Commit Graph

38 Commits (4ac51dd5088f4c0d9ae2d597a5d1b0c928dbb2df)

Author SHA1 Message Date
Mariano Cano 0b5fd156e8 Add a third principal on OIDC tokens with the raw local part of the email.
For the email first.last@example.com it will create the principals
  ["firstlast", "first.last", "first.last@example.com"]

Fixes #253, #254
4 years ago
Mariano Cano c49a9d5e33 Add context parameter to all SSH methods. 4 years ago
Mariano Cano 59fc8cdd2d Fix typo in comments. 4 years ago
max furman 1cb8bb3ae1 Simplify statuscoder error generators. 4 years ago
max furman dccbdf3a90 Introduce generalized statusCoder errors and loads of ssh unit tests.
* StatusCoder api errors that have friendly user messages.
* Unit tests for SSH sign/renew/rekey/revoke across all provisioners.
4 years ago
max furman 414a94b210 Instrument getIdentity func for OIDC ssh provisioner 4 years ago
max furman f74cd04a6a Add WithGetIdentityFunc option and attr to authority
* Add Identity type to provisioner
4 years ago
max furman 29853ae016 sshpop provisioner + ssh renew | revoke | rekey first pass 4 years ago
max furman c04f1e1bd4 sshpop first pass 4 years ago
max furman 8f07ff6a39 Add kubernetes service account provisioner 5 years ago
max furman d368791606 Add x5c provisioner capabilities 5 years ago
max furman e3826dd1c3 Add ACME CA capabilities 5 years ago
Mariano Cano 10e7b81b9f Merge branch 'master' into ssh-ca 5 years ago
max furman ac234771c7 Remove unknown provisioner WARNning and leave TODO 5 years ago
max furman ca8daf5f12 Update comment and warn 5 years ago
Mariano Cano 9200f11ed8 Skip unsupported provisioners. 5 years ago
Mariano Cano 41b97372e6 Rename function to SanitizeSSHUserPrincipal 5 years ago
Mariano Cano 48c98dea2a Make SanitizeSSHPrincipal a public function. 5 years ago
Mariano Cano f01286bb48 Add support for SSH certificates to OIDC.
Update the interface for all the provisioners.
5 years ago
Mariano Cano 8f8c862c04 Fix spelling errors. 5 years ago
Mariano Cano 37f2096dff Add Stringer interface to provisioner.Type.
Add missing file.
5 years ago
Mariano Cano 0a756ce9d0 Use on GCP audiences with the format https://<ca-url>#<provisioner-type>/<provisioner-name>
Fixes smallstep/step#156
5 years ago
Mariano Cano 70196b2331 Add skeleton for the Azure provisioner.
Related to #69
5 years ago
Mariano Cano da93e40f90 Add constant for Azure type. 5 years ago
Mariano Cano 75ef5a2275 Add AWS provisioner.
Fixes #68
5 years ago
Mariano Cano f794dbeb93 Add support for GCP identity tokens. 5 years ago
max furman ab4d569f36 Add /revoke API with interface db backend 5 years ago
Mariano Cano cc8764c343 Initialize the list for backward compatibility. 5 years ago
Mariano Cano 507fd01062 Remove provisioner intermediate type. 5 years ago
Mariano Cano d92a7f2948 Rename provisioner to jwk. 5 years ago
Mariano Cano 2d00cd0933 Validate audiences in the default provisioner. 5 years ago
Mariano Cano 0dee841a4f Complete first version of provisioner implementations. 5 years ago
Mariano Cano 62dab7b6b8 Rename interface method. 5 years ago
Mariano Cano 5a8f78d9d0 Add support to collection to load the encrypted keys. 5 years ago
Mariano Cano dd0376657c Move collection to a new file. 5 years ago
Mariano Cano 4b2b6ffe32 Create the provisioner type used to englobe all different provisioners. 5 years ago
Mariano Cano fc0b2ca5a6 Revert "Move provisioners to authority/provisioner package."
This reverts commit f88d622a67.
5 years ago
Mariano Cano f88d622a67 Move provisioners to authority/provisioner package. 5 years ago