Commit Graph

62 Commits (cc26a0b394b363b02f06f9c9e0e70de150504939)

Author SHA1 Message Date
max furman fe8c8614b2 SANS backwards compat when token missing sujbect SAN 5 years ago
max furman f0683c2e0a Enable signing certificates with custom SANs
* validate against SANs in token. must be 1:1 equivalent.
5 years ago
Mariano Cano 7e95fc0e45 Strip ports on audience check.
Services might have proxies behind them so we cannot rely on them.
Fixes #17
6 years ago
Mariano Cano d6cad2a7f3 Add provisioner option to disable renewal.
Fixes smallstep/ca-component#108
6 years ago
max furman 0d9dd2d14b provisioner issuer -> name 6 years ago
max furman a4a461466b withProvisionerOID and unit test 6 years ago
max furman 283dc42904 add unit tests for MatchOne (token audience) and Authority.New 6 years ago
max furman ee7db4006a change sign + authorize authority api | add provisioners
* authorize returns []interface{}
 - operators in this list can conform to any interface the user decides
 - our implementation has a combination of certificate claim validators
 and certificate template modifiers.
* provisioners can set and enforce tls cert options
6 years ago
Mariano Cano 1c1ac1b3fb Add disableIssuedAt check functionality
Fixes #86
6 years ago
Mariano Cano 69da47a727 Set audience using the sign url. 6 years ago
max furman 0b5f6487e1 change provisioners api
* /provisioners -> /provisioners/jwk-set-by-issuer
* /provisioners now returns a list of Provisioners
6 years ago
max furman c284a2c0ab first commit 6 years ago