Commit Graph

70 Commits (c7f226bcec732dda892d8755e1078559f7a0a69d)

Author SHA1 Message Date
Mariano Cano af9688c419 Fix some testing errors. 5 years ago
Mariano Cano 2d00cd0933 Validate audiences in the default provisioner. 5 years ago
Mariano Cano 57b705f6cf Use provisioner sign options. 5 years ago
Mariano Cano 602a42813c Re-enable replay protection for JWK provisioner. 5 years ago
Mariano Cano ab1cca03d7 Use new provisioners in authorize methods. 5 years ago
max furman 3415a1fef8 move SplitSANs to cli 5 years ago
max furman 6937bfea7b claims.SANS -> claims.SANs 5 years ago
max furman 93f39c64a0 backwards compat only when SANS empty 5 years ago
max furman fe8c8614b2 SANS backwards compat when token missing sujbect SAN 5 years ago
max furman f0683c2e0a Enable signing certificates with custom SANs
* validate against SANs in token. must be 1:1 equivalent.
5 years ago
Mariano Cano 7e95fc0e45 Strip ports on audience check.
Services might have proxies behind them so we cannot rely on them.
Fixes #17
6 years ago
Mariano Cano d6cad2a7f3 Add provisioner option to disable renewal.
Fixes smallstep/ca-component#108
6 years ago
max furman 0d9dd2d14b provisioner issuer -> name 6 years ago
max furman a4a461466b withProvisionerOID and unit test 6 years ago
max furman 283dc42904 add unit tests for MatchOne (token audience) and Authority.New 6 years ago
max furman ee7db4006a change sign + authorize authority api | add provisioners
* authorize returns []interface{}
 - operators in this list can conform to any interface the user decides
 - our implementation has a combination of certificate claim validators
 and certificate template modifiers.
* provisioners can set and enforce tls cert options
6 years ago
Mariano Cano 1c1ac1b3fb Add disableIssuedAt check functionality
Fixes #86
6 years ago
Mariano Cano 69da47a727 Set audience using the sign url. 6 years ago
max furman 0b5f6487e1 change provisioners api
* /provisioners -> /provisioners/jwk-set-by-issuer
* /provisioners now returns a list of Provisioners
6 years ago
max furman c284a2c0ab first commit 6 years ago