6 commits

Author	SHA1	Message	Date
Caleb Doxsey	b9fd926618	authorize: support authenticating with idp tokens (#5484) ... * identity: add support for verifying access and identity tokens * allow overriding with policy option * authenticate: add verify endpoints * wip * implement session creation * add verify test * implement idp token login * fix tests * add pr permission * make session ids route-specific * rename method * add test * add access token test * test for newUserFromIDPClaims * more tests * make the session id per-idp * use type for * add test * remove nil checks	2025-02-18 13:02:06 -07:00
Joe Kralicky	396c35b6b4	New tracing system (#5388) ... * update tracing config definitions * new tracing system * performance improvements * only configure tracing in envoy if it is enabled in pomerium * [tracing] refactor to use custom extension for trace id editing (#5420) refactor to use custom extension for trace id editing * set default tracing sample rate to 1.0 * fix proxy service http middleware * improve some existing auth related traces * test fixes * bump envoyproxy/go-control-plane * code cleanup * test fixes * Fix missing spans for well-known endpoints * import extension apis from pomerium/envoy-custom	2025-01-21 13:26:32 -05:00
Caleb Doxsey	d225288ab3	core/identity: dynamic authenticator registration (#5105)	2024-05-07 16:45:39 -06:00
Caleb Doxsey	c178819875	move directory providers (#3633) ... * remove directory providers and support for groups * idp: remove directory providers * better error messages * fix errors * restore postgres * fix test	2022-11-03 11:33:56 -06:00
Caleb Doxsey	86625a4ddb	config: support files for shared_secret, client_secret, cookie_secret and signing_key (#3453)	2022-06-29 10:44:08 -06:00
Caleb Doxsey	f9b95a276b	authenticate: support for per-route client id and client secret (#3030) ... * implement dynamic provider support * authenticate: support per-route client id and secret	2022-02-16 12:31:55 -07:00