pomerium/authorize
Kenneth Jenkins d45a5d1bee config: move mTLS settings to new struct
Move downstream mTLS settings to a nested config file object, under the
key 'downstream_mtls', and add a new DownstreamMTLSSettings struct for
these settings.

Deprecate the existing ClientCA and ClientCAFile fields in the Options
struct, but continue to honor them for now (log a warning if either is
populated).

Delete the ClientCRL and ClientCRLFile fields entirely (in current
releases these cannot be set without causing an Envoy error, so this
should not be a breaking change).

Update the Settings proto to mirror this nested structure.
2023-08-07 12:40:31 -07:00
..
evaluator authorize: implement client certificate CRL check (#4439) 2023-08-03 15:59:11 -07:00
internal/store authorize: move sign out and jwks urls to route, update issuer for JWT (#4046) 2023-03-08 12:40:15 -07:00
access_tracker.go sets: convert set types to generics (#3519) 2022-07-29 12:32:17 -06:00
access_tracker_test.go databroker: add support for putting multiple records (#3291) 2022-04-26 16:41:38 -06:00
authorize.go config: move mTLS settings to new struct 2023-08-07 12:40:31 -07:00
authorize_test.go log context (#2107) 2021-04-22 10:58:13 -04:00
check_response.go authorize: add "client-certificate-required" reason (#4389) 2023-07-25 10:03:51 -07:00
check_response_test.go authorize: add "client-certificate-required" reason (#4389) 2023-07-25 10:03:51 -07:00
databroker.go authorize: fix user caching (#3734) 2022-11-08 08:23:41 -07:00
databroker_test.go authorize: fix user caching (#3734) 2022-11-08 08:23:41 -07:00
grpc.go authorize: do not rely on Envoy client cert validation (#4438) 2023-08-03 10:45:55 -07:00
grpc_test.go authorize: do not rely on Envoy client cert validation (#4438) 2023-08-03 10:45:55 -07:00
log.go authorize: log id token claims separately from id token (#4394) 2023-07-26 11:45:10 -06:00
log_test.go authorize: log id token claims separately from id token (#4394) 2023-07-26 11:45:10 -06:00
state.go authenticate: fix authenticate_internal_service_url for all in one (#4003) 2023-02-22 10:42:27 -05:00