Commit Graph

4154 Commits (herman/wire-dpop-struct)
 

Author SHA1 Message Date
beltram 4d028f7813
client jwk was there the whole time 5 months ago
beltram ed2bce9a3c
fix: access token verification in DPoP challenge. Was previously verifying 'cnf.kid' against backend key whereas it must be against client's key 5 months ago
beltram 5fdf036a4d
fix: invalid OID for display name in CSR 5 months ago
beltram 9d5c974f44
fix: PR review 5 months ago
beltram 1b32957ff6
fix: verify custom display_name extension is present 5 months ago
Herman Slatman ab9e1ddb28
Make `MockDB` implement `acme.DB` interface again 5 months ago
beltram 7b5740153d
support for oidc id token 5 months ago
beltram f5b346ee36
i'm tired 5 months ago
beltram 03dbd91418
fix dpop token json serialization to db 5 months ago
beltram 613e6cae6e
wip 5 months ago
Herman Slatman 0b68e1bbcf
Add `GetAllOrdersByAccountID` to `MockDB` 5 months ago
beltram 8888262e45
cheat by allowing also looking up for ready orders 5 months ago
beltram 0bc530c98e
log more things 5 months ago
beltram 2e128056dc
have updateOrder also update the update joint table [order by account] 5 months ago
Herman Slatman 1a711e1b91
Add new Wire DB methods to `acme.DB` interface 5 months ago
beltram abe86002ee
try by storing everything in db 5 months ago
beltram 76dfcb00e4
try silencing template data for dichotomies 5 months ago
beltram a32bb66e47
trying to pass access token to template 5 months ago
beltram ff41a1193d
fix deviceId computing in dpop challenge 5 months ago
Stefan Berthold 5ceed08ae0
Reorganize parsing target 5 months ago
Stefan Berthold 83ba0bdc51
Replace field access by accessor functions 5 months ago
beltram c4fb19d01f
passing expected issuer to rusty-jwt-cli 5 months ago
beltram 2b1223a080
simpler 5 months ago
beltram 036a144e09
add oidc target 5 months ago
beltram 97002040a5
fix: challenge target field was not mapped to db entity 5 months ago
beltram d32a3e23f0
wip 5 months ago
beltram b58de27675
fix: do not convert URIs to lowercase for comparison purpose 5 months ago
beltram 7c9f8020d5
fix: add URI prefix to handle 5 months ago
beltram 680b6ea08f
adapt google demo for wire's special handle format "{firstname}_wire" 5 months ago
beltram a97991aa83
infer domain from google email address 5 months ago
beltram 49ad2d9967
fix google id token matching in oidc challenge 5 months ago
beltram a49966f4c9
try using google oidc for demo purpose 5 months ago
beltram 3576cc30c8
forward displayName in CSR with custom OID 5 months ago
beltram 4172b69816
remove displayName validation, potentially harmful 5 months ago
beltram 79501df5a2
fix: exclude displayName from SAN DNS 5 months ago
beltram 3f474f77d4
feat: change from impp prefix to just im 5 months ago
beltram b6ec4422b4
feat: adapt to dex and pass the 'keyauth' in payload instead of in id_token. Also have a different mapping for id_token claims name 5 months ago
Stefan Berthold af31a167c6
skip empty entries for uniqueSortedLowerNames 5 months ago
beltram 01ef526d08
change uri prefix to impp:wireapp= 5 months ago
beltram cc5fd0a6a5
fix san validation 5 months ago
beltram b3dd169190
cleanup my mess 5 months ago
beltram 3eb0ff43c0
fix orderNames size 5 months ago
beltram c41a99ad75
(finalize) have both display name & domain in SANs 5 months ago
beltram 5ba0ab3e44
fix csr domain validation in finalize 5 months ago
beltram 73ec6c89d0
fix csr org validation in finalize 5 months ago
beltram ca01c74333
avoid manipulating the key PEM format and take a plain PEM key as input 5 months ago
beltram 74ddad69dc
fix: challenge is '.token' and not '.id' 5 months ago
beltram 83f6be1f58
print oidc options 5 months ago
Stefan Berthold 2208b03744
avoid panic when OIDC config is not provided 5 months ago
beltram 1fe61bee7b
better observability 5 months ago