Commit Graph

451 Commits (6ef64b6ed63cb67870ec3b99620185d68e8ae2a8)

Author SHA1 Message Date
Herman Slatman 6ef64b6ed6
Refactor the `Wire` option configuration 6 months ago
Herman Slatman b6fc0005d5
Add verification of maximum expiry time for Wire tokens 6 months ago
Herman Slatman b964c97750
Add validation of `handle` and `token` to Wire verification 6 months ago
Herman Slatman acad227b25
Put Wire options in lower level `wire` struct 6 months ago
Herman Slatman cd9480ab14
Fix test for `parseAndVerifyWireAccessToken` 6 months ago
Herman Slatman 897688a831
Merge branch 'wire-acme-extensions' into herman/remove-rusty-cli 6 months ago
Herman Slatman ca8855767d
Fix and add more tests to Wire order identifier validation 6 months ago
Herman Slatman 70a2f431fa
Address review remarks 6 months ago
Herman Slatman de25740567
Change name of test for Wire Order 6 months ago
Herman Slatman c7892e9cd3
Remove the `rusty-jwt-cli` configuration 6 months ago
Herman Slatman a423151207
Merge branch 'wire-acme-extensions' into herman/remove-rusty-cli 6 months ago
Herman Slatman ffd887f8cc
Fix tests for ACME Wire provisioner 6 months ago
Herman Slatman 033aef9f9d
Merge branch 'wire-acme-extensions' into herman/remove-rusty-cli 6 months ago
Herman Slatman 8faf26c593
Change `KeyAuth` back to old behavior (for now) 6 months ago
beltram bf5f1201ea
fix: keyauth was not bound to the id token 6 months ago
Herman Slatman 29fa6621b1
Remove the Wire CLI invocatation 6 months ago
Herman Slatman 7a464cdb17
Use `require` to check for errors in Wire integration test 6 months ago
Herman Slatman 776a839a42
Fix linter issues and improve error handling 6 months ago
Herman Slatman f5a2f436df
Fix missing `DPoP` and `OIDC` tokens for Wire integration test 6 months ago
Herman Slatman eb9893bd21
Refactor logic for processing `WireID` identifiers in Order
Processing `WireID` identifiers, the Wire subject, and the Wire
DPoP and OIDC tokens is now conditional.
6 months ago
Herman Slatman 40668ae09e
Refactor `WireID` target processing a bit 6 months ago
Herman Slatman 01169b2483
Make the `Target` optional in `Challenge` object
This is a non-standard property in the ACME challenge response, so
we shouldn't return it if it's not set. Also made it an optional
field in the DB.
6 months ago
Herman Slatman 85309bb8ec
Fix the integration test 6 months ago
Herman Slatman fdea5e7db3
Fix tests for new ACME orders with Wire IDs 6 months ago
Herman Slatman c1a7acc306
Make it compile with Go 1.20 again 6 months ago
beltram 84e9682476
feat: change the separator between user-id & device-id in a client-id. Use '!' instead of ':' 6 months ago
beltram 90b5347887
feat: try using the new ClientId & Handle format (i.e. plain URIs) 6 months ago
beltram d6ceebba94
feat: update the protocol by including team & handle in the client dpop token, verifying the handle in the dpop challenge 6 months ago
beltram 6ffd913e28
feat: remove custom hardcoded OIDC challenge for Google 6 months ago
beltram 2be77385f6
fix: same issue as with oidc challenge 6 months ago
beltram ff07fdc0fd
fix: oups 6 months ago
beltram 13df461e97
fix: could not reuse a signing key otherwise it would create in accounts & orders and fail the OIDC challenge. The OIDC challenge was not retryable 6 months ago
beltram 83f76433a8
b64 encode the kid since apparently it wasn't 6 months ago
beltram 8fd0192da3
print kid for debugging 6 months ago
beltram 4d028f7813
client jwk was there the whole time 6 months ago
beltram ed2bce9a3c
fix: access token verification in DPoP challenge. Was previously verifying 'cnf.kid' against backend key whereas it must be against client's key 6 months ago
beltram 5fdf036a4d
fix: invalid OID for display name in CSR 6 months ago
beltram 9d5c974f44
fix: PR review 6 months ago
beltram 1b32957ff6
fix: verify custom display_name extension is present 6 months ago
Herman Slatman ab9e1ddb28
Make `MockDB` implement `acme.DB` interface again 6 months ago
beltram 7b5740153d
support for oidc id token 6 months ago
beltram f5b346ee36
i'm tired 6 months ago
beltram 03dbd91418
fix dpop token json serialization to db 6 months ago
beltram 613e6cae6e
wip 6 months ago
Herman Slatman 0b68e1bbcf
Add `GetAllOrdersByAccountID` to `MockDB` 6 months ago
beltram 8888262e45
cheat by allowing also looking up for ready orders 6 months ago
beltram 0bc530c98e
log more things 6 months ago
beltram 2e128056dc
have updateOrder also update the update joint table [order by account] 6 months ago
Herman Slatman 1a711e1b91
Add new Wire DB methods to `acme.DB` interface 6 months ago
beltram abe86002ee
try by storing everything in db 6 months ago