26 Commits (27810455249dc3a8bfb82b80670e4fa0f02b324e)

Author	SHA1	Message	Date
Mariano Cano	6c4abfabbb	Make /.well-known/openid-configuration optional	5 years ago
Mariano Cano	3527ee6940	Add support for listenAddress parameter if OIDC provisioners. ... Fixes smallstep/cli#150	5 years ago
Mariano Cano	396b4222aa	Implement validator for ssh keys. ... Fixes #100	5 years ago
Mariano Cano	10e7b81b9f	Merge branch 'master' into ssh-ca	5 years ago
max furman	2b41faa9cf	Enforce >= 2048 bit rsa keys at the provisioner layer ... * Fixes #94 * In the future this should be configurable by provisioner	5 years ago
Mariano Cano	57a529cc1a	Allow to enable the SSH CA per provisioner	5 years ago
Mariano Cano	a8f4ad1b8e	Set default SSH options if no user options are given.	5 years ago
Mariano Cano	41b97372e6	Rename function to SanitizeSSHUserPrincipal	5 years ago
Mariano Cano	53f62f871c	Set not extensions to host certificates.	5 years ago
Mariano Cano	48c98dea2a	Make SanitizeSSHPrincipal a public function.	5 years ago
Mariano Cano	f01286bb48	Add support for SSH certificates to OIDC. ... Update the interface for all the provisioners.	5 years ago
Matteo Saloni	1919cfdff3	Add option for checking group membership declared in JWT token	5 years ago
max furman	ab4d569f36	Add /revoke API with interface db backend	5 years ago
Mariano Cano	7378ed27ac	Refactor claims so they can be totally omitted if only the parent is set.	5 years ago
Mariano Cano	5d5f03f963	Set omitempty to admins and domains.	5 years ago
Mariano Cano	60880d1f0a	Add domains and check emails properly.	5 years ago
Mariano Cano	5edbce017f	Set docs for client secret as mandatory, but it can be blank.	5 years ago
Mariano Cano	2c0c0112c6	Add an optional client secret field.	5 years ago
Mariano Cano	0b4cde1ad3	Move type to the first position of the struct.	5 years ago
Mariano Cano	4ceb88fbae	Add tests for OIDC and complete some JWK tests.	5 years ago
Mariano Cano	dce3100cfb	Add missing time in validation.	5 years ago
Mariano Cano	a97ea87caa	Move options to provisioner so we can set the duration of the cert.	5 years ago
Mariano Cano	2d00cd0933	Validate audiences in the default provisioner.	5 years ago
Mariano Cano	6d395f3818	Add missing validy validator to oidc.	5 years ago
Mariano Cano	0dee841a4f	Complete first version of provisioner implementations.	5 years ago
Mariano Cano	a2a45f635b	Add initial implementation of an OIDC provisioner.	5 years ago