Commit Graph

1239 Commits (cd21f8d51f8fc34b115b538a5960717f4083f270)

Author SHA1 Message Date
Herman Slatman cd21f8d51f
Refactor OIDC verifier instantation to happen only once 8 months ago
Herman Slatman 19feae520b
Add test for ACME initialization with Wire challenges 8 months ago
Herman Slatman 14e8d47118
Skip Wire option validation and initialization if not enabled 8 months ago
Herman Slatman 8a9b1b3f79
Move Wire option validation to provisioner initialization 8 months ago
Herman Slatman 79943d2e5e
Merge branch 'wire-acme-extensions' into herman/wire-acme-improvements 8 months ago
Herman Slatman a0e4cba024
Merge branch 'master' into wire-acme-extensions 8 months ago
Panagiotis Siatras dd1ff9c15b
Implementation of the Prometheus endpoint (#1669)
Implementation of the http://{metricsAddress}/metrics Prometheus endpoint.
8 months ago
Herman Slatman a38132aa58
Fix policy check for Wire user and device identifiers 8 months ago
Herman Slatman 93ba1654ea
Fix tests to work with Wire `UserID` and `DeviceID` 8 months ago
Herman Slatman 4d4719a48f
Change URLs used in DPoP template test 8 months ago
Herman Slatman 6ee0d70bec
Add check for empty deviceID in target URI template evaluation 9 months ago
Herman Slatman 2f3819aa4e
Use key authorization from ID token and `handle` -> `preferred_username` 9 months ago
Herman Slatman f150a4f850
Remove `sync.Once` for Wire configuration validation 9 months ago
Herman Slatman 17578b57f2
Merge pull request #1673 from smallstep/herman/wire-template-transform
Add OIDC token template transformation
9 months ago
Herman Slatman 31bba6fbd8
Merge branch 'wire-acme-extensions' into herman/remove-rusty-cli 9 months ago
Herman Slatman 33be5523da
Merge branch 'master' into wire-acme-extensions 9 months ago
Herman Slatman 7520736f5b
Improve test coverage for `wireDPOP01Validate` 9 months ago
Herman Slatman 29202eff26
Add support for functions in OIDC token transformation template 9 months ago
Herman Slatman 0ad381b092
Add OIDC token template transformation 9 months ago
Herman Slatman c8160caacd
Fix test; reworded error message 9 months ago
Herman Slatman 24795720e1
Perform initialization of DPoP and OIDC options once 9 months ago
Herman Slatman 79739e5073
Change signature algorithm property name 9 months ago
Herman Slatman 1bf807add3
Use base64 encoded signing key format 9 months ago
Herman Slatman 1f5f756fce
Make Wire options more robust 9 months ago
Herman Slatman 6ef64b6ed6
Refactor the `Wire` option configuration 9 months ago
Herman Slatman b6fc0005d5
Add verification of maximum expiry time for Wire tokens 9 months ago
Herman Slatman acad227b25
Put Wire options in lower level `wire` struct 9 months ago
Herman Slatman 897688a831
Merge branch 'wire-acme-extensions' into herman/remove-rusty-cli 9 months ago
Herman Slatman 70a2f431fa
Address review remarks 9 months ago
Herman Slatman c7892e9cd3
Remove the `rusty-jwt-cli` configuration 9 months ago
Herman Slatman 8997ce1a1e
Disable `wire-dpop-01` and `wire-oidc-01` by default 9 months ago
Herman Slatman bf8c17e3ec
Remove the Wire `oidc` and `dpop` from attestation formats 9 months ago
Herman Slatman 6a98fea1f3
Fix linter issues 9 months ago
Herman Slatman e2a2e00526
Make template use `DeviceId` for now 9 months ago
Herman Slatman 776a839a42
Fix linter issues and improve error handling 9 months ago
beltram 39bf889925
feat: remove query parameters from OIDC issuerUrl so that it allows us to use it to carry the OAuth ClientId in the Challenge.target field without at the same time undermining the idToken verification which relies on a issuer (iss) claim without this query parameter 9 months ago
Stefan Berthold 5ceed08ae0
Reorganize parsing target 9 months ago
Stefan Berthold 83ba0bdc51
Replace field access by accessor functions 9 months ago
beltram 2b1223a080
simpler 9 months ago
beltram 036a144e09
add oidc target 9 months ago
beltram d32a3e23f0
wip 9 months ago
Stefan Berthold 2208b03744
avoid panic when OIDC config is not provided 9 months ago
Stefan Berthold e6dd211637
acquire DPoP signing key from provisioner 9 months ago
Stefan Berthold 8e0e35532c
Add Wire authz and challenges (OIDC+DPOP) 9 months ago
Herman Slatman 25c109e75d
Change error message for CSR validation 9 months ago
Mariano Cano b20af51f32
Upgrade go.step.sm/crypto to use go-jose/v3 10 months ago
Max d34f0f6a97
Fix linter warnings (#1634) 10 months ago
Herman Slatman f082cbc421
Denormalize provisioner name in SCEP webhook 11 months ago
Herman Slatman 9ebc8779f5
Normalize SCEP provisioner name in webhook body 11 months ago
Herman Slatman e815864ed8
Add verification of `provisionerName` in test 11 months ago