68 commits

Author	SHA1	Message	Date
Mariano Cano	53f62f871c	Set not extensions to host certificates.	2019-07-29 16:36:46 -07:00
Mariano Cano	48c98dea2a	Make SanitizeSSHPrincipal a public function.	2019-07-29 16:21:22 -07:00
Mariano Cano	f01286bb48	Add support for SSH certificates to OIDC. ... Update the interface for all the provisioners.	2019-07-29 15:54:07 -07:00
Matteo Saloni	1919cfdff3	Add option for checking group membership declared in JWT token	2019-06-25 10:50:55 +02:00
max furman	ab4d569f36	Add /revoke API with interface db backend	2019-04-10 13:50:35 -07:00
Mariano Cano	7378ed27ac	Refactor claims so they can be totally omitted if only the parent is set.	2019-03-19 15:10:52 -07:00
Mariano Cano	5d5f03f963	Set omitempty to admins and domains.	2019-03-19 11:23:18 -07:00
Mariano Cano	60880d1f0a	Add domains and check emails properly.	2019-03-15 13:49:50 -07:00
Mariano Cano	5edbce017f	Set docs for client secret as mandatory, but it can be blank.	2019-03-15 11:10:52 -07:00
Mariano Cano	2c0c0112c6	Add an optional client secret field.	2019-03-14 18:00:11 -07:00
Mariano Cano	0b4cde1ad3	Move type to the first position of the struct.	2019-03-13 15:33:52 -07:00
Mariano Cano	4ceb88fbae	Add tests for OIDC and complete some JWK tests.	2019-03-11 12:48:46 -07:00
Mariano Cano	dce3100cfb	Add missing time in validation.	2019-03-11 11:12:47 -07:00
Mariano Cano	a97ea87caa	Move options to provisioner so we can set the duration of the cert.	2019-03-07 15:14:18 -08:00
Mariano Cano	2d00cd0933	Validate audiences in the default provisioner.	2019-03-06 18:32:56 -08:00
Mariano Cano	6d395f3818	Add missing validy validator to oidc.	2019-03-06 17:30:14 -08:00
Mariano Cano	0dee841a4f	Complete first version of provisioner implementations.	2019-03-06 14:54:56 -08:00
Mariano Cano	a2a45f635b	Add initial implementation of an OIDC provisioner.	2019-03-04 17:58:20 -08:00