4188 Commits (51d1270541f74912ea87906d5b25d31a47d5db4e)

 

All Branches   

Search

Author	SHA1	Message	Date
Herman Slatman	70a2f431fa	Address review remarks	5 months ago
Herman Slatman	f1c54d6852	Merge pull request #1665 from smallstep/herman/fix-error-msg-csr-validation ... Change error message for CSR validation	5 months ago
Herman Slatman	de25740567	Change name of test for Wire Order	5 months ago
Herman Slatman	c7892e9cd3	Remove the `rusty-jwt-cli` configuration	5 months ago
Herman Slatman	a423151207	Merge branch 'wire-acme-extensions' into herman/remove-rusty-cli	5 months ago
Herman Slatman	ffd887f8cc	Fix tests for ACME Wire provisioner	5 months ago
Herman Slatman	8997ce1a1e	Disable `wire-dpop-01` and `wire-oidc-01` by default	5 months ago
Herman Slatman	bf8c17e3ec	Remove the Wire `oidc` and `dpop` from attestation formats	5 months ago
Herman Slatman	033aef9f9d	Merge branch 'wire-acme-extensions' into herman/remove-rusty-cli	5 months ago
Herman Slatman	6a98fea1f3	Fix linter issues	5 months ago
Herman Slatman	8faf26c593	Change `KeyAuth` back to old behavior (for now)	5 months ago
beltram	bf5f1201ea	fix: keyauth was not bound to the id token	5 months ago
Herman Slatman	e2a2e00526	Make template use `DeviceId` for now	5 months ago
Herman Slatman	29fa6621b1	Remove the Wire CLI invocatation	5 months ago
Herman Slatman	7a464cdb17	Use `require` to check for errors in Wire integration test	5 months ago
Herman Slatman	776a839a42	Fix linter issues and improve error handling	5 months ago
Herman Slatman	f5a2f436df	Fix missing `DPoP` and `OIDC` tokens for Wire integration test	5 months ago
Herman Slatman	eb9893bd21	Refactor logic for processing `WireID` identifiers in Order ... Processing `WireID` identifiers, the Wire subject, and the Wire DPoP and OIDC tokens is now conditional.	5 months ago
Herman Slatman	40668ae09e	Refactor `WireID` target processing a bit	5 months ago
Herman Slatman	01169b2483	Make the `Target` optional in `Challenge` object ... This is a non-standard property in the ACME challenge response, so we shouldn't return it if it's not set. Also made it an optional field in the DB.	5 months ago
Herman Slatman	85309bb8ec	Fix the integration test	5 months ago
Herman Slatman	fdea5e7db3	Fix tests for new ACME orders with Wire IDs	5 months ago
Herman Slatman	c1a7acc306	Make it compile with Go 1.20 again	5 months ago
beltram	84e9682476	feat: change the separator between user-id & device-id in a client-id. Use '!' instead of ':'	5 months ago
beltram	90b5347887	feat: try using the new ClientId & Handle format (i.e. plain URIs)	5 months ago
beltram	39bf889925	feat: remove query parameters from OIDC issuerUrl so that it allows us to use it to carry the OAuth ClientId in the Challenge.target field without at the same time undermining the idToken verification which relies on a issuer (iss) claim without this query parameter	5 months ago
beltram	d6ceebba94	feat: update the protocol by including team & handle in the client dpop token, verifying the handle in the dpop challenge	5 months ago
beltram	6ffd913e28	feat: remove custom hardcoded OIDC challenge for Google	5 months ago
beltram	2be77385f6	fix: same issue as with oidc challenge	5 months ago
beltram	ff07fdc0fd	fix: oups	5 months ago
beltram	13df461e97	fix: could not reuse a signing key otherwise it would create in accounts & orders and fail the OIDC challenge. The OIDC challenge was not retryable	5 months ago
beltram	83f76433a8	b64 encode the kid since apparently it wasn't	5 months ago
beltram	8fd0192da3	print kid for debugging	5 months ago
beltram	4d028f7813	client jwk was there the whole time	5 months ago
beltram	ed2bce9a3c	fix: access token verification in DPoP challenge. Was previously verifying 'cnf.kid' against backend key whereas it must be against client's key	5 months ago
beltram	5fdf036a4d	fix: invalid OID for display name in CSR	5 months ago
beltram	9d5c974f44	fix: PR review	5 months ago
beltram	1b32957ff6	fix: verify custom display_name extension is present	5 months ago
Herman Slatman	ab9e1ddb28	Make `MockDB` implement `acme.DB` interface again	5 months ago
beltram	7b5740153d	support for oidc id token	5 months ago
beltram	f5b346ee36	i'm tired	5 months ago
beltram	03dbd91418	fix dpop token json serialization to db	5 months ago
beltram	613e6cae6e	wip	5 months ago
Herman Slatman	0b68e1bbcf	Add `GetAllOrdersByAccountID` to `MockDB`	5 months ago
beltram	8888262e45	cheat by allowing also looking up for ready orders	5 months ago
beltram	0bc530c98e	log more things	5 months ago
beltram	2e128056dc	have updateOrder also update the update joint table [order by account]	5 months ago
Herman Slatman	1a711e1b91	Add new Wire DB methods to `acme.DB` interface	5 months ago
beltram	abe86002ee	try by storing everything in db	5 months ago
beltram	76dfcb00e4	try silencing template data for dichotomies	5 months ago