168 Commits (51d1270541f74912ea87906d5b25d31a47d5db4e)

Author	SHA1	Message	Date
Herman Slatman	19dbd02451	Add audience validation to access, dpop and id token	8 months ago
Herman Slatman	2f3819aa4e	Use key authorization from ID token and `handle` -> `preferred_username`	8 months ago
Herman Slatman	b9254744a2	Fix validations for DPoP client ID, nonce and issuer	8 months ago
Herman Slatman	0a7fe6ebe9	Comment DPoP token checks that fail e2e test (currently)	8 months ago
Herman Slatman	0f0f060149	Improve access and dpop token validation	8 months ago
Herman Slatman	99934ec9a3	Improve test coverage for `wireOIDC01Validate`	9 months ago
Herman Slatman	7520736f5b	Improve test coverage for `wireDPOP01Validate`	9 months ago
Herman Slatman	d84abac4df	Add test for `wireOIDC01Validate`	9 months ago
Herman Slatman	768a08965d	Store transformed OIDC token	9 months ago
Herman Slatman	0ad381b092	Add OIDC token template transformation	9 months ago
Herman Slatman	9bb1b24bf1	Change `kid` and `dpop` validation	9 months ago
Herman Slatman	79739e5073	Change signature algorithm property name	9 months ago
Herman Slatman	7eacb68361	Merge branch 'herman/remove-rusty-cli' into herman/wire-configuration-refactor	9 months ago
Herman Slatman	44721a7d58	Remove debug err print	9 months ago
Herman Slatman	348363abce	Add Wire `DPoP` proof claims verification	9 months ago
Herman Slatman	1bf807add3	Use base64 encoded signing key format	9 months ago
Herman Slatman	1f5f756fce	Make Wire options more robust	9 months ago
Herman Slatman	6ef64b6ed6	Refactor the `Wire` option configuration	9 months ago
Herman Slatman	b6fc0005d5	Add verification of maximum expiry time for Wire tokens	9 months ago
Herman Slatman	b964c97750	Add validation of `handle` and `token` to Wire verification	9 months ago
Herman Slatman	acad227b25	Put Wire options in lower level `wire` struct	9 months ago
Herman Slatman	cd9480ab14	Fix test for `parseAndVerifyWireAccessToken`	9 months ago
Herman Slatman	897688a831	Merge branch 'wire-acme-extensions' into herman/remove-rusty-cli	9 months ago
Herman Slatman	70a2f431fa	Address review remarks	9 months ago
Herman Slatman	033aef9f9d	Merge branch 'wire-acme-extensions' into herman/remove-rusty-cli	9 months ago
Herman Slatman	8faf26c593	Change `KeyAuth` back to old behavior (for now)	9 months ago
beltram	bf5f1201ea	fix: keyauth was not bound to the id token	9 months ago
Herman Slatman	29fa6621b1	Remove the Wire CLI invocatation	9 months ago
Herman Slatman	776a839a42	Fix linter issues and improve error handling	9 months ago
Herman Slatman	01169b2483	Make the `Target` optional in `Challenge` object ... This is a non-standard property in the ACME challenge response, so we shouldn't return it if it's not set. Also made it an optional field in the DB.	9 months ago
Herman Slatman	c1a7acc306	Make it compile with Go 1.20 again	9 months ago
beltram	90b5347887	feat: try using the new ClientId & Handle format (i.e. plain URIs)	9 months ago
beltram	d6ceebba94	feat: update the protocol by including team & handle in the client dpop token, verifying the handle in the dpop challenge	9 months ago
beltram	6ffd913e28	feat: remove custom hardcoded OIDC challenge for Google	9 months ago
beltram	2be77385f6	fix: same issue as with oidc challenge	9 months ago
beltram	ff07fdc0fd	fix: oups	9 months ago
beltram	13df461e97	fix: could not reuse a signing key otherwise it would create in accounts & orders and fail the OIDC challenge. The OIDC challenge was not retryable	9 months ago
beltram	83f76433a8	b64 encode the kid since apparently it wasn't	9 months ago
beltram	8fd0192da3	print kid for debugging	9 months ago
beltram	4d028f7813	client jwk was there the whole time	9 months ago
beltram	ed2bce9a3c	fix: access token verification in DPoP challenge. Was previously verifying 'cnf.kid' against backend key whereas it must be against client's key	9 months ago
beltram	9d5c974f44	fix: PR review	9 months ago
beltram	7b5740153d	support for oidc id token	9 months ago
beltram	f5b346ee36	i'm tired	9 months ago
beltram	613e6cae6e	wip	9 months ago
beltram	abe86002ee	try by storing everything in db	9 months ago
beltram	a32bb66e47	trying to pass access token to template	9 months ago
beltram	ff41a1193d	fix deviceId computing in dpop challenge	9 months ago
Stefan Berthold	83ba0bdc51	Replace field access by accessor functions	9 months ago
beltram	c4fb19d01f	passing expected issuer to rusty-jwt-cli	9 months ago