smallstep-certificates

Commit Graph

Author	SHA1	Message	Date
max furman	81db527f12	NoopDB -> SimpleDB	5 years ago
max furman	b73fe8c157	Add used OTT to DB during authToken step	5 years ago
max furman	9977eff153	bump cli dep and fix text error msg	5 years ago
max furman	ab4d569f36	Add /revoke API with interface db backend	5 years ago
Mariano Cano	1812c0619a	Update go-jose to 2.3.0. This is a dependency for smallstep/cli#105, it will be solved once square/go-jose#224 gets merged	5 years ago
Mariano Cano	8a05cdde52	Add audience in the error v2	5 years ago
Mariano Cano	f8fba4df6b	Add audience in error.	5 years ago
Mariano Cano	23e6de57a2	Address comments in code review.	5 years ago
Mariano Cano	07cdc1021c	Use OIDC nonce as the reuse key.	5 years ago
Mariano Cano	ef4d809ee6	Move matchesAudience and stripPort tests to provisioner package.	5 years ago
Mariano Cano	af9688c419	Fix some testing errors.	5 years ago
Mariano Cano	2d00cd0933	Validate audiences in the default provisioner.	5 years ago
Mariano Cano	57b705f6cf	Use provisioner sign options.	5 years ago
Mariano Cano	602a42813c	Re-enable replay protection for JWK provisioner.	5 years ago
Mariano Cano	ab1cca03d7	Use new provisioners in authorize methods.	5 years ago
max furman	3415a1fef8	move SplitSANs to cli	5 years ago
max furman	6937bfea7b	claims.SANS -> claims.SANs	5 years ago
max furman	93f39c64a0	backwards compat only when SANS empty	5 years ago
max furman	fe8c8614b2	SANS backwards compat when token missing sujbect SAN	5 years ago
max furman	f0683c2e0a	Enable signing certificates with custom SANs * validate against SANs in token. must be 1:1 equivalent.	5 years ago
Mariano Cano	7e95fc0e45	Strip ports on audience check. Services might have proxies behind them so we cannot rely on them. Fixes #17	6 years ago
Mariano Cano	d6cad2a7f3	Add provisioner option to disable renewal. Fixes smallstep/ca-component#108	6 years ago
max furman	0d9dd2d14b	provisioner issuer -> name	6 years ago
max furman	a4a461466b	withProvisionerOID and unit test	6 years ago
max furman	283dc42904	add unit tests for MatchOne (token audience) and Authority.New	6 years ago
max furman	ee7db4006a	change sign + authorize authority api \| add provisioners * authorize returns []interface{} - operators in this list can conform to any interface the user decides - our implementation has a combination of certificate claim validators and certificate template modifiers. * provisioners can set and enforce tls cert options	6 years ago
Mariano Cano	1c1ac1b3fb	Add disableIssuedAt check functionality Fixes #86	6 years ago
Mariano Cano	69da47a727	Set audience using the sign url.	6 years ago
max furman	0b5f6487e1	change provisioners api * /provisioners -> /provisioners/jwk-set-by-issuer * /provisioners now returns a list of Provisioners	6 years ago
max furman	c284a2c0ab	first commit	6 years ago

30 Commits (81db527f12f15e09229fa84dc7c27ec71c24114f)