241 Commits (eb210ccc70e78d780bd535a1700d1dd07286c78e)

Author	SHA1	Message	Date
Mariano Cano	7583f1c739	Do not require all principals, allow subgroups.	5 years ago
Mariano Cano	41b97372e6	Rename function to SanitizeSSHUserPrincipal	5 years ago
Mariano Cano	53f62f871c	Set not extensions to host certificates.	5 years ago
Mariano Cano	48c98dea2a	Make SanitizeSSHPrincipal a public function.	5 years ago
Mariano Cano	f01286bb48	Add support for SSH certificates to OIDC. ... Update the interface for all the provisioners.	5 years ago
Mariano Cano	7a64a84761	Pass the given context.	5 years ago
Mariano Cano	e1cd5ee8c3	Add context to the Authorize method. ... Fix tests.	5 years ago
Mariano Cano	2127d09ef3	Rename context type to apiCtx. ... It will conflict with the context package.	5 years ago
Mariano Cano	082ebda85b	Merge branch 'master' of github.com:smallstep/certificates into ssh-ca	5 years ago
Mariano Cano	d7221e15ac	Always marshal timeduration as a string	5 years ago
Mariano Cano	3ff410c695	fix ssh validity modifier	5 years ago
Mariano Cano	1c8f610ca9	Add initial implementation of an SSH CA using the JWK provisioner. ... Fixes smallstep/ca-component#187	5 years ago
Mariano Cano	f5beed3b96	Merge pull request #83 from matteo-s/oidc-groups ... Add option for checking group membership declared in JWT token	5 years ago
Mariano Cano	3e69194cc4	Fix lint error	5 years ago
Mariano Cano	900ab9cc12	Allow custom common names in cloud identity provisioners.	5 years ago
Mariano Cano	5f4217ca4c	Simplify abs, it performs even better.	5 years ago
Matteo Saloni	1919cfdff3	Add option for checking group membership declared in JWT token	5 years ago
Mariano Cano	e66272d6f0	Fix panic when max-age is set to zero. ... Fixes #81	5 years ago
Mariano Cano	578beec25d	Merge pull request #65 from smallstep/cloud-identities ... Cloud identities	5 years ago
Mariano Cano	8f8c862c04	Fix spelling errors.	5 years ago
Mariano Cano	b88a2f1373	Fix provisioner id in LoadByCertificate	5 years ago
Mariano Cano	37dff5124b	Fix audience tests. ... Fixes smallstep/step#156	5 years ago
Mariano Cano	2491593cdd	Add ca-url based audience for AWS tokens ... Fixes smallstep/step#156	5 years ago
Mariano Cano	4fa9e9333d	Add NewDuration constructor.	5 years ago
Mariano Cano	37f2096dff	Add Stringer interface to provisioner.Type. ... Add missing file.	5 years ago
Mariano Cano	6e4a09651a	Add comments with links to cloud docs.	5 years ago
Mariano Cano	536ec36b9e	Add support for instance age check in AWS. ... Fixes smallstep/step#164	5 years ago
Mariano Cano	c431538ff2	Add support for instance age check in GCP. ... Fixes smallstep/step#164	5 years ago
Mariano Cano	4cef086c00	Allow to use emails as service accounts on GCP ... Fixes smallstep/step#163	5 years ago
Mariano Cano	0a756ce9d0	Use on GCP audiences with the format https://<ca-url>#<provisioner-type>/<provisioner-name> ... Fixes smallstep/step#156	5 years ago
Mariano Cano	a54bf925eb	Add filtering by GCP Project ID. ... Fixes smallstep/step#155	5 years ago
Mariano Cano	54d0186d1f	Change condition to fail if the length is not the expected.	5 years ago
Mariano Cano	dbd3131068	Fix comments.	5 years ago
Mariano Cano	9f39cb5f2a	Add test.	5 years ago
Mariano Cano	fb6a1afd89	Fix typo.	5 years ago
Mariano Cano	3a1a4c5ea9	Do not allow reload with database configuration changes. ... Fixes #smallstep/ca-component#170	5 years ago
Mariano Cano	cf07c8f4c0	Fix typos.	5 years ago
Mariano Cano	54570095d4	Merge branch 'master' into cloud-identities	5 years ago
Mariano Cano	423d505d04	Replace subscriptions with resource groups.	5 years ago
Mariano Cano	32d2d6b75a	Remove debug code.	5 years ago
Mariano Cano	e0aaa1a577	Use tenant id in azures's provisioner x509 extension.	5 years ago
Mariano Cano	89eeada2a2	Add support for loading azure tokens by tenant id.	5 years ago
Mariano Cano	803d81d332	Improve azure unit tests.	5 years ago
Mariano Cano	4c5fec06bf	Require TenantID in azure, add some tests.	5 years ago
Mariano Cano	12937c6b75	Remove pkcs7 related variables and structs.	5 years ago
Mariano Cano	6412b1a79b	Add first version of Asure support. ... Fixes #69	5 years ago
max furman	81db527f12	NoopDB -> SimpleDB	5 years ago
max furman	b73fe8c157	Add used OTT to DB during authToken step	5 years ago
Mariano Cano	70196b2331	Add skeleton for the Azure provisioner. ... Related to #69	5 years ago
Mariano Cano	81bfd2c1cb	Add tests for AWS provisioner ... Fixes #68	5 years ago
Mariano Cano	f755fddc35	Fix lint errors.	5 years ago
Mariano Cano	b6a5ebcfc9	Move code to switch default.	5 years ago
Mariano Cano	a7f06c765d	Fix load of gcp and aws provisioner by certificate.	5 years ago
Mariano Cano	da93e40f90	Add constant for Azure type.	5 years ago
Mariano Cano	37e84aa535	Add DisableCustomSANs and DisableTrustOnFirstUse to GCP provisioner. ... Fixes #67	5 years ago
Mariano Cano	75ef5a2275	Add AWS provisioner. ... Fixes #68	5 years ago
Mariano Cano	5defd8289d	Add missing config in tests.	5 years ago
Mariano Cano	27c98806c0	Use GetTokenID.	5 years ago
Mariano Cano	2c68915b70	Fix comment.	5 years ago
Mariano Cano	fb6321fb2c	Use gcpConfig type to keep configuration urls. ... Fixes #67	5 years ago
Mariano Cano	7e53b28320	Disable revoke for GCP.	5 years ago
Mariano Cano	7727fa5665	Update GCP tests.	6 years ago
Mariano Cano	1ea4b0ad64	Add unit test for GCP provider	6 years ago
Mariano Cano	b4729cd670	Use JWKSet to get the GCP keys.	6 years ago
Mariano Cano	f794dbeb93	Add support for GCP identity tokens.	6 years ago
max furman	9977eff153	bump cli dep and fix text error msg	6 years ago
max furman	ff20d9f5af	Fix composite literal uses unkeyed field	6 years ago
max furman	ab4d569f36	Add /revoke API with interface db backend	6 years ago
Mariano Cano	1812c0619a	Update go-jose to 2.3.0. ... This is a dependency for smallstep/cli#105, it will be solved once square/go-jose#224 gets merged	6 years ago
Mariano Cano	04da00d716	Merge pull request #55 from smallstep/x509util-real-x509 ... Use standard x509 creating signed certificates	6 years ago
Mariano Cano	7b9e08bcfa	Fix comment.	6 years ago
Mariano Cano	64f2615864	Fix tests.	6 years ago
Mariano Cano	6d92ba75b9	Don't use pointer in TimeDuration.MarshalJSON	6 years ago
Mariano Cano	698058baa9	Add tests for TimeDuration.	6 years ago
Mariano Cano	00fed1c538	Add initial version of time duration support in sign requests.	6 years ago
Mariano Cano	8c8547bf65	Remove unnecessary parse and improve tests.	6 years ago
Mariano Cano	b9530909a4	Fix tests.	6 years ago
Mariano Cano	a3e2b4a552	Move certificate check to the right place.	6 years ago
Mariano Cano	30a6889d1f	Use standard x509 instead of step one.	6 years ago
Mariano Cano	68ff077ea9	Improve tests.	6 years ago
Mariano Cano	76618558ae	Improve unit tests.	6 years ago
Mariano Cano	7378ed27ac	Refactor claims so they can be totally omitted if only the parent is set.	6 years ago
Mariano Cano	5d5f03f963	Set omitempty to admins and domains.	6 years ago
Mariano Cano	8a05cdde52	Add audience in the error v2	6 years ago
Mariano Cano	f8fba4df6b	Add audience in error.	6 years ago
Mariano Cano	60880d1f0a	Add domains and check emails properly.	6 years ago
Mariano Cano	5edbce017f	Set docs for client secret as mandatory, but it can be blank.	6 years ago
Mariano Cano	2c0c0112c6	Add an optional client secret field.	6 years ago
Mariano Cano	945a1371f1	Fix tests.	6 years ago
Mariano Cano	0b4cde1ad3	Move type to the first position of the struct.	6 years ago
Mariano Cano	23e6de57a2	Address comments in code review.	6 years ago
Mariano Cano	07cdc1021c	Use OIDC nonce as the reuse key.	6 years ago
Mariano Cano	7fd737cbb1	Fix lint warnings.	6 years ago
Mariano Cano	1f5ff5c899	Fix sign and renew tests.	6 years ago
Mariano Cano	2fb77b8a4d	Truncate to seconds the startTime to simplify tests.	6 years ago
Mariano Cano	1a9e8bad74	Truncate to seconds instead of rounding.	6 years ago
Mariano Cano	b77621675c	Fix and simplify authorize tests.	6 years ago
Mariano Cano	ef4d809ee6	Move matchesAudience and stripPort tests to provisioner package.	6 years ago
Mariano Cano	636d92b19b	Add missing files.	6 years ago
Mariano Cano	a8d03c39bb	Move Duration to a new file and move tests to provisioner package.	6 years ago