Commit Graph

4231 Commits

Author SHA1 Message Date
Herman Slatman
c6a6622892
Improve test coverage for Wire authorizations 2024-02-06 16:56:30 +01:00
Herman Slatman
ef657d7d2d
Fix OIDC target 2024-02-06 13:17:49 +01:00
Herman Slatman
e153be36d1
Replace smallstep/assert with stretchr/testify for ACME provisioner 2024-02-06 12:30:40 +01:00
Herman Slatman
37a9f36323
Merge branch 'wire-acme-extensions' into herman/wire-acme-improvements 2024-02-06 11:47:38 +01:00
Herman Slatman
92b61915b7
Merge branch 'master' into wire-acme-extensions 2024-02-06 11:43:49 +01:00
github-actions[bot]
67246925d2
Merge pull request #1706 from smallstep/dependabot/go_modules/github.com/prometheus/client_golang-1.18.0
Bump github.com/prometheus/client_golang from 1.15.1 to 1.18.0
2024-02-06 09:49:44 +01:00
github-actions[bot]
6d29e8ade8
Merge pull request #1704 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.43.0
Bump go.step.sm/crypto from 0.42.1 to 0.43.0
2024-02-05 16:14:38 +01:00
github-actions[bot]
05ccf84623
Merge pull request #1705 from smallstep/dependabot/go_modules/cloud.google.com/go/security-1.15.5
Bump cloud.google.com/go/security from 1.15.4 to 1.15.5
2024-02-05 16:14:21 +01:00
dependabot[bot]
78522c7544
Bump github.com/prometheus/client_golang from 1.15.1 to 1.18.0
Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.15.1 to 1.18.0.
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prometheus/client_golang/compare/v1.15.1...v1.18.0)

---
updated-dependencies:
- dependency-name: github.com/prometheus/client_golang
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-02-05 15:09:40 +00:00
dependabot[bot]
053d05b4a1
Bump cloud.google.com/go/security from 1.15.4 to 1.15.5
Bumps [cloud.google.com/go/security](https://github.com/googleapis/google-cloud-go) from 1.15.4 to 1.15.5.
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-cloud-go/compare/kms/v1.15.4...kms/v1.15.5)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/security
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-02-05 15:09:31 +00:00
dependabot[bot]
5209393197
Bump go.step.sm/crypto from 0.42.1 to 0.43.0
Bumps [go.step.sm/crypto](https://github.com/smallstep/crypto) from 0.42.1 to 0.43.0.
- [Release notes](https://github.com/smallstep/crypto/releases)
- [Commits](https://github.com/smallstep/crypto/compare/v0.42.1...v0.43.0)

---
updated-dependencies:
- dependency-name: go.step.sm/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-02-05 15:09:13 +00:00
Herman Slatman
e6d9208eeb
Merge branch 'wire-acme-extensions' into herman/wire-acme-improvements 2024-01-31 16:29:39 +01:00
Herman Slatman
ace27c097b
Merge branch 'master' into wire-acme-extensions 2024-01-31 16:29:23 +01:00
Herman Slatman
c5792392a7
Add basic support for OIDC provider instantiation through discovery 2024-01-31 16:27:57 +01:00
Herman Slatman
cd21f8d51f
Refactor OIDC verifier instantation to happen only once 2024-01-31 15:49:45 +01:00
Herman Slatman
19feae520b
Add test for ACME initialization with Wire challenges 2024-01-31 14:24:06 +01:00
github-actions[bot]
59ea73129a
Merge pull request #1693 from smallstep/dependabot/go_modules/github.com/hashicorp/vault/api-1.11.0
Bump github.com/hashicorp/vault/api from 1.10.0 to 1.11.0
2024-01-30 11:55:12 +01:00
dependabot[bot]
78d889a047
Bump github.com/hashicorp/vault/api from 1.10.0 to 1.11.0
Bumps [github.com/hashicorp/vault/api](https://github.com/hashicorp/vault) from 1.10.0 to 1.11.0.
- [Release notes](https://github.com/hashicorp/vault/releases)
- [Changelog](https://github.com/hashicorp/vault/blob/main/CHANGELOG.md)
- [Commits](https://github.com/hashicorp/vault/compare/v1.10.0...v1.11.0)

---
updated-dependencies:
- dependency-name: github.com/hashicorp/vault/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-30 10:50:12 +00:00
github-actions[bot]
2fcb33bd3a
Merge pull request #1695 from smallstep/dependabot/go_modules/github.com/newrelic/go-agent/v3-3.29.1
Bump github.com/newrelic/go-agent/v3 from 3.29.0 to 3.29.1
2024-01-30 11:49:02 +01:00
github-actions[bot]
fe926e9ad6
Merge pull request #1694 from smallstep/dependabot/go_modules/github.com/google/uuid-1.6.0
Bump github.com/google/uuid from 1.5.0 to 1.6.0
2024-01-30 11:48:37 +01:00
github-actions[bot]
8123d6a405
Merge pull request #1692 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.42.1
Bump go.step.sm/crypto from 0.42.0 to 0.42.1
2024-01-30 11:48:14 +01:00
dependabot[bot]
d9cf8aa685
Bump github.com/newrelic/go-agent/v3 from 3.29.0 to 3.29.1
Bumps [github.com/newrelic/go-agent/v3](https://github.com/newrelic/go-agent) from 3.29.0 to 3.29.1.
- [Release notes](https://github.com/newrelic/go-agent/releases)
- [Changelog](https://github.com/newrelic/go-agent/blob/master/CHANGELOG.md)
- [Commits](https://github.com/newrelic/go-agent/compare/v3.29.0...v3.29.1)

---
updated-dependencies:
- dependency-name: github.com/newrelic/go-agent/v3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-29 16:00:25 +00:00
dependabot[bot]
eeaabbc481
Bump github.com/google/uuid from 1.5.0 to 1.6.0
Bumps [github.com/google/uuid](https://github.com/google/uuid) from 1.5.0 to 1.6.0.
- [Release notes](https://github.com/google/uuid/releases)
- [Changelog](https://github.com/google/uuid/blob/master/CHANGELOG.md)
- [Commits](https://github.com/google/uuid/compare/v1.5.0...v1.6.0)

---
updated-dependencies:
- dependency-name: github.com/google/uuid
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-29 16:00:17 +00:00
dependabot[bot]
11220903d2
Bump go.step.sm/crypto from 0.42.0 to 0.42.1
Bumps [go.step.sm/crypto](https://github.com/smallstep/crypto) from 0.42.0 to 0.42.1.
- [Release notes](https://github.com/smallstep/crypto/releases)
- [Commits](https://github.com/smallstep/crypto/compare/v0.42.0...v0.42.1)

---
updated-dependencies:
- dependency-name: go.step.sm/crypto
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-29 16:00:00 +00:00
Herman Slatman
14e8d47118
Skip Wire option validation and initialization if not enabled 2024-01-29 16:59:55 +01:00
Herman Slatman
8a9b1b3f79
Move Wire option validation to provisioner initialization 2024-01-29 16:45:13 +01:00
Herman Slatman
79943d2e5e
Merge branch 'wire-acme-extensions' into herman/wire-acme-improvements 2024-01-29 15:09:43 +01:00
Herman Slatman
a0e4cba024
Merge branch 'master' into wire-acme-extensions 2024-01-29 15:08:41 +01:00
Panagiotis Siatras
dd1ff9c15b
Implementation of the Prometheus endpoint (#1669)
Implementation of the http://{metricsAddress}/metrics Prometheus endpoint.
2024-01-25 23:47:27 -08:00
Herman Slatman
675e418fc3
Merge branch 'master' into wire-acme-extensions 2024-01-24 20:41:07 +01:00
Herman Slatman
502334fd82
Merge pull request #1689 from smallstep/beltram/wire-acme-extensions
Use two separate Wire identifier types
2024-01-24 20:36:20 +01:00
Herman Slatman
a38132aa58
Fix policy check for Wire user and device identifiers 2024-01-24 20:28:45 +01:00
Herman Slatman
93ba1654ea
Fix tests to work with Wire UserID and DeviceID 2024-01-24 13:45:20 +01:00
Herman Slatman
4d4719a48f
Change URLs used in DPoP template test 2024-01-24 12:42:00 +01:00
beltram
9eed61a9c5 use switch statement 2024-01-23 11:42:09 +01:00
beltram
b8eb559ee9
Update acme/order.go
Co-authored-by: Herman Slatman <hslatman@users.noreply.github.com>
2024-01-23 11:39:39 +01:00
github-actions[bot]
27ea4de240
Merge pull request #1687 from smallstep/dependabot/go_modules/google.golang.org/api-0.157.0
Bump google.golang.org/api from 0.156.0 to 0.157.0
2024-01-22 20:59:05 -08:00
github-actions[bot]
b0833d7992
Merge pull request #1686 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.42.0
Bump go.step.sm/crypto from 0.41.0 to 0.42.0
2024-01-22 12:21:57 -08:00
dependabot[bot]
bcaf8a5624
Bump google.golang.org/api from 0.156.0 to 0.157.0
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.156.0 to 0.157.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.156.0...v0.157.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-22 15:45:36 +00:00
dependabot[bot]
18d3b7f61e
Bump go.step.sm/crypto from 0.41.0 to 0.42.0
Bumps [go.step.sm/crypto](https://github.com/smallstep/crypto) from 0.41.0 to 0.42.0.
- [Release notes](https://github.com/smallstep/crypto/releases)
- [Commits](https://github.com/smallstep/crypto/compare/v0.41.0...v0.42.0)

---
updated-dependencies:
- dependency-name: go.step.sm/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-22 15:44:51 +00:00
beltram
a3de984ee3 fix: use 2 separate identifiers for Wire 2024-01-19 15:58:02 +01:00
Herman Slatman
6ee0d70bec
Add check for empty deviceID in target URI template evaluation 2024-01-18 15:13:34 +01:00
Herman Slatman
7e6356ece2
Merge pull request #1670 from smallstep/herman/remove-rusty-cli
Remove `rusty-jwt-cli`
2024-01-17 23:14:20 +01:00
Herman Slatman
51d1270541
Merge pull request #1681 from smallstep/herman/fix-wire-extensions
Improve access and dpop token validation
2024-01-17 16:09:54 +01:00
Herman Slatman
19dbd02451
Add audience validation to access, dpop and id token 2024-01-17 16:04:58 +01:00
Herman Slatman
2f3819aa4e
Use key authorization from ID token and handle -> preferred_username 2024-01-17 14:13:55 +01:00
Herman Slatman
36e14de882
Improve Wire persistence errors 2024-01-17 13:02:12 +01:00
Herman Slatman
f150a4f850
Remove sync.Once for Wire configuration validation 2024-01-17 12:35:16 +01:00
Herman Slatman
f221232a80
Fix ACME Validate test for Wire DPoP challenge 2024-01-17 11:38:54 +01:00
Herman Slatman
b9254744a2
Fix validations for DPoP client ID, nonce and issuer 2024-01-17 11:33:50 +01:00