Herman Slatman
|
9539729bd9
|
Add initial implementation of x509 and SSH allow/deny policy engine
|
2022-01-03 12:25:24 +01:00 |
|
max furman
|
933b40a02a
|
Introduce gocritic linter and address warnings
|
2021-10-08 14:59:57 -04:00 |
|
Mariano Cano
|
a50654b468
|
Check for admins in both emails and groups.
|
2021-09-23 15:49:28 -07:00 |
|
Cristian Le
|
1d2445e1d8
|
Removed the variadic username
Could be useful later on, but for the current PR changes should be minimized
|
2021-05-05 10:12:38 +09:00 |
|
Cristian Le
|
9e00b82bdf
|
Revert oidc_test.go
Moving the `preferred_username` to a separate PR
|
2021-05-05 08:49:03 +09:00 |
|
Mariano Cano
|
aafac179a5
|
Add test for oidc with preferred usernames.
|
2021-05-05 08:15:26 +09:00 |
|
Cristian Le
|
48666792c7
|
Draft: adding usernames to GetIdentityFunc
|
2021-05-05 08:15:26 +09:00 |
|
Mariano Cano
|
ba918100d0
|
Use go.step.sm/crypto/jose
Replace use of github.com/smallstep/cli/crypto with the new package
go.step.sm/crypto/jose.
|
2020-08-24 14:44:11 -07:00 |
|
Mariano Cano
|
413af88aad
|
Fix provisioning tests.
|
2020-08-03 18:10:29 -07:00 |
|
Mariano Cano
|
6c64fb3ed2
|
Rename provisioner options structs:
* provisioner.ProvisionerOptions => provisioner.Options
* provisioner.Options => provisioner.SignOptions
* provisioner.SSHOptions => provisioner.SingSSHOptions
|
2020-07-22 18:24:45 -07:00 |
|
Mariano Cano
|
0c8376a7f6
|
Fix existing unit tests.
|
2020-07-21 14:21:54 -07:00 |
|
Mariano Cano
|
4e9bff0986
|
Add support for OIDC multitoken tenants for azure.
|
2020-04-24 14:36:32 -07:00 |
|
Mariano Cano
|
fa416336a8
|
Add context to tests.
|
2020-03-10 19:17:32 -07:00 |
|
max furman
|
dccbdf3a90
|
Introduce generalized statusCoder errors and loads of ssh unit tests.
* StatusCoder api errors that have friendly user messages.
* Unit tests for SSH sign/renew/rekey/revoke across all provisioners.
|
2020-01-28 13:29:40 -08:00 |
|
max furman
|
414a94b210
|
Instrument getIdentity func for OIDC ssh provisioner
|
2020-01-28 13:28:16 -08:00 |
|
Mariano Cano
|
7db7b1ee4c
|
Fix some provisioner tests
|
2020-01-28 13:28:16 -08:00 |
|
Mariano Cano
|
d4627d1282
|
Make provisioner tests compile, they are still failing.
|
2020-01-28 13:28:16 -08:00 |
|
max furman
|
d368791606
|
Add x5c provisioner capabilities
|
2019-10-14 14:51:37 -07:00 |
|
Mariano Cano
|
72f1a61f06
|
Increase coverage.
|
2019-09-18 18:08:26 -07:00 |
|
Mariano Cano
|
b7045f27a9
|
Increase coverage.
|
2019-09-18 17:13:58 -07:00 |
|
Mariano Cano
|
a16b2125bc
|
Fix tests.
|
2019-09-18 16:04:43 -07:00 |
|
Mariano Cano
|
396b4222aa
|
Implement validator for ssh keys.
Fixes #100
|
2019-09-10 17:04:13 -07:00 |
|
Mariano Cano
|
10e7b81b9f
|
Merge branch 'master' into ssh-ca
|
2019-09-05 23:06:01 +02:00 |
|
max furman
|
2b41faa9cf
|
Enforce >= 2048 bit rsa keys at the provisioner layer
* Fixes #94
* In the future this should be configurable by provisioner
|
2019-08-27 14:44:59 -07:00 |
|
Mariano Cano
|
d231bfb764
|
Update jwk and oidc tests.
|
2019-07-31 17:04:17 -07:00 |
|
Mariano Cano
|
f8cacc11b1
|
Fix tests.
|
2019-07-29 18:24:34 -07:00 |
|
Mariano Cano
|
1ea4b0ad64
|
Add unit test for GCP provider
|
2019-04-18 16:01:30 -07:00 |
|
max furman
|
ab4d569f36
|
Add /revoke API with interface db backend
|
2019-04-10 13:50:35 -07:00 |
|
Mariano Cano
|
76618558ae
|
Improve unit tests.
|
2019-03-19 15:27:41 -07:00 |
|
Mariano Cano
|
7378ed27ac
|
Refactor claims so they can be totally omitted if only the parent is set.
|
2019-03-19 15:10:52 -07:00 |
|
Mariano Cano
|
60880d1f0a
|
Add domains and check emails properly.
|
2019-03-15 13:49:50 -07:00 |
|
Mariano Cano
|
5edbce017f
|
Set docs for client secret as mandatory, but it can be blank.
|
2019-03-15 11:10:52 -07:00 |
|
Mariano Cano
|
945a1371f1
|
Fix tests.
|
2019-03-13 16:46:12 -07:00 |
|
Mariano Cano
|
4ceb88fbae
|
Add tests for OIDC and complete some JWK tests.
|
2019-03-11 12:48:46 -07:00 |
|