13 Commits

Author	SHA1	Message	Date
Andrew Martinez	9ae2eb825c	adds jwks support ... - ext-jwt-signers now support jwks endpoints in addition to static certificates - ext-jwt-signers now require either kid+cert or jkwsEndpoint - ext-jwt-signers now requires issuer and audience fields - jwksEndpoints are initially cached and will be revalidated on invalid auth once every 5s at most - adds more external id tests	2022-06-07 09:57:22 -04:00
Andrew Martinez	7381423974	use cmap generics, update fabric	2022-05-27 11:02:51 -04:00
Andrew Martinez	c5f156dd9e	adds x509 claims support for external ids to CAs ... - adds REST API CA external id field - adds rest api for external fields - refactors authentication interfaces for federation - alters authentication moduels to return AuthResult interfaces - allows AuthResults to provide external x509 certs as session certs	2022-05-23 13:08:16 -04:00
Andrew Martinez	35cf029952	fix partial update panic for ext jwt update events	2022-05-20 14:51:09 -04:00
Andrew Martinez	2a6ea4944d	adds ext jwt update event listning for jwt auth mod cache	2022-05-20 14:29:13 -04:00
Andrew Martinez	ab7b2e80fd	use centralized logic to add signers for cache load and live def	2022-04-21 15:06:18 -04:00
Andrew Martinez	afd39af571	fixes ext jwt startup cache to use kid not fingerprint	2022-04-21 10:15:23 -04:00
Andrew Martinez	ec51635f26	adds optional issuer and audience properties to ext jwt signers	2022-04-06 15:48:17 -04:00
Paul Lorenz	01bea19e1f	Update to use transport and storage libs. Use fabric config instead of foundation/config	2022-03-30 22:49:46 -04:00
Andrew Martinez	ba84d2fae9	adds settable kid to ext jwt signers, fixes default auth policy	2022-03-30 13:51:23 -04:00
Andrew Martinez	5129f3c8d7	adds partial authentication enforcement ... - required ext jwt signer requires bearer token on requests - adds auth query output for ext jwt - enforces requireTotp auth policy - allows partial auth to setup MFA but not remove	2022-03-30 10:10:52 -04:00
Andrew Martinez	708dcfe0c9	adds auth policy / disabled identity auth logic	2022-03-29 14:26:04 -04:00
Andrew Martinez	3380807334	adds ext-jwt authenticator ... - enables /authenticate?method=ext-jwt - adds ext-jwt to OpenAPI schema - rebase to main, squash	2022-03-08 10:01:38 -05:00