From f099f7cfd26920c3e343102d5b7923e86a77b68a Mon Sep 17 00:00:00 2001 From: Andrew Martinez Date: Tue, 12 Apr 2022 10:57:15 -0400 Subject: [PATCH] update edge - fixes externalId display/update issues - updates changelog for iss/aud validation, exteralId issue --- CHANGELOG.md | 11 +++++++++++ go.mod | 2 +- go.sum | 4 ++-- 3 files changed, 14 insertions(+), 3 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index b57c92b40..83c9ccbee 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -8,6 +8,17 @@ * Enhancement: Allow for version override using the ziti quickstart CLI script * Change: Renamed `pushDevBuild.sh` to `buildLocalDev.sh`, the script used for building a local dev version of the docker quickstart image * Bug fix: Fixes an issues where `isAdmin` would always default to false on updates (put/patch) +* Bug Fix: Identity property `externalId` was not properly rendering on `GET` and not handled consistently on `PUT` and `PATCH` +* Enhancement: External JWT Signer Issuer & Audience Validation + + +## External JWT Signer Issuer & Audience Validation + +External JWT Signers (endpoint `/external-jwt-signers`) now support `issuer` and `audience` optional string fields. +These fields may be set to `null` on `POST`/`PUT`/`PATCH` or omitted; which will result in no validation of incoming +JWT's `aud` and `iss` fields. If `issuer` is defined, JWT `iss` fields will be validated. If `audience` is defined, JWT +`aud` fields will be validated. If a JWT contains multiple audience values as an array of strings and will be validated, +validation will check if the External JWT Signer's `audience` value is present as one of the values. # Release 0.25.4 diff --git a/go.mod b/go.mod index 268763613..119950483 100644 --- a/go.mod +++ b/go.mod @@ -37,7 +37,7 @@ require ( github.com/keybase/go-ps v0.0.0-20190827175125-91aafc93ba19 github.com/michaelquigley/pfxlog v0.6.9 github.com/openziti/channel v0.18.25 - github.com/openziti/edge v0.21.185 + github.com/openziti/edge v0.21.186 github.com/openziti/fabric v0.17.97 github.com/openziti/foundation v0.17.22 github.com/openziti/sdk-golang v0.16.47 diff --git a/go.sum b/go.sum index 01ffadb4a..80d3253d2 100644 --- a/go.sum +++ b/go.sum @@ -815,8 +815,8 @@ github.com/openziti/channel v0.18.25 h1:dcwPcQ17sa9i8rV7xbkmswS81Vjjwgn3lw/cPV7j github.com/openziti/channel v0.18.25/go.mod h1:WT35GAbpPEhzwtgEU6KYkStUZVoNuk5XEDbv5SYnVtM= github.com/openziti/dilithium v0.3.3 h1:PLgQ6PMNLSTzCFbX/h98cmudgz/cU6TmjdSv5NAPD8k= github.com/openziti/dilithium v0.3.3/go.mod h1:vsCjI2AU/hon9e+dLhUFbCNGesJDj2ASgkySOcpmvjo= -github.com/openziti/edge v0.21.185 h1:G+UhLWAcWucuACq8i+4D/ZokU7S4BhJKaXq0BcJo/zc= -github.com/openziti/edge v0.21.185/go.mod h1:o25nulRGG0N6npWCwH56a1RoNWm/bjGOdPogklQH1SM= +github.com/openziti/edge v0.21.186 h1:aVdQ5E7ZyiJ8S+SDFlS0d6UQMkCv2W4GSm9k0bfDTf4= +github.com/openziti/edge v0.21.186/go.mod h1:o25nulRGG0N6npWCwH56a1RoNWm/bjGOdPogklQH1SM= github.com/openziti/fabric v0.17.97 h1:JQB9FA6BIE/bBWe5krRGZdQ8hfgonNwrI+MXytahy/k= github.com/openziti/fabric v0.17.97/go.mod h1:KfQitm+XCyc79i4oeQmTRuPRtedp0aY1UZjV5BNrBzM= github.com/openziti/foundation v0.17.22 h1:zFfgNHdLocEcoBqtognpJnYsVQaTm28EwqMNjBw8avk=