	4d028f7813	client jwk was there the whole time	5 months ago
beltram	ed2bce9a3c	fix: access token verification in DPoP challenge. Was previously verifying 'cnf.kid' against backend key whereas it must be against client's key	5 months ago
beltram	5fdf036a4d	fix: invalid OID for display name in CSR	5 months ago
beltram	9d5c974f44	fix: PR review	5 months ago
beltram	1b32957ff6	fix: verify custom display_name extension is present	5 months ago
Herman Slatman	ab9e1ddb28	Make `MockDB` implement `acme.DB` interface again	5 months ago
beltram	7b5740153d	support for oidc id token	5 months ago