1230 Commits (675e418fc3f93247014fe48b0bfb44c6b8e1c3cf)

Author	SHA1	Message	Date
Herman Slatman	a38132aa58	Fix policy check for Wire user and device identifiers	4 months ago
Herman Slatman	93ba1654ea	Fix tests to work with Wire `UserID` and `DeviceID`	4 months ago
Herman Slatman	2f3819aa4e	Use key authorization from ID token and `handle` -> `preferred_username`	5 months ago
Herman Slatman	f150a4f850	Remove `sync.Once` for Wire configuration validation	5 months ago
Herman Slatman	17578b57f2	Merge pull request #1673 from smallstep/herman/wire-template-transform ... Add OIDC token template transformation	5 months ago
Herman Slatman	31bba6fbd8	Merge branch 'wire-acme-extensions' into herman/remove-rusty-cli	5 months ago
Herman Slatman	33be5523da	Merge branch 'master' into wire-acme-extensions	5 months ago
Herman Slatman	7520736f5b	Improve test coverage for `wireDPOP01Validate`	5 months ago
Herman Slatman	29202eff26	Add support for functions in OIDC token transformation template	5 months ago
Herman Slatman	0ad381b092	Add OIDC token template transformation	5 months ago
Herman Slatman	c8160caacd	Fix test; reworded error message	5 months ago
Herman Slatman	24795720e1	Perform initialization of DPoP and OIDC options once	5 months ago
Herman Slatman	79739e5073	Change signature algorithm property name	5 months ago
Herman Slatman	1bf807add3	Use base64 encoded signing key format	5 months ago
Herman Slatman	1f5f756fce	Make Wire options more robust	5 months ago
Herman Slatman	6ef64b6ed6	Refactor the `Wire` option configuration	5 months ago
Herman Slatman	b6fc0005d5	Add verification of maximum expiry time for Wire tokens	5 months ago
Herman Slatman	acad227b25	Put Wire options in lower level `wire` struct	5 months ago
Herman Slatman	897688a831	Merge branch 'wire-acme-extensions' into herman/remove-rusty-cli	5 months ago
Herman Slatman	70a2f431fa	Address review remarks	5 months ago
Herman Slatman	c7892e9cd3	Remove the `rusty-jwt-cli` configuration	5 months ago
Herman Slatman	8997ce1a1e	Disable `wire-dpop-01` and `wire-oidc-01` by default	5 months ago
Herman Slatman	bf8c17e3ec	Remove the Wire `oidc` and `dpop` from attestation formats	5 months ago
Herman Slatman	6a98fea1f3	Fix linter issues	5 months ago
Herman Slatman	e2a2e00526	Make template use `DeviceId` for now	5 months ago
Herman Slatman	776a839a42	Fix linter issues and improve error handling	5 months ago
beltram	39bf889925	feat: remove query parameters from OIDC issuerUrl so that it allows us to use it to carry the OAuth ClientId in the Challenge.target field without at the same time undermining the idToken verification which relies on a issuer (iss) claim without this query parameter	5 months ago
Stefan Berthold	5ceed08ae0	Reorganize parsing target	5 months ago
Stefan Berthold	83ba0bdc51	Replace field access by accessor functions	5 months ago
beltram	2b1223a080	simpler	5 months ago
beltram	036a144e09	add oidc target	5 months ago
beltram	d32a3e23f0	wip	5 months ago
Stefan Berthold	2208b03744	avoid panic when OIDC config is not provided	5 months ago
Stefan Berthold	e6dd211637	acquire DPoP signing key from provisioner	5 months ago
Stefan Berthold	8e0e35532c	Add Wire authz and challenges (OIDC+DPOP)	5 months ago
Herman Slatman	25c109e75d	Change error message for CSR validation	5 months ago
Mariano Cano	b20af51f32	Upgrade go.step.sm/crypto to use go-jose/v3	6 months ago
Max	d34f0f6a97	Fix linter warnings (#1634)	6 months ago
Herman Slatman	f082cbc421	Denormalize provisioner name in SCEP webhook	7 months ago
Herman Slatman	9ebc8779f5	Normalize SCEP provisioner name in webhook body	7 months ago
Herman Slatman	e815864ed8	Add verification of `provisionerName` in test	7 months ago
Herman Slatman	de45d66cdb	Add `provisionerName` to webhook request body	7 months ago
Mariano Cano	49045a1150	Change CommonName validator in JWK ... This commit changes the common name validator in the JWK provisioner to accept either the token subject or any of the sans in the token.	7 months ago
Max	9f84f7ce35	Allow for identity certificate signing (in sshSign) by skipping validators (#1572) ... - skip urisValidator for identity certificate signing. Implemented by building the validator with the context in a hacky way.	8 months ago
Mariano Cano	52baf52f84	Change scep password type to string ... This commit changes the type of the decrypter key password to string to be consistent with other passwords in the ca.json	8 months ago
Herman Slatman	c0fbace882	Address review remarks	8 months ago
Herman Slatman	4dc5a688fd	Set SCEP authority options once	8 months ago
Herman Slatman	15c46ebbaa	Switch logic for SCEP initialization around	8 months ago
Herman Slatman	f1da256ca4	Change SCEP authority initialization	8 months ago
Herman Slatman	4554f86f16	Make SCEP decrypter properties use `omitempty`	8 months ago