415 Commits

Author	SHA1	Message	Date
beltram	5fdf036a4d	fix: invalid OID for display name in CSR	2024-01-08 22:03:03 +01:00
beltram	9d5c974f44	fix: PR review	2024-01-08 22:02:48 +01:00
beltram	1b32957ff6	fix: verify custom display_name extension is present	2024-01-08 22:02:16 +01:00
Herman Slatman	ab9e1ddb28	Make MockDB implement acme.DB interface again	2024-01-08 22:00:50 +01:00
beltram	7b5740153d	support for oidc id token	2024-01-08 22:00:29 +01:00
beltram	f5b346ee36	i'm tired	2024-01-08 21:53:08 +01:00
beltram	03dbd91418	fix dpop token json serialization to db	2024-01-08 21:52:28 +01:00
beltram	613e6cae6e	wip	2024-01-08 21:50:49 +01:00
Herman Slatman	0b68e1bbcf	Add GetAllOrdersByAccountID to MockDB	2024-01-08 21:44:10 +01:00
beltram	8888262e45	cheat by allowing also looking up for ready orders	2024-01-08 21:43:43 +01:00
beltram	0bc530c98e	log more things	2024-01-08 21:36:50 +01:00
beltram	2e128056dc	have updateOrder also update the update joint table [order by account]	2024-01-08 21:35:54 +01:00
Herman Slatman	1a711e1b91	Add new Wire DB methods to acme.DB interface	2024-01-08 21:34:01 +01:00
beltram	abe86002ee	try by storing everything in db	2024-01-08 21:33:53 +01:00
beltram	76dfcb00e4	try silencing template data for dichotomies	2024-01-08 21:23:09 +01:00
beltram	a32bb66e47	trying to pass access token to template	2024-01-08 21:22:50 +01:00
beltram	ff41a1193d	fix deviceId computing in dpop challenge	2024-01-08 21:21:01 +01:00
Stefan Berthold	5ceed08ae0	Reorganize parsing target	2024-01-08 21:19:54 +01:00
Stefan Berthold	83ba0bdc51	Replace field access by accessor functions	2024-01-08 21:17:57 +01:00
beltram	c4fb19d01f	passing expected issuer to rusty-jwt-cli	2024-01-08 21:15:30 +01:00
beltram	2b1223a080	simpler	2024-01-08 21:14:17 +01:00
beltram	036a144e09	add oidc target	2024-01-08 21:10:46 +01:00
beltram	97002040a5	fix: challenge target field was not mapped to db entity	2024-01-08 21:09:07 +01:00
beltram	d32a3e23f0	wip	2024-01-08 21:08:34 +01:00
beltram	b58de27675	fix: do not convert URIs to lowercase for comparison purpose	2024-01-08 21:05:41 +01:00
beltram	7c9f8020d5	fix: add URI prefix to handle	2024-01-08 21:04:23 +01:00
beltram	680b6ea08f	adapt google demo for wire's special handle format "{firstname}_wire"	2024-01-08 21:03:54 +01:00
beltram	a97991aa83	infer domain from google email address	2024-01-08 21:01:50 +01:00
beltram	49ad2d9967	fix google id token matching in oidc challenge	2024-01-08 21:01:30 +01:00
beltram	a49966f4c9	try using google oidc for demo purpose	2024-01-08 20:59:09 +01:00
beltram	3576cc30c8	forward displayName in CSR with custom OID	2024-01-08 20:58:32 +01:00
beltram	4172b69816	remove displayName validation, potentially harmful	2024-01-08 20:57:35 +01:00
beltram	79501df5a2	fix: exclude displayName from SAN DNS	2024-01-08 20:56:39 +01:00
beltram	3f474f77d4	feat: change from impp prefix to just im	2024-01-08 20:55:32 +01:00
beltram	b6ec4422b4	feat: adapt to dex and pass the 'keyauth' in payload instead of in id_token. Also have a different mapping for id_token claims name	2024-01-08 20:54:54 +01:00
Stefan Berthold	af31a167c6	skip empty entries for uniqueSortedLowerNames	2024-01-08 20:54:17 +01:00
beltram	01ef526d08	change uri prefix to impp:wireapp=	2024-01-08 20:53:10 +01:00
beltram	cc5fd0a6a5	fix san validation	2024-01-08 20:52:52 +01:00
beltram	b3dd169190	cleanup my mess	2024-01-08 20:52:32 +01:00
beltram	3eb0ff43c0	fix orderNames size	2024-01-08 20:47:51 +01:00
beltram	c41a99ad75	(finalize) have both display name & domain in SANs	2024-01-08 20:47:28 +01:00
beltram	5ba0ab3e44	fix csr domain validation in finalize	2024-01-08 20:46:48 +01:00
beltram	73ec6c89d0	fix csr org validation in finalize	2024-01-08 20:46:07 +01:00
beltram	ca01c74333	avoid manipulating the key PEM format and take a plain PEM key as input	2024-01-08 20:42:52 +01:00
beltram	74ddad69dc	fix: challenge is '.token' and not '.id'	2024-01-08 20:39:27 +01:00
beltram	83f6be1f58	print oidc options	2024-01-08 20:38:26 +01:00
beltram	1fe61bee7b	better observability	2024-01-08 20:36:37 +01:00
Stefan Berthold	e6dd211637	acquire DPoP signing key from provisioner	2024-01-08 20:34:58 +01:00
beltram	227e932624	use json struct for challenge request payload otherwise it's a hell to craft from client side	2024-01-08 20:33:46 +01:00
Stefan Berthold	5ca744567c	simplify OIDC verification	2024-01-08 20:32:44 +01:00