pomerium/authorize/evaluator
backport-actions-token[bot] 1815dea9f9
authorize: filter only by group ID (#5452)
authorize: filter only by group ID (#5437)

Change the JWT groups filtering behavior:
- to filter only by group ID (not group name)
- and only for groups sourced from directory sync (groups from a 
  "groups" claim will not be filtered)

This avoids the need to fetch all group names up front, which should 
improve performance in specific circumstances.

Co-authored-by: Kenneth Jenkins <51246568+kenjenkins@users.noreply.github.com>
2025-01-28 12:16:45 -08:00
..
config.go authorize: add filter options for JWT groups (#5417) (#5426) 2025-01-14 14:38:33 -08:00
evaluator.go authorize: add filter options for JWT groups (#5417) (#5426) 2025-01-14 14:38:33 -08:00
evaluator_test.go authorize: add filter options for JWT groups (#5417) (#5426) 2025-01-14 14:38:33 -08:00
functions.go logging: remove ctx from global log methods (#5337) 2024-10-23 14:18:52 -06:00
functions_test.go add mTLS UserPrincipalName SAN match (#5177) 2024-07-26 10:23:19 -07:00
gen-test-certs.go add mTLS UserPrincipalName SAN match (#5177) 2024-07-26 10:23:19 -07:00
google_cloud_serverless.go core/logging: change log.Error function (#5251) 2024-09-05 15:42:46 -06:00
google_cloud_serverless_test.go authorize: move headers and jwt signing to rego (#1856) 2021-02-08 10:53:21 -07:00
headers_evaluator.go authorize: add filter options for JWT groups (#5417) (#5426) 2025-01-14 14:38:33 -08:00
headers_evaluator_evaluation.go authorize: filter only by group ID (#5452) 2025-01-28 12:16:45 -08:00
headers_evaluator_test.go authorize: filter only by group ID (#5452) 2025-01-28 12:16:45 -08:00
log.go core/authorize: add support for rego print statements (#5049) 2024-04-01 14:17:14 -06:00
log_test.go core/authorize: add support for rego print statements (#5049) 2024-04-01 14:17:14 -06:00
policy_evaluator.go Fix many instances of contexts and loggers not being propagated (#5340) 2024-10-25 14:50:56 -04:00
policy_evaluator_test.go config: add new mTLS enforcement setting (#4443) 2023-08-09 07:53:11 -07:00