4 commits

Author	SHA1	Message	Date
Kenneth Jenkins	9d4d31cb4f	authorize: implement client certificate CRL check (#4439) ... Update isValidClientCertificate() to also consult the configured certificate revocation lists. Update existing test cases and add a new unit test to exercise the revocation support. Restore the skipped integration test case. Generate new test certificates and CRLs using a new `go run`-able source file.	2023-08-03 15:59:11 -07:00
Caleb Doxsey	3e892a8533	options: support multiple signing keys (#3828) ... * options: support multiple signing keys * fix controlplane method, errors	2022-12-22 09:31:09 -07:00
Caleb Doxsey	33f5190572	config: remove signature_key_algorithm (#2557) ... * config: remove signature_key_algorithm * typo * add more tests	2021-09-02 11:36:43 -06:00
Caleb Doxsey	dad35bcfb0	ppl: refactor authorize to evaluate PPL (#2224) ... * ppl: refactor authorize to evaluate PPL * remove opa test step * add log statement * simplify assignment * deny with forbidden if logged in * add safeEval function * create evaluator-specific config and options * embed the headers rego file directly	2021-05-21 09:50:18 -06:00