Commit Graph

4183 Commits

Author SHA1 Message Date
beltram
2b1223a080
simpler 2024-01-08 21:14:17 +01:00
beltram
036a144e09
add oidc target 2024-01-08 21:10:46 +01:00
beltram
97002040a5
fix: challenge target field was not mapped to db entity 2024-01-08 21:09:07 +01:00
beltram
d32a3e23f0
wip 2024-01-08 21:08:34 +01:00
beltram
b58de27675
fix: do not convert URIs to lowercase for comparison purpose 2024-01-08 21:05:41 +01:00
beltram
7c9f8020d5
fix: add URI prefix to handle 2024-01-08 21:04:23 +01:00
beltram
680b6ea08f
adapt google demo for wire's special handle format "{firstname}_wire" 2024-01-08 21:03:54 +01:00
beltram
a97991aa83
infer domain from google email address 2024-01-08 21:01:50 +01:00
beltram
49ad2d9967
fix google id token matching in oidc challenge 2024-01-08 21:01:30 +01:00
beltram
a49966f4c9
try using google oidc for demo purpose 2024-01-08 20:59:09 +01:00
beltram
3576cc30c8
forward displayName in CSR with custom OID 2024-01-08 20:58:32 +01:00
beltram
4172b69816
remove displayName validation, potentially harmful 2024-01-08 20:57:35 +01:00
beltram
79501df5a2
fix: exclude displayName from SAN DNS 2024-01-08 20:56:39 +01:00
beltram
3f474f77d4
feat: change from impp prefix to just im 2024-01-08 20:55:32 +01:00
beltram
b6ec4422b4
feat: adapt to dex and pass the 'keyauth' in payload instead of in id_token. Also have a different mapping for id_token claims name 2024-01-08 20:54:54 +01:00
Stefan Berthold
af31a167c6
skip empty entries for uniqueSortedLowerNames 2024-01-08 20:54:17 +01:00
beltram
01ef526d08
change uri prefix to impp:wireapp= 2024-01-08 20:53:10 +01:00
beltram
cc5fd0a6a5
fix san validation 2024-01-08 20:52:52 +01:00
beltram
b3dd169190
cleanup my mess 2024-01-08 20:52:32 +01:00
beltram
3eb0ff43c0
fix orderNames size 2024-01-08 20:47:51 +01:00
beltram
c41a99ad75
(finalize) have both display name & domain in SANs 2024-01-08 20:47:28 +01:00
beltram
5ba0ab3e44
fix csr domain validation in finalize 2024-01-08 20:46:48 +01:00
beltram
73ec6c89d0
fix csr org validation in finalize 2024-01-08 20:46:07 +01:00
beltram
ca01c74333
avoid manipulating the key PEM format and take a plain PEM key as input 2024-01-08 20:42:52 +01:00
beltram
74ddad69dc
fix: challenge is '.token' and not '.id' 2024-01-08 20:39:27 +01:00
beltram
83f6be1f58
print oidc options 2024-01-08 20:38:26 +01:00
Stefan Berthold
2208b03744
avoid panic when OIDC config is not provided 2024-01-08 20:37:37 +01:00
beltram
1fe61bee7b
better observability 2024-01-08 20:36:37 +01:00
Stefan Berthold
e6dd211637
acquire DPoP signing key from provisioner 2024-01-08 20:34:58 +01:00
beltram
227e932624
use json struct for challenge request payload otherwise it's a hell to craft from client side 2024-01-08 20:33:46 +01:00
Stefan Berthold
5ca744567c
simplify OIDC verification 2024-01-08 20:32:44 +01:00
Stefan Berthold
da1e64aa53
update wire challenges' status on happy end 2024-01-08 20:28:37 +01:00
Stefan Berthold
8e0e35532c
Add Wire authz and challenges (OIDC+DPOP) 2024-01-08 20:27:16 +01:00
Herman Slatman
25c109e75d
Change error message for CSR validation 2024-01-08 20:05:16 +01:00
github-actions[bot]
fc55fba5b5
Merge pull request #1664 from smallstep/dependabot/go_modules/google.golang.org/api-0.155.0
Bump google.golang.org/api from 0.154.0 to 0.155.0
2024-01-08 18:59:01 +01:00
Herman Slatman
4ba2e22b8d
Merge pull request #1663 from smallstep/herman/acme-cose-rs1-support 2024-01-08 17:20:21 +01:00
dependabot[bot]
a49d1f7dc0
Bump google.golang.org/api from 0.154.0 to 0.155.0
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.154.0 to 0.155.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.154.0...v0.155.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-08 15:22:05 +00:00
Herman Slatman
e52836f0ab
Add RS1 support for ACME device-attest-01 2024-01-07 21:25:36 +01:00
Herman Slatman
581db00a00
Merge pull request #1661 from smallstep/herman/acme-challenge-client-proxy
Add support for `HTTP_PROXY` and `HTTPS_PROXY` to ACME solver client
2024-01-03 19:36:48 +01:00
Herman Slatman
c59d293d26
Add support for HTTP_PROXY and HTTPS_PROXY to ACME solver client 2024-01-03 15:09:24 +01:00
github-actions[bot]
b75773e193
Merge pull request #1655 from smallstep/dependabot/go_modules/google.golang.org/protobuf-1.32.0
Bump google.golang.org/protobuf from 1.31.0 to 1.32.0
2023-12-27 13:16:20 +01:00
github-actions[bot]
5432316f2c
Merge pull request #1657 from smallstep/dependabot/go_modules/github.com/go-chi/chi/v5-5.0.11
Bump github.com/go-chi/chi/v5 from 5.0.10 to 5.0.11
2023-12-27 13:15:01 +01:00
dependabot[bot]
a612efff5a
Bump google.golang.org/protobuf from 1.31.0 to 1.32.0
Bumps google.golang.org/protobuf from 1.31.0 to 1.32.0.

---
updated-dependencies:
- dependency-name: google.golang.org/protobuf
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-12-27 12:11:04 +00:00
github-actions[bot]
428404870e
Merge pull request #1654 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.60.1
Bump google.golang.org/grpc from 1.60.0 to 1.60.1
2023-12-27 13:09:23 +01:00
dependabot[bot]
f3572b39c6
Bump github.com/go-chi/chi/v5 from 5.0.10 to 5.0.11
Bumps [github.com/go-chi/chi/v5](https://github.com/go-chi/chi) from 5.0.10 to 5.0.11.
- [Release notes](https://github.com/go-chi/chi/releases)
- [Changelog](https://github.com/go-chi/chi/blob/master/CHANGELOG.md)
- [Commits](https://github.com/go-chi/chi/compare/v5.0.10...v5.0.11)

---
updated-dependencies:
- dependency-name: github.com/go-chi/chi/v5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-12-25 15:16:36 +00:00
dependabot[bot]
e45be31055
Bump google.golang.org/grpc from 1.60.0 to 1.60.1
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.60.0 to 1.60.1.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.60.0...v1.60.1)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-12-25 15:15:59 +00:00
github-actions[bot]
4a580f59fb
Merge pull request #1649 from smallstep/dependabot/go_modules/google.golang.org/api-0.154.0
Bump google.golang.org/api from 0.153.0 to 0.154.0
2023-12-19 13:21:03 +01:00
dependabot[bot]
56daa26900
Bump google.golang.org/api from 0.153.0 to 0.154.0
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.153.0 to 0.154.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.153.0...v0.154.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-12-19 12:15:39 +00:00
github-actions[bot]
9eecd12fc2
Merge pull request #1651 from smallstep/dependabot/go_modules/github.com/newrelic/go-agent/v3-3.29.0
Bump github.com/newrelic/go-agent/v3 from 3.28.1 to 3.29.0
2023-12-19 13:12:34 +01:00
github-actions[bot]
40c58cb1ec
Merge pull request #1650 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.60.0
Bump google.golang.org/grpc from 1.59.0 to 1.60.0
2023-12-19 13:11:20 +01:00