Commit Graph

4209 Commits (cd21f8d51f8fc34b115b538a5960717f4083f270)
 

Author SHA1 Message Date
beltram ff07fdc0fd
fix: oups 6 months ago
beltram 13df461e97
fix: could not reuse a signing key otherwise it would create in accounts & orders and fail the OIDC challenge. The OIDC challenge was not retryable 6 months ago
beltram 83f76433a8
b64 encode the kid since apparently it wasn't 6 months ago
beltram 8fd0192da3
print kid for debugging 6 months ago
beltram 4d028f7813
client jwk was there the whole time 6 months ago
beltram ed2bce9a3c
fix: access token verification in DPoP challenge. Was previously verifying 'cnf.kid' against backend key whereas it must be against client's key 6 months ago
beltram 5fdf036a4d
fix: invalid OID for display name in CSR 6 months ago
beltram 9d5c974f44
fix: PR review 6 months ago
beltram 1b32957ff6
fix: verify custom display_name extension is present 6 months ago
Herman Slatman ab9e1ddb28
Make `MockDB` implement `acme.DB` interface again 6 months ago
beltram 7b5740153d
support for oidc id token 6 months ago
beltram f5b346ee36
i'm tired 6 months ago
beltram 03dbd91418
fix dpop token json serialization to db 6 months ago
beltram 613e6cae6e
wip 6 months ago
Herman Slatman 0b68e1bbcf
Add `GetAllOrdersByAccountID` to `MockDB` 6 months ago
beltram 8888262e45
cheat by allowing also looking up for ready orders 6 months ago
beltram 0bc530c98e
log more things 6 months ago
beltram 2e128056dc
have updateOrder also update the update joint table [order by account] 6 months ago
Herman Slatman 1a711e1b91
Add new Wire DB methods to `acme.DB` interface 6 months ago
beltram abe86002ee
try by storing everything in db 6 months ago
beltram 76dfcb00e4
try silencing template data for dichotomies 6 months ago
beltram a32bb66e47
trying to pass access token to template 6 months ago
beltram ff41a1193d
fix deviceId computing in dpop challenge 6 months ago
Stefan Berthold 5ceed08ae0
Reorganize parsing target 6 months ago
Stefan Berthold 83ba0bdc51
Replace field access by accessor functions 6 months ago
beltram c4fb19d01f
passing expected issuer to rusty-jwt-cli 6 months ago
beltram 2b1223a080
simpler 6 months ago
beltram 036a144e09
add oidc target 6 months ago
beltram 97002040a5
fix: challenge target field was not mapped to db entity 6 months ago
beltram d32a3e23f0
wip 6 months ago
beltram b58de27675
fix: do not convert URIs to lowercase for comparison purpose 6 months ago
beltram 7c9f8020d5
fix: add URI prefix to handle 6 months ago
beltram 680b6ea08f
adapt google demo for wire's special handle format "{firstname}_wire" 6 months ago
beltram a97991aa83
infer domain from google email address 6 months ago
beltram 49ad2d9967
fix google id token matching in oidc challenge 6 months ago
beltram a49966f4c9
try using google oidc for demo purpose 6 months ago
beltram 3576cc30c8
forward displayName in CSR with custom OID 6 months ago
beltram 4172b69816
remove displayName validation, potentially harmful 6 months ago
beltram 79501df5a2
fix: exclude displayName from SAN DNS 6 months ago
beltram 3f474f77d4
feat: change from impp prefix to just im 6 months ago
beltram b6ec4422b4
feat: adapt to dex and pass the 'keyauth' in payload instead of in id_token. Also have a different mapping for id_token claims name 6 months ago
Stefan Berthold af31a167c6
skip empty entries for uniqueSortedLowerNames 6 months ago
beltram 01ef526d08
change uri prefix to impp:wireapp= 6 months ago
beltram cc5fd0a6a5
fix san validation 6 months ago
beltram b3dd169190
cleanup my mess 6 months ago
beltram 3eb0ff43c0
fix orderNames size 6 months ago
beltram c41a99ad75
(finalize) have both display name & domain in SANs 6 months ago
beltram 5ba0ab3e44
fix csr domain validation in finalize 6 months ago
beltram 73ec6c89d0
fix csr org validation in finalize 6 months ago
beltram ca01c74333
avoid manipulating the key PEM format and take a plain PEM key as input 6 months ago