159 Commits (231f03ae28ff2c8744cfa8e3091509e02c5124b5)

Author	SHA1	Message	Date
Herman Slatman	231f03ae28	Use a struct for the Wire DPoP token	5 months ago
Herman Slatman	9bb1b24bf1	Change `kid` and `dpop` validation	5 months ago
Herman Slatman	79739e5073	Change signature algorithm property name	5 months ago
Herman Slatman	7eacb68361	Merge branch 'herman/remove-rusty-cli' into herman/wire-configuration-refactor	5 months ago
Herman Slatman	44721a7d58	Remove debug err print	5 months ago
Herman Slatman	348363abce	Add Wire `DPoP` proof claims verification	5 months ago
Herman Slatman	1bf807add3	Use base64 encoded signing key format	5 months ago
Herman Slatman	1f5f756fce	Make Wire options more robust	5 months ago
Herman Slatman	6ef64b6ed6	Refactor the `Wire` option configuration	5 months ago
Herman Slatman	b6fc0005d5	Add verification of maximum expiry time for Wire tokens	5 months ago
Herman Slatman	b964c97750	Add validation of `handle` and `token` to Wire verification	5 months ago
Herman Slatman	acad227b25	Put Wire options in lower level `wire` struct	5 months ago
Herman Slatman	cd9480ab14	Fix test for `parseAndVerifyWireAccessToken`	5 months ago
Herman Slatman	897688a831	Merge branch 'wire-acme-extensions' into herman/remove-rusty-cli	5 months ago
Herman Slatman	70a2f431fa	Address review remarks	5 months ago
Herman Slatman	033aef9f9d	Merge branch 'wire-acme-extensions' into herman/remove-rusty-cli	5 months ago
Herman Slatman	8faf26c593	Change `KeyAuth` back to old behavior (for now)	5 months ago
beltram	bf5f1201ea	fix: keyauth was not bound to the id token	5 months ago
Herman Slatman	29fa6621b1	Remove the Wire CLI invocatation	5 months ago
Herman Slatman	776a839a42	Fix linter issues and improve error handling	5 months ago
Herman Slatman	01169b2483	Make the `Target` optional in `Challenge` object ... This is a non-standard property in the ACME challenge response, so we shouldn't return it if it's not set. Also made it an optional field in the DB.	5 months ago
Herman Slatman	c1a7acc306	Make it compile with Go 1.20 again	5 months ago
beltram	90b5347887	feat: try using the new ClientId & Handle format (i.e. plain URIs)	5 months ago
beltram	d6ceebba94	feat: update the protocol by including team & handle in the client dpop token, verifying the handle in the dpop challenge	5 months ago
beltram	6ffd913e28	feat: remove custom hardcoded OIDC challenge for Google	5 months ago
beltram	2be77385f6	fix: same issue as with oidc challenge	5 months ago
beltram	ff07fdc0fd	fix: oups	5 months ago
beltram	13df461e97	fix: could not reuse a signing key otherwise it would create in accounts & orders and fail the OIDC challenge. The OIDC challenge was not retryable	5 months ago
beltram	83f76433a8	b64 encode the kid since apparently it wasn't	5 months ago
beltram	8fd0192da3	print kid for debugging	5 months ago
beltram	4d028f7813	client jwk was there the whole time	5 months ago
beltram	ed2bce9a3c	fix: access token verification in DPoP challenge. Was previously verifying 'cnf.kid' against backend key whereas it must be against client's key	5 months ago
beltram	9d5c974f44	fix: PR review	5 months ago
beltram	7b5740153d	support for oidc id token	5 months ago
beltram	f5b346ee36	i'm tired	5 months ago
beltram	613e6cae6e	wip	5 months ago
beltram	abe86002ee	try by storing everything in db	5 months ago
beltram	a32bb66e47	trying to pass access token to template	5 months ago
beltram	ff41a1193d	fix deviceId computing in dpop challenge	5 months ago
Stefan Berthold	83ba0bdc51	Replace field access by accessor functions	5 months ago
beltram	c4fb19d01f	passing expected issuer to rusty-jwt-cli	5 months ago
beltram	d32a3e23f0	wip	5 months ago
beltram	7c9f8020d5	fix: add URI prefix to handle	5 months ago
beltram	680b6ea08f	adapt google demo for wire's special handle format "{firstname}_wire"	5 months ago
beltram	a97991aa83	infer domain from google email address	5 months ago
beltram	49ad2d9967	fix google id token matching in oidc challenge	5 months ago
beltram	a49966f4c9	try using google oidc for demo purpose	5 months ago
beltram	b6ec4422b4	feat: adapt to dex and pass the 'keyauth' in payload instead of in id_token. Also have a different mapping for id_token claims name	5 months ago
beltram	b3dd169190	cleanup my mess	5 months ago
beltram	ca01c74333	avoid manipulating the key PEM format and take a plain PEM key as input	5 months ago