f0c2b53784
reverting changes that only cause conflicts
2024-11-29 15:15:55 -03:00
c053cb8d0a
isolating changes on oidc provider
2024-11-29 15:14:58 -03:00
1b4c3d756e
Session aware logout, backend logout url approach
2024-07-15 10:14:25 -03:00
e684125ca7
upgrading to go 1.21
2024-07-15 09:54:57 -03:00
822cfad994
Feature/add option to skip loading claims from profile url
2024-07-12 15:57:12 -03:00
1fc5b5cf15
Update go-jose dependency as requested in #2350
2024-07-12 15:07:29 -03:00
88b469bedd
Feature: Add GitHub groups (orgs/teams) support
2024-07-12 15:02:19 -03:00
bcd665c9a3
bugfix: OIDCConfig based providers are not respecting flags and configs
2024-07-12 14:44:22 -03:00
1396a26221
add azure china support
2024-07-12 11:37:14 -03:00
896c679146
Fixed Google ADC functionality
2024-07-12 11:00:33 -03:00
466e91695e
Updated linters
2024-07-12 10:30:16 -03:00
8b0632d7da
bugfix: gitea token validation
2024-07-12 08:32:55 -03:00
ee7a439f3d
bugfix: default scopes for OIDCProvider based providers
2024-07-12 08:21:55 -03:00
511552c790
bugfix: move oidc scope logic to oidc provider
2024-07-11 17:59:13 -03:00
e645994bbe
Fixing format for v7.5.0
2024-07-11 17:56:20 -03:00
7656a0aaf3
Workload identity support
2024-07-11 17:14:39 -03:00
1175b65ab5
Issue 1878: Validate URL call does not correctly honor already set URL
2024-07-11 11:15:41 -03:00
4d0303eef8
Fill empty UserIDClaim before assigning it to other values
2024-07-11 11:11:50 -03:00
e33bb5e8b0
Fix default scope settings for none oidc providers like GitHub
2024-07-10 18:02:50 -03:00
05b688e088
Fix uninitialized user claim
2024-07-10 17:41:52 -03:00
0ee3758b01
use introspect url from discovery
2024-04-23 12:43:42 -03:00
ac2d04686f
implement oidc singl sign on cookie refresher
2024-02-01 08:53:16 -03:00
91ddd6bd5e
Fixing introspect
2023-10-02 19:50:48 -03:00
aaf290193e
Removing hardcode
2023-10-02 10:48:00 -03:00
cbc7360195
100% passing tests
2023-10-02 10:27:46 -03:00
2c7543f38f
Merging 7.4.0
2023-09-01 08:09:44 -03:00
ceefdea6be
fix testcases for oidc test
2021-05-06 16:23:41 +05:30
1d486e4e33
Fix go lint
2021-05-06 15:12:40 +05:30
4d1a50bdba
Fix existing test cases
2021-05-06 15:08:43 +05:30
e2f3b98c67
Added error logs
2021-05-06 10:18:28 +05:30
35e1452e9d
Added introspection support in OIDC
2021-05-05 18:07:25 +05:30
2de1ad441a
refreshFix:Removing expiry check
2021-04-29 20:28:05 +05:30
05c3fa7601
Fix GitLab CVE test case
2021-03-25 10:29:17 -07:00
0279fa7dff
Merge pull request from GHSA-652x-m2gr-hppm
...
* Populate session Groups from userinfo response
* Fix: gitlab tests
Co-authored-by: Wilfried OLLIVIER <wollivier@bearstech.com>
2021-03-25 17:20:45 +00:00
73d9f3809e
Panic with GitLab project repository auth ( #1113 )
...
* panic with GitLab project repository auth
* /api/v4/projects/:id can return nil permissions
Signed-off-by: Piers Harding <piers@ompka.net>
* Add GitLab test for group no access
Signed-off-by: Piers Harding <piers@ompka.net>
2021-03-25 08:48:20 -07:00
f3209a40e1
extract email from id_token for azure provider ( #914 )
...
* extract email from id_token for azure provider
this change fixes a bug when --resource is specified with non-Graph
api and the access token destined to --resource is used to call Graph
api
* fixed typo
* refactor GetEmailAddress to EnrichSessionState
* make getting email from idtoken best effort and fall back to previous behavior when it's absent
* refactor to use jwt package to extract claims
* fix lint
* refactor unit tests to use test table
refactor the get email logic from profile api
* addressing feedback
* added oidc verifier to azure provider and extract email from id_token if present
* fix lint and codeclimate
* refactor to use oidc verifier to verify id_token if oidc is configured
* fixed UT
* addressed comments
* minor refactor
* addressed feedback
* extract email from id_token first and fallback to access token
* fallback to access token as well when id_token doesn't have email claim
* address feedbacks
* updated change log!
2021-03-09 20:53:15 -08:00
9cea4ea89b
Update golangci-lint version in CI workflow
2021-02-17 20:25:37 +00:00
b6cca79cb9
Ensure errors in tests are logged to the GinkgoWriter
2021-02-10 19:50:04 +00:00
57640764c0
Use logger for sensitive data logging to be able to disable it ( #1002 )
...
* Add sensible logging flag to default setup for logger
* Use logger instead of fmt for info logging with sensible data
* Remove sensible logging flag
* Update CHANGELOG.md
Co-authored-by: Joel Speed <Joel.speed@hotmail.co.uk>
2021-01-20 19:56:13 +00:00
4b28e6886c
Handle ValidateURL fallback for nil & empty struct cases
2020-12-24 14:04:20 -08:00
816d9a4566
Use a generic http.HandlerFunc in Keycloak tests
2020-12-24 14:04:19 -08:00
f07a5630f1
Update Keycloak documentation
2020-12-24 14:04:19 -08:00
138a6b128a
Use ProfileURL for userinfo EnrichSession calls in Keycloak
2020-12-24 14:04:19 -08:00
0886f8035c
Move all Keycloak unit tests to Ginkgo
2020-12-24 14:04:19 -08:00
3369799853
Migrate Keycloak to EnrichSession & support multiple groups
2020-12-24 14:04:19 -08:00
d2ffef2c7e
Use global OIDC fields for Gitlab
2020-12-21 16:54:12 -08:00
42f6cef7d6
Improve OIDC error handling
2020-12-21 16:53:05 -08:00
ea5b8cc21f
Support non-list and complex groups
2020-12-21 16:52:18 -08:00
eb56f24d6d
Deprecate UserIDClaim in config and docs
2020-12-21 16:52:17 -08:00
74ac4274c6
Move generic OIDC functionality to be available to all providers
2020-12-21 16:52:04 -08:00
Anderson Valério
Leandro Lafin
Erikson Bahr
Eduardo Vozniak
princemelvin
Nick Meves
Piers Harding
Weinong Wang
Joel Speed
Kevin Kreitner