Commit Graph

1799 Commits (f38a72a62b08deceee4462ac4af27523b28bfb3a)
 

Author SHA1 Message Date
Cristian Le f38a72a62b Leftover from previous commit 3 years ago
Cristian Le 1d2445e1d8 Removed the variadic username
Could be useful later on, but for the current PR changes should be minimized
3 years ago
Cristian Le 9e00b82bdf Revert `oidc_test.go`
Moving the `preferred_username` to a separate PR
3 years ago
Cristian Le cd67d64eec Merge remote-tracking branch 'origin/master' 3 years ago
Cristian Le decf0fc8ce Revert using preferred_username
It might present a security issue if the users can change this value for themselves. Needs further investigation
3 years ago
Cristian Le 21732f213b Fix shadow issue in CI 3 years ago
Mariano Cano 08e5ec6ad1 Fix IsAdminGroup comment. 3 years ago
Mariano Cano 46c1dc80fb Use map[string]struct{} instead of map[string]bool 3 years ago
Mariano Cano aafac179a5 Add test for oidc with preferred usernames. 3 years ago
Cristian Le f730c0bec4 Sanitize usernames 3 years ago
Cristian Le 48666792c7 Draft: adding usernames to GetIdentityFunc 3 years ago
Cristian Le 79eec83f3e Rename and reformat to PreferredUsername 3 years ago
Cristian Le 09a21fef26 Implement #550
- Read `preferred_username` from token
- Add `preferred_username` to the default Usernames
- Check the `admin` array for admin groups that the user might belong to
3 years ago
Cristian Le bb1e051b27 Revert using preferred_username
It might present a security issue if the users can change this value for themselves. Needs further investigation
3 years ago
Max 1ee288f9fb
Merge pull request #565 from smallstep/max/load-init
Init config on load | Add wrapper for cli
3 years ago
max furman 8c709fe3c2 Init config on load | Add wrapper for cli 3 years ago
max furman 9a156d2210 Remove distribution doc. 3 years ago
max furman bc4bf224e8 [action] Add needs-triage labeler 3 years ago
Cristian Le e5b206c1de Fix shadow issue in CI 3 years ago
Carl Tashian 0295280c20 Merge branch 'master' of https://github.com/smallstep/certificates 3 years ago
Carl Tashian 25325b6970 Revert systemd renewer unit change that was incorrect
This reverts commit 75f24a103a.
3 years ago
Mariano Cano 484b30d0a1 Fix IsAdminGroup comment. 3 years ago
Mariano Cano 9cc410b308 Use map[string]struct{} instead of map[string]bool 3 years ago
Mariano Cano c8eb771a8e Add test for oidc with preferred usernames. 3 years ago
Cristian Le 8b1ab30212 Sanitize usernames 3 years ago
Cristian Le bf364f0a5f Draft: adding usernames to GetIdentityFunc 3 years ago
Cristian Le 861ef80e0d Rename and reformat to PreferredUsername 3 years ago
Mariano Cano b9b1ac04d1
Merge pull request #562 from smallstep/renew-db-interface
Renew DB interface and Rekey
3 years ago
Mariano Cano 5846314f88 Add missing Rekey method to the ca.Client
Fixes #315
3 years ago
Mariano Cano 2cbaee9c1d Allow to use an alternative interface to store renewed certs.
This can be useful to know if a certificate has been renewed and
link one certificate with the 'parent'.
3 years ago
Cristian Le 55fbcfb3be Implement #550
- Read `preferred_username` from token
- Add `preferred_username` to the default Usernames
- Check the `admin` array for admin groups that the user might belong to
3 years ago
Mariano Cano 582d6b161d
Merge pull request #531 from smallstep/tls-tunnel
Add experimental support for a TLS over TLS tunnel.
3 years ago
Mariano Cano 1328aa3e47 Fix review comments. 3 years ago
Mariano Cano d3c6bcbcce
Merge pull request #553 from smallstep/store-chain
Add extension of db.AuthDB to store the fullchain
3 years ago
Mariano Cano e6833ecee3 Add extension of db.AuthDB to store the fullchain.
Add a temporary solution to allow an extension of an db.AuthDB
interface that logs the fullchain of certificates instead of just
the leaf.
3 years ago
Mariano Cano 50b9aaec57 Add new identity tests. 3 years ago
Mariano Cano e414d0c8ea Fix unit tests. 3 years ago
Mariano Cano c5234e9c61 Refactor tls tunnel connections.
New method will use an identity-like file with the configuration
used to create the (m)TLS connection to the tunnel.
3 years ago
Mariano Cano 180b5c3e3c Fix typo. 3 years ago
Mariano Cano e75a9409a5 Add experimental support for a TLS over TLS tunnel. 3 years ago
Carl Tashian 75f24a103a Sync cert renewer service with docs 3 years ago
Carl Tashian e50c5bc4b1 Remove pronoun 3 years ago
Mariano Cano 3769a2760a
Merge pull request #543 from smallstep/no-nonce-on-get
Remove the creation on nonce on get acme directory
3 years ago
Mariano Cano 2e1524ec2f Remove the creation on nonce on get acme directory.
According to RFC 8555, the replay nonces are only required in POST
requests. And of course in the new-nonce request.
3 years ago
max furman 16c20c9279 [action] codecov token not needed for public repos 3 years ago
Max b7f8f15619
Merge pull request #541 from smallstep/max/ver
VERSION from ENV should always take precedence over CI tags
3 years ago
max furman 78c15805f4 VERSION from ENV should always take precedence over CI tags 3 years ago
Mariano Cano 7688ca18ac
Merge pull request #540 from smallstep/proxy-always
Always specify a Proxy in all custom transports.
3 years ago
Mariano Cano 02a5879cfe Specify always a Proxy in all custom transports.
Fixes #535
3 years ago
Max 0ec75c98cf
Merge pull request #539 from smallstep/max/escaped-route-fix
Use different method for unescpaed paths for the router
3 years ago