8 commits

Author	SHA1	Message	Date
Caleb Doxsey	38ca6d52b9	only support loading idp tokens via bearer tokens (#5545)	2025-03-26 09:47:40 -06:00
Caleb Doxsey	cb5ee48323	config: preserve existing user when creating sessions from idp token (#5502) ... * config: preserve existing user when creating sessions from idp token * fix	2025-02-27 09:05:31 -07:00
Caleb Doxsey	a9e26b155d	identity: disable session refresh for idp token sessions, fix query cache invalidation (#5495)	2025-02-24 15:33:23 -07:00
Caleb Doxsey	b9fd926618	authorize: support authenticating with idp tokens (#5484) ... * identity: add support for verifying access and identity tokens * allow overriding with policy option * authenticate: add verify endpoints * wip * implement session creation * add verify test * implement idp token login * fix tests * add pr permission * make session ids route-specific * rename method * add test * add access token test * test for newUserFromIDPClaims * more tests * make the session id per-idp * use type for * add test * remove nil checks	2025-02-18 13:02:06 -07:00
Caleb Doxsey	52d4899d4c	core/proxy: support loading sessions from headers and query string (#5291) ... * core/proxy: support loading sessions from headers and query string * update test	2024-09-19 09:23:13 -06:00
Caleb Doxsey	e5e6558de6	core/authorize: require new login when authenticate url changes (#5165)	2024-07-12 10:57:41 -06:00
Caleb Doxsey	6a9d6e45e1	config: allow blank identity providers when loading sessions for service account support (#3709)	2022-10-27 08:32:06 -06:00
Caleb Doxsey	30bdae3d9e	sessions: check idp id to detect provider changes to force session invalidation (#3707) ... * sessions: check idp id to detect provider changes to force session invalidation * remove dead code * fix test	2022-10-25 16:20:32 -06:00