Commit Graph

208 Commits (00ebee870bbca81b7d3c6d7a4d8885a8f3b06835)

Author SHA1 Message Date
Mariano Cano dc657565a7 Add SSH test for GCP. 5 years ago
Mariano Cano 7983aa8661 Add azure ssh tests. 5 years ago
Mariano Cano 2cac85a8c8 Add aws tests. 5 years ago
Mariano Cano f8a71899fd Add missing file. 5 years ago
Mariano Cano d231bfb764 Update jwk and oidc tests. 5 years ago
Mariano Cano a8f4ad1b8e Set default SSH options if no user options are given. 5 years ago
Mariano Cano c17375a10a Create convenient method to mock the timeduration. 5 years ago
Mariano Cano 4c1a11c1bc Add Unix method to TimeDuration. 5 years ago
Mariano Cano b0240772da Add tests for SSH certs with JWK provisioners. 5 years ago
Mariano Cano 780eeb5487 Remove debug print. 5 years ago
Mariano Cano ad91842d06 Add test for SanitizeSSHUserPrincipal 5 years ago
Mariano Cano f8cacc11b1 Fix tests. 5 years ago
Mariano Cano b827a59e96 Add SSH host certificate support for GCP provisioner. 5 years ago
Mariano Cano 221d323b68 Fix containsAllMembers 5 years ago
Mariano Cano 18a285e847 Change azure ssh key id. 5 years ago
Mariano Cano aef52e4334 Add support for SSH host certificates in azure. 5 years ago
Mariano Cano 7d670b20ea Add support of ssh host certinficates in AWS provisioner. 5 years ago
Mariano Cano 7583f1c739 Do not require all principals, allow subgroups. 5 years ago
Mariano Cano 41b97372e6 Rename function to SanitizeSSHUserPrincipal 5 years ago
Mariano Cano 53f62f871c Set not extensions to host certificates. 5 years ago
Mariano Cano 48c98dea2a Make SanitizeSSHPrincipal a public function. 5 years ago
Mariano Cano f01286bb48 Add support for SSH certificates to OIDC.
Update the interface for all the provisioners.
5 years ago
Mariano Cano 7a64a84761 Pass the given context. 5 years ago
Mariano Cano e1cd5ee8c3 Add context to the Authorize method.
Fix tests.
5 years ago
Mariano Cano 2127d09ef3 Rename context type to apiCtx.
It will conflict with the context package.
5 years ago
Mariano Cano 082ebda85b Merge branch 'master' of github.com:smallstep/certificates into ssh-ca 5 years ago
Mariano Cano d7221e15ac Always marshal timeduration as a string 5 years ago
Mariano Cano 3ff410c695 fix ssh validity modifier 5 years ago
Mariano Cano 1c8f610ca9 Add initial implementation of an SSH CA using the JWK provisioner.
Fixes smallstep/ca-component#187
5 years ago
Mariano Cano f5beed3b96
Merge pull request #83 from matteo-s/oidc-groups
Add option for checking group membership declared in JWT token
5 years ago
Mariano Cano 3e69194cc4 Fix lint error 5 years ago
Mariano Cano 900ab9cc12 Allow custom common names in cloud identity provisioners. 5 years ago
Mariano Cano 5f4217ca4c Simplify abs, it performs even better. 5 years ago
Matteo Saloni 1919cfdff3 Add option for checking group membership declared in JWT token 5 years ago
Mariano Cano e66272d6f0 Fix panic when max-age is set to zero.
Fixes #81
5 years ago
Mariano Cano 578beec25d
Merge pull request #65 from smallstep/cloud-identities
Cloud identities
5 years ago
Mariano Cano 8f8c862c04 Fix spelling errors. 5 years ago
Mariano Cano b88a2f1373 Fix provisioner id in LoadByCertificate 5 years ago
Mariano Cano 37dff5124b Fix audience tests.
Fixes smallstep/step#156
5 years ago
Mariano Cano 2491593cdd Add ca-url based audience for AWS tokens
Fixes smallstep/step#156
5 years ago
Mariano Cano 4fa9e9333d Add NewDuration constructor. 5 years ago
Mariano Cano 37f2096dff Add Stringer interface to provisioner.Type.
Add missing file.
5 years ago
Mariano Cano 6e4a09651a Add comments with links to cloud docs. 5 years ago
Mariano Cano 536ec36b9e Add support for instance age check in AWS.
Fixes smallstep/step#164
5 years ago
Mariano Cano c431538ff2 Add support for instance age check in GCP.
Fixes smallstep/step#164
5 years ago
Mariano Cano 4cef086c00 Allow to use emails as service accounts on GCP
Fixes smallstep/step#163
5 years ago
Mariano Cano 0a756ce9d0 Use on GCP audiences with the format https://<ca-url>#<provisioner-type>/<provisioner-name>
Fixes smallstep/step#156
5 years ago
Mariano Cano a54bf925eb Add filtering by GCP Project ID.
Fixes smallstep/step#155
5 years ago
Mariano Cano 54d0186d1f Change condition to fail if the length is not the expected. 5 years ago
Mariano Cano dbd3131068 Fix comments. 5 years ago