7 Commits

Author	SHA1	Message	Date
Ryan Richard	1f146f905a	Add struct field for storing upstream access token in downstream session	2022-01-12 18:03:25 -08:00
Margo Crawford	2958461970	Addressing PR feedback ... store issuer and subject in storage for refresh Clean up some constants Signed-off-by: Margo Crawford <margaretc@vmware.com>	2022-01-10 11:03:37 -08:00
Margo Crawford	59d999956c	Move ad specific stuff to controller ... also make extra refresh attributes a separate field rather than part of Extra Signed-off-by: Margo Crawford <margaretc@vmware.com>	2021-12-09 16:16:36 -08:00
Margo Crawford	acaad05341	Make pwdLastSet stuff more generic and not require parsing the timestamp ... Signed-off-by: Margo Crawford <margaretc@vmware.com>	2021-12-09 16:16:36 -08:00
Margo Crawford	19281313dd	Basic upstream LDAP/AD refresh ... This stores the user DN in the session data upon login and checks that the entry still exists upon refresh. It doesn't check anything else about the entry yet.	2021-11-05 14:22:42 -07:00
Margo Crawford	1bd346cbeb	Require refresh tokens for upstream OIDC and save more session data ... - Requiring refresh tokens to be returned from upstream OIDC idps - Storing refresh tokens (for oidc) and idp information (for all idps) in custom session data during authentication - Don't pass access=offline all the time	2021-10-08 15:48:21 -07:00
Ryan Richard	c6f1d29538	Use PinnipedSession type instead of fosite's DefaultSesssion type ... This will allow us to store custom data inside the fosite session storage for all downstream OIDC sessions. Signed-off-by: Margo Crawford <margaretc@vmware.com>	2021-10-06 15:28:13 -07:00