Commit Graph

1998 Commits (4aa529605d82822e6b4fbc23bac22864e5a8b195)
 

Author SHA1 Message Date
Mariano Cano 5a6517ca5b
Merge pull request #561 from LecrisUT/master
Check admin privileges from group membership
3 years ago
Cristian Le d7eec869c2 Fix the previous tests 3 years ago
Cristian Le c2d30f7260 gofmt everything 3 years ago
Cristian Le f38a72a62b Leftover from previous commit 3 years ago
Cristian Le 1d2445e1d8 Removed the variadic username
Could be useful later on, but for the current PR changes should be minimized
3 years ago
Cristian Le 9e00b82bdf Revert `oidc_test.go`
Moving the `preferred_username` to a separate PR
3 years ago
Cristian Le cd67d64eec Merge remote-tracking branch 'origin/master' 3 years ago
Cristian Le decf0fc8ce Revert using preferred_username
It might present a security issue if the users can change this value for themselves. Needs further investigation
3 years ago
Cristian Le 21732f213b Fix shadow issue in CI 3 years ago
Mariano Cano 08e5ec6ad1 Fix IsAdminGroup comment. 3 years ago
Mariano Cano 46c1dc80fb Use map[string]struct{} instead of map[string]bool 3 years ago
Mariano Cano aafac179a5 Add test for oidc with preferred usernames. 3 years ago
Cristian Le f730c0bec4 Sanitize usernames 3 years ago
Cristian Le 48666792c7 Draft: adding usernames to GetIdentityFunc 3 years ago
Cristian Le 79eec83f3e Rename and reformat to PreferredUsername 3 years ago
Cristian Le 09a21fef26 Implement #550
- Read `preferred_username` from token
- Add `preferred_username` to the default Usernames
- Check the `admin` array for admin groups that the user might belong to
3 years ago
Cristian Le bb1e051b27 Revert using preferred_username
It might present a security issue if the users can change this value for themselves. Needs further investigation
3 years ago
Max 1ee288f9fb
Merge pull request #565 from smallstep/max/load-init
Init config on load | Add wrapper for cli
3 years ago
max furman 8c709fe3c2 Init config on load | Add wrapper for cli 3 years ago
max furman 9a156d2210 Remove distribution doc. 3 years ago
max furman bc4bf224e8 [action] Add needs-triage labeler 3 years ago
Cristian Le e5b206c1de Fix shadow issue in CI 3 years ago
Carl Tashian 0295280c20 Merge branch 'master' of https://github.com/smallstep/certificates 3 years ago
Carl Tashian 25325b6970 Revert systemd renewer unit change that was incorrect
This reverts commit 75f24a103a.
3 years ago
Mariano Cano 484b30d0a1 Fix IsAdminGroup comment. 3 years ago
Mariano Cano 9cc410b308 Use map[string]struct{} instead of map[string]bool 3 years ago
Mariano Cano c8eb771a8e Add test for oidc with preferred usernames. 3 years ago
Cristian Le 8b1ab30212 Sanitize usernames 3 years ago
Cristian Le bf364f0a5f Draft: adding usernames to GetIdentityFunc 3 years ago
Cristian Le 861ef80e0d Rename and reformat to PreferredUsername 3 years ago
Mariano Cano b9b1ac04d1
Merge pull request #562 from smallstep/renew-db-interface
Renew DB interface and Rekey
3 years ago
Mariano Cano 5846314f88 Add missing Rekey method to the ca.Client
Fixes #315
3 years ago
Mariano Cano 2cbaee9c1d Allow to use an alternative interface to store renewed certs.
This can be useful to know if a certificate has been renewed and
link one certificate with the 'parent'.
3 years ago
Herman Slatman 68d5f6d0d2
Merge branch 'master' into hs/scep 3 years ago
Cristian Le 55fbcfb3be Implement #550
- Read `preferred_username` from token
- Add `preferred_username` to the default Usernames
- Check the `admin` array for admin groups that the user might belong to
3 years ago
Mariano Cano 582d6b161d
Merge pull request #531 from smallstep/tls-tunnel
Add experimental support for a TLS over TLS tunnel.
3 years ago
Mariano Cano 1328aa3e47 Fix review comments. 3 years ago
Mariano Cano d3c6bcbcce
Merge pull request #553 from smallstep/store-chain
Add extension of db.AuthDB to store the fullchain
3 years ago
Mariano Cano e6833ecee3 Add extension of db.AuthDB to store the fullchain.
Add a temporary solution to allow an extension of an db.AuthDB
interface that logs the fullchain of certificates instead of just
the leaf.
3 years ago
Mariano Cano 50b9aaec57 Add new identity tests. 3 years ago
Mariano Cano e414d0c8ea Fix unit tests. 3 years ago
Mariano Cano c5234e9c61 Refactor tls tunnel connections.
New method will use an identity-like file with the configuration
used to create the (m)TLS connection to the tunnel.
3 years ago
Mariano Cano 180b5c3e3c Fix typo. 3 years ago
Mariano Cano e75a9409a5 Add experimental support for a TLS over TLS tunnel. 3 years ago
Carl Tashian 75f24a103a Sync cert renewer service with docs 3 years ago
Carl Tashian e50c5bc4b1 Remove pronoun 3 years ago
Mariano Cano 3769a2760a
Merge pull request #543 from smallstep/no-nonce-on-get
Remove the creation on nonce on get acme directory
3 years ago
Herman Slatman 2336936b5c
Fix typo 3 years ago
Herman Slatman 9787728fbd
Mask challenge password after it has been read 3 years ago
Herman Slatman 0487686f69
Merge branch 'master' into hs/scep 3 years ago