881ec14b63
Fix validation perf. Fixes #1428 . Remove duplicate LoadOneById method.
2024-03-21 10:10:07 -04:00
a84369a6e9
Consolidate fabric and edge persistence code. Fixes #1555
2023-12-06 17:36:37 -05:00
f3d67b7f49
Update fabric imports
2023-09-28 23:34:28 -04:00
07da3cd513
Merge remote-tracking branch 'edge/main' into merge-edge
...
Updated package names
Merged golangci-lint configurations
2023-09-27 16:54:53 -04:00
453e6cae2a
Consolidate controller/apierror/helpers and messages
2023-08-30 17:16:10 -04:00
414cff49d7
adds support OIDC authentication, api access, and ER connections
2023-07-20 09:41:12 -04:00
3116412857
adds missing error message for unmatched iss field
2023-05-10 10:36:33 -04:00
63f9dad3df
Updated model for storage api changes
2023-04-25 13:26:02 -04:00
fed450d75f
update jwks processing
2023-03-13 13:29:41 -04:00
52ed07405c
fix lint errors
2023-02-22 19:43:45 -05:00
a4caf933f6
fixes #1310 optional KID causes controller crash
2023-02-22 15:12:07 -05:00
2509f9b575
update CODEOWNERS to sig-core and update MM notifications
2022-11-30 14:34:10 -05:00
d73c72679d
for #1213 delete api session on authenticator delete/re-enroll
...
- an authenticator removed or re-enrolled would continue to allow old
API Session to operate
- deleted or re-enrolled authenticators now remove associatd API
Sessions
2022-11-09 11:44:49 -05:00
63c161224a
Add linter and fix issues found by linter
2022-10-10 16:56:51 -04:00
bae7e40b61
Update for foundation changes
2022-07-01 15:55:30 -04:00
12df770d04
Update copyright
2022-06-30 17:45:08 -04:00
9ae2eb825c
adds jwks support
...
- ext-jwt-signers now support jwks endpoints in addition to static
certificates
- ext-jwt-signers now require either kid+cert or jkwsEndpoint
- ext-jwt-signers now requires issuer and audience fields
- jwksEndpoints are initially cached and will be revalidated on invalid
auth once every 5s at most
- adds more external id tests
2022-06-07 09:57:22 -04:00
7381423974
use cmap generics, update fabric
2022-05-27 11:02:51 -04:00
c5f156dd9e
adds x509 claims support for external ids to CAs
...
- adds REST API CA external id field
- adds rest api for external fields
- refactors authentication interfaces for federation
- alters authentication moduels to return AuthResult interfaces
- allows AuthResults to provide external x509 certs as session certs
2022-05-23 13:08:16 -04:00
35cf029952
fix partial update panic for ext jwt update events
2022-05-20 14:51:09 -04:00
2a6ea4944d
adds ext jwt update event listning for jwt auth mod cache
2022-05-20 14:29:13 -04:00
ab7b2e80fd
use centralized logic to add signers for cache load and live def
2022-04-21 15:06:18 -04:00
afd39af571
fixes ext jwt startup cache to use kid not fingerprint
2022-04-21 10:15:23 -04:00
ec51635f26
adds optional issuer and audience properties to ext jwt signers
2022-04-06 15:48:17 -04:00
01bea19e1f
Update to use transport and storage libs. Use fabric config instead of foundation/config
2022-03-30 22:49:46 -04:00
ba84d2fae9
adds settable kid to ext jwt signers, fixes default auth policy
2022-03-30 13:51:23 -04:00
5129f3c8d7
adds partial authentication enforcement
...
- required ext jwt signer requires bearer token on requests
- adds auth query output for ext jwt
- enforces requireTotp auth policy
- allows partial auth to setup MFA but not remove
2022-03-30 10:10:52 -04:00
708dcfe0c9
adds auth policy / disabled identity auth logic
2022-03-29 14:26:04 -04:00
3380807334
adds ext-jwt authenticator
...
- enables /authenticate?method=ext-jwt
- adds ext-jwt to OpenAPI schema
- rebase to main, squash
2022-03-08 10:01:38 -05:00
Paul Lorenz