75 Commits (364566bb01477a05a405561329ea5822ee0bdfa0)

Author	SHA1	Message	Date
Herman Slatman	5d7e53303b	Add validation of `name` in DPoP token	5 months ago
Herman Slatman	19dbd02451	Add audience validation to access, dpop and id token	6 months ago
Herman Slatman	2f3819aa4e	Use key authorization from ID token and `handle` -> `preferred_username`	6 months ago
Herman Slatman	f221232a80	Fix ACME `Validate` test for Wire DPoP challenge	6 months ago
Herman Slatman	0f0f060149	Improve access and dpop token validation	6 months ago
Herman Slatman	7520736f5b	Improve test coverage for `wireDPOP01Validate`	6 months ago
Herman Slatman	a24b2a5c84	Add test case for `validateWireOIDCClaims`	6 months ago
Herman Slatman	8f129a6ced	Add test for `wireDPOP01Validate`	6 months ago
Herman Slatman	d84abac4df	Add test for `wireOIDC01Validate`	6 months ago
Herman Slatman	d5b0d92bce	Fix Wire ID token test comment	6 months ago
Herman Slatman	0ad381b092	Add OIDC token template transformation	6 months ago
Herman Slatman	2c27e865cb	Fix linting issue	6 months ago
Herman Slatman	9bb1b24bf1	Change `kid` and `dpop` validation	6 months ago
Herman Slatman	24795720e1	Perform initialization of DPoP and OIDC options once	6 months ago
Herman Slatman	79739e5073	Change signature algorithm property name	6 months ago
Herman Slatman	7eacb68361	Merge branch 'herman/remove-rusty-cli' into herman/wire-configuration-refactor	6 months ago
Herman Slatman	348363abce	Add Wire `DPoP` proof claims verification	6 months ago
Herman Slatman	1bf807add3	Use base64 encoded signing key format	6 months ago
Herman Slatman	b964c97750	Add validation of `handle` and `token` to Wire verification	6 months ago
Herman Slatman	cd9480ab14	Fix test for `parseAndVerifyWireAccessToken`	6 months ago
Herman Slatman	897688a831	Merge branch 'wire-acme-extensions' into herman/remove-rusty-cli	6 months ago
Herman Slatman	29fa6621b1	Remove the Wire CLI invocatation	6 months ago
Mariano Cano	b20af51f32	Upgrade go.step.sm/crypto to use go-jose/v3	7 months ago
Mariano Cano	d8eeebfd51	Fix error string in tests ... This commit fixes a test checking an error string from an external dependency.	11 months ago
Herman Slatman	c952e9fc9d	Use `NewDetailedError` instead	11 months ago
Herman Slatman	f3c24fe875	Change how multiple identifiers are printed in errors	11 months ago
Herman Slatman	9a52675865	Return descriptive error when using unsupported format	11 months ago
Herman Slatman	0d3338ff3a	Return consistent ACME error types for specific cases	11 months ago
Herman Slatman	dd9bf1e915	Add error details for the `step` format	11 months ago
Herman Slatman	9cbbd1d575	Add error details to ACME `tpm` format validation errors	11 months ago
max furman	8b256f0351	address linter warning for go 1.19	1 year ago
Herman Slatman	d9aa2c110f	Increase test coverage for AK certificate properties	1 year ago
Mariano Cano	6ba20209c2	Verify CSR key fingerprint with attestation certificate key ... This commit makes sure that the attestation certificate key matches the key used on the CSR on an ACME device attestation flow.	1 year ago
Herman Slatman	3a6fc5e0b4	Remove dependency on `smallstep/assert` in ACME challenge tests	1 year ago
Herman Slatman	0f9128c873	Fix linting issue and order of test SUT	1 year ago
Herman Slatman	2ab9beb7ed	Add tests for `deviceAttest01Validate`	1 year ago
Mariano Cano	e27c6c529b	Add support for custom acme ports ... This change adds the flags --acme-http-port, --acme-tls-port, that combined with --insecure can be used to set custom ports for ACME http-01 and tls-alpn-01 challenges. These flags should only be used for testing purposes. Fixes #1015	2 years ago
Mariano Cano	a7e597450a	Update acme/challenge_test.go ... Co-authored-by: Herman Slatman <hslatman@users.noreply.github.com>	2 years ago
Mariano Cano	7a78c76199	Add test simulating YubiKey v5.2.4 ... There are YubiKeys v5.2.4 where the attestation intermediate (f9) does not have a basic constraint extension, so that certificate is not marked as a CA. The test and CA in this commit imitates that use case. Currently the test case returns an error as we don't support it. But if we change the verification to support this use case, the test should change accordingly.	2 years ago
Mariano Cano	21666ba887	Revert "Set timestamp when marking an acme challenge invalid" ... This reverts commit 5f130895f3.	2 years ago
Mariano Cano	5f130895f3	Set timestamp when marking an acme challenge invalid	2 years ago
max furman	ab0d2503ae	Standardize linting file and fix or ignore lots of linting errors	2 years ago
Mariano Cano	498549c95c	Extract common function used in tests	2 years ago
Mariano Cano	829530ae90	Fix linter errors	2 years ago
Mariano Cano	6b73a020e3	Add unit tests for apple and step attestations	2 years ago
Brandon Weeks	aacd6f4cc6	Add device-attest-01 challenge type	2 years ago
Mariano Cano	2ab7dc6f9d	Fix acme tests.	2 years ago
Herman Slatman	479c6d2bf5	Fix ACME IPv6 HTTP-01 challenges ... Fixes #890	2 years ago
Herman Slatman	e7a988b2cd	Pin golangci-lint to v1.43.0 and fix issues	3 years ago
max furman	933b40a02a	Introduce gocritic linter and address warnings	3 years ago