pomerium/authorize/evaluator
Kenneth Jenkins dbedfc586f
add mTLS UserPrincipalName SAN match (#5177)
Add a new 'user_principal_name' type to the downstream mTLS
match_subject_alt_names option. This corresponds to the 'OtherName' type
with type-id 1.3.6.1.4.1.311.20.2.3 and a UTF8String value.
Add support for UserPrincipalName SAN matching to the policy evaluator.
2024-07-26 10:23:19 -07:00
..
opa core/authorize: use uuid for jti, current time for iat and exp (#5147) 2024-06-25 11:31:00 -06:00
config.go authorize: reuse policy evaluators where possible (#4710) 2023-11-06 13:57:59 -08:00
evaluator.go core/logging: less verbose logs (#5040) 2024-03-29 15:26:20 -06:00
evaluator_test.go core/ci: update linting (#4844) 2023-12-14 09:07:54 -08:00
functions.go add mTLS UserPrincipalName SAN match (#5177) 2024-07-26 10:23:19 -07:00
functions_test.go add mTLS UserPrincipalName SAN match (#5177) 2024-07-26 10:23:19 -07:00
gen-test-certs.go add mTLS UserPrincipalName SAN match (#5177) 2024-07-26 10:23:19 -07:00
google_cloud_serverless.go core/lint: upgrade golangci-lint, replace interface{} with any (#5099) 2024-05-02 14:33:52 -06:00
google_cloud_serverless_test.go authorize: move headers and jwt signing to rego (#1856) 2021-02-08 10:53:21 -07:00
headers_evaluator.go core/ui: add user info link (#5158) 2024-06-28 14:07:24 -06:00
headers_evaluator_test.go add mTLS UserPrincipalName SAN match (#5177) 2024-07-26 10:23:19 -07:00
log.go core/authorize: add support for rego print statements (#5049) 2024-04-01 14:17:14 -06:00
log_test.go core/authorize: add support for rego print statements (#5049) 2024-04-01 14:17:14 -06:00
policy_evaluator.go core/lint: upgrade golangci-lint, replace interface{} with any (#5099) 2024-05-02 14:33:52 -06:00
policy_evaluator_test.go config: add new mTLS enforcement setting (#4443) 2023-08-09 07:53:11 -07:00