Caleb Doxsey
|
7d236ca1af
|
authorize: move headers and jwt signing to rego (#1856)
* wip
* wip
* wip
* remove SignedJWT field
* set google_cloud_serverless_authentication_service_account
* update jwt claim headers
* add mock get_google_cloud_serverless_headers for opa test
* swap issuer and audience
* add comment
* change default port in authz
|
2021-02-08 10:53:21 -07:00 |
|
Caleb Doxsey
|
eed873b263
|
authorize: remove DataBrokerData (#1846)
* authorize: remove DataBrokerData
* fix method name
|
2021-02-02 11:40:21 -07:00 |
|
Caleb Doxsey
|
cc85ea601d
|
policy: add new certificate-authority option for downstream mTLS client certificates (#1835)
* policy: add new certificate-authority option for downstream mTLS client certificates
* update proto, docs
|
2021-02-01 08:10:32 -07:00 |
|
Caleb Doxsey
|
a6bc9f492f
|
authorize: move impersonation into session/service account (#1765)
* move impersonation into session/service account
* replace frontend statik
* fix data race
* move JWT filling to separate function, break up functions
* maybe fix data race
* fix code climate issue
|
2021-01-11 15:40:08 -07:00 |
|