Andrew Martinez e7cb15d632 backport openziti/ziti#4222 to release-v2.0.x report isCertExtendable correctly for OIDC cert auth (#4226) ...

- removes a stray assignment that overwrote isCertExtendable with a literal true on every OIDC certificate authentication
- reports isCertExtendable as false over OIDC for cert authenticators not issued by the network, matching legacy cert auth
- adds coverage asserting the z_ice claim and current-api-session both report a 3rd party CA certificate as not extendable

2026-08-26 15:59:37 -04:00

..

resources

adds support OIDC authentication, api access, and ER connections

2023-07-20 09:41:12 -04:00

client.go

fixes #3788 return proper OIDC error codes and HTTP status codes (#3790)

2026-04-14 16:44:06 -04:00

config.go

Enforce api-session and identity revocations on the router. Fixes #3929

2026-06-24 15:42:01 -04:00

ctx.go

fixes #3809 support CSR submission during OIDC authentication (#3840)

2026-05-07 13:56:48 -04:00

errors.go

fixes openziti/ziti#3356 adds www-authenticate headers (#3561)

2026-02-24 10:01:36 -05:00

issuer.go

fixes #2737 open-id config issuer mismatch (#2782)

2025-02-11 16:59:03 -05:00

key.go

Optimize imports

2026-01-28 15:01:35 -05:00

login.go

fixes #3809 support CSR submission during OIDC authentication (#3840)

2026-05-07 13:56:48 -04:00

negotiate_test.go

Optimize imports

2026-01-28 15:01:35 -05:00

negotiate.go

fixes openziti/ziti#3356 adds www-authenticate headers (#3561)

2026-02-24 10:01:36 -05:00

parse_test.go

fixes #3809 support CSR submission during OIDC authentication (#3840)

2026-05-07 13:56:48 -04:00

parse.go

fixes #3809 support CSR submission during OIDC authentication (#3840)

2026-05-07 13:56:48 -04:00

provider.go

backport fixes GHSA-q8g9-jc4c-jp6q to v2.0 limit pre-auth request body buffering

2026-08-19 17:46:02 -04:00

render.go

backport fixes GHSA-q8g9-jc4c-jp6q to v2.0 limit pre-auth request body buffering

2026-08-19 17:46:02 -04:00

requests.go

fixes #3809 support CSR submission during OIDC authentication (#3840)

2026-05-07 13:56:48 -04:00

revocation_batcher.go

Coalesce OIDC JWT revocations to reduce controller write pressure. Fixes #3681

2026-03-19 08:35:00 -04:00

server.go

fixes #3809 support CSR submission during OIDC authentication (#3840)

2026-05-07 13:56:48 -04:00

storage.go

backport openziti/ziti#4222 to release-v2.0.x report isCertExtendable correctly for OIDC cert auth (#4226)

2026-08-26 15:59:37 -04:00

verify_test.go

fixes #3809 support CSR submission during OIDC authentication (#3840)

2026-05-07 13:56:48 -04:00

verify.go

fixes #3809 support CSR submission during OIDC authentication (#3840)

2026-05-07 13:56:48 -04:00