4322 Commits (1583e53cdaf693ad4e10a22ea5d5011a3d025d5e)

 

All Branches   

Search

Author	SHA1	Message	Date
Herman Slatman	fdea5e7db3	Fix tests for new ACME orders with Wire IDs	5 months ago
Herman Slatman	c1a7acc306	Make it compile with Go 1.20 again	5 months ago
beltram	84e9682476	feat: change the separator between user-id & device-id in a client-id. Use '!' instead of ':'	5 months ago
beltram	90b5347887	feat: try using the new ClientId & Handle format (i.e. plain URIs)	5 months ago
beltram	39bf889925	feat: remove query parameters from OIDC issuerUrl so that it allows us to use it to carry the OAuth ClientId in the Challenge.target field without at the same time undermining the idToken verification which relies on a issuer (iss) claim without this query parameter	5 months ago
beltram	d6ceebba94	feat: update the protocol by including team & handle in the client dpop token, verifying the handle in the dpop challenge	5 months ago
beltram	6ffd913e28	feat: remove custom hardcoded OIDC challenge for Google	5 months ago
beltram	2be77385f6	fix: same issue as with oidc challenge	5 months ago
beltram	ff07fdc0fd	fix: oups	5 months ago
beltram	13df461e97	fix: could not reuse a signing key otherwise it would create in accounts & orders and fail the OIDC challenge. The OIDC challenge was not retryable	5 months ago
beltram	83f76433a8	b64 encode the kid since apparently it wasn't	5 months ago
beltram	8fd0192da3	print kid for debugging	5 months ago
beltram	4d028f7813	client jwk was there the whole time	5 months ago
beltram	ed2bce9a3c	fix: access token verification in DPoP challenge. Was previously verifying 'cnf.kid' against backend key whereas it must be against client's key	5 months ago
beltram	5fdf036a4d	fix: invalid OID for display name in CSR	5 months ago
beltram	9d5c974f44	fix: PR review	5 months ago
beltram	1b32957ff6	fix: verify custom display_name extension is present	5 months ago
Herman Slatman	ab9e1ddb28	Make `MockDB` implement `acme.DB` interface again	5 months ago
beltram	7b5740153d	support for oidc id token	5 months ago
beltram	f5b346ee36	i'm tired	5 months ago
beltram	03dbd91418	fix dpop token json serialization to db	5 months ago
beltram	613e6cae6e	wip	5 months ago
Herman Slatman	0b68e1bbcf	Add `GetAllOrdersByAccountID` to `MockDB`	5 months ago
beltram	8888262e45	cheat by allowing also looking up for ready orders	5 months ago
beltram	0bc530c98e	log more things	5 months ago
beltram	2e128056dc	have updateOrder also update the update joint table [order by account]	5 months ago
Herman Slatman	1a711e1b91	Add new Wire DB methods to `acme.DB` interface	5 months ago
beltram	abe86002ee	try by storing everything in db	5 months ago
beltram	76dfcb00e4	try silencing template data for dichotomies	5 months ago
beltram	a32bb66e47	trying to pass access token to template	5 months ago
beltram	ff41a1193d	fix deviceId computing in dpop challenge	5 months ago
Stefan Berthold	5ceed08ae0	Reorganize parsing target	5 months ago
Stefan Berthold	83ba0bdc51	Replace field access by accessor functions	5 months ago
beltram	c4fb19d01f	passing expected issuer to rusty-jwt-cli	5 months ago
beltram	2b1223a080	simpler	5 months ago
beltram	036a144e09	add oidc target	5 months ago
beltram	97002040a5	fix: challenge target field was not mapped to db entity	5 months ago
beltram	d32a3e23f0	wip	5 months ago
beltram	b58de27675	fix: do not convert URIs to lowercase for comparison purpose	5 months ago
beltram	7c9f8020d5	fix: add URI prefix to handle	5 months ago
beltram	680b6ea08f	adapt google demo for wire's special handle format "{firstname}_wire"	5 months ago
beltram	a97991aa83	infer domain from google email address	5 months ago
beltram	49ad2d9967	fix google id token matching in oidc challenge	5 months ago
beltram	a49966f4c9	try using google oidc for demo purpose	5 months ago
beltram	3576cc30c8	forward displayName in CSR with custom OID	5 months ago
beltram	4172b69816	remove displayName validation, potentially harmful	5 months ago
beltram	79501df5a2	fix: exclude displayName from SAN DNS	5 months ago
beltram	3f474f77d4	feat: change from impp prefix to just im	5 months ago
beltram	b6ec4422b4	feat: adapt to dex and pass the 'keyauth' in payload instead of in id_token. Also have a different mapping for id_token claims name	5 months ago
Stefan Berthold	af31a167c6	skip empty entries for uniqueSortedLowerNames	5 months ago