Joe Kralicky
5464cda90e
Add an 'issuer' field to the /.well-known/pomerium endpoint ( #5344 )
...
The field contains the route's base uri, including the https:// scheme
and ending with a trailing slash.
2024-10-25 13:07:57 -04:00
Caleb Doxsey
fd086bd06b
core/ui: fix cycle in profile data ( #5168 )
2024-07-09 17:05:12 -06:00
Caleb Doxsey
815353ab67
core/userinfo: remove excess userinfo data ( #5137 )
2024-06-25 21:12:53 +02:00
Caleb Doxsey
1a5b8b606f
core/lint: upgrade golangci-lint, replace interface{} with any ( #5099 )
...
* core/lint: upgrade golangci-lint, replace interface{} with any
* regen proto
2024-05-02 14:33:52 -06:00
Kenneth Jenkins
e8edb465f4
authenticate: apply branding to sign out pages ( #5044 )
...
Add support for the Enterprise branding options to the sign_out and
signed_out page handlers.
2024-04-01 11:32:29 -07:00
Caleb Doxsey
c6d1f17100
core/ui: fix page title ( #4957 )
...
* core/ui: fix page title
* cache template
2024-02-12 14:05:18 -07:00
Caleb Doxsey
3adbc65d37
core/authenticate: refactor identity authenticators to initiate redirect ( #4858 )
...
* core/authenticate: refactor identity authenticators to initiate redirect, use cookie for redirect url for cognito
* set secure and http only, update test
2023-12-19 12:04:23 -07:00
Kenneth Jenkins
ab104a643a
rework session updates to use new patch method ( #4705 )
...
Update the AccessTracker, WebAuthn handlers, and identity manager
refresh loop to perform their session record updates using the
databroker Patch() method.
This should prevent any of these updates from conflicting.
2023-11-06 09:43:07 -08:00
Caleb Doxsey
a0c92896ef
core/authenticate: refactor idp sign out ( #4582 )
2023-09-28 08:41:19 -07:00
Caleb Doxsey
bbed421cd8
config: remove source, remove deadcode, fix linting issues ( #4118 )
...
* remove source, remove deadcode, fix linting issues
* use github action for lint
* fix missing envoy
2023-04-21 17:25:11 -06:00
Denis Mishin
ccf15f8f3d
move hpke public key handler out of internal ( #4065 )
2023-03-20 10:37:00 -04:00
Caleb Doxsey
1dee325b72
authorize: move sign out and jwks urls to route, update issuer for JWT ( #4046 )
...
* authorize: move sign out and jwks urls to route, update issuer for JWT
* fix test
2023-03-08 12:40:15 -07:00
Caleb Doxsey
0f295d4a63
hpke: move published public keys to a new endpoint ( #4044 )
2023-03-08 09:17:04 -07:00
Caleb Doxsey
2b8d51def5
urlutil: add version to query string ( #4028 )
2023-02-28 14:01:13 -07:00
Caleb Doxsey
88915a79c1
use deterministicecdsa to fix test ( #4012 )
2023-02-24 08:35:48 -07:00
Caleb Doxsey
7a405abea1
maybe fix flaky test ( #3929 )
2023-02-02 11:31:30 -07:00
Caleb Doxsey
3e892a8533
options: support multiple signing keys ( #3828 )
...
* options: support multiple signing keys
* fix controlplane method, errors
2022-12-22 09:31:09 -07:00
Caleb Doxsey
c86ca6f76f
webauthn: require session when accessing /.pomerium/webauthn ( #3814 )
...
* webauthn: require session when accessing /.pomerium/webauthn
* remove dead code
* remove unusued PomeriumDomains field
2022-12-16 10:59:21 -07:00
Caleb Doxsey
57217af7dd
authenticate: implement hpke-based login flow ( #3779 )
...
* urlutil: add time validation functions
* authenticate: implement hpke-based login flow
* fix import cycle
* fix tests
* log error
* fix callback url
* add idp param
* fix test
* fix test
2022-12-05 15:31:07 -07:00
Caleb Doxsey
ba07afc245
hpke: add HPKE key to JWKS endpoint ( #3762 )
...
* hpke: add HPKE key to JWKS endpoint
* fix test, add http caching headers
* fix error message
* use pointers
2022-11-23 08:45:59 -07:00
Caleb Doxsey
c1a522cd82
proxy: add userinfo and webauthn endpoints ( #3755 )
...
* proxy: add userinfo and webauthn endpoints
* use TLD for RP id
* use EffectiveTLDPlusOne
* upgrade webauthn
* fix test
* Update internal/handlers/jwks.go
Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
2022-11-22 10:26:35 -07:00
