Monis Khan 59d67322d3 Static validation for OIDC clients ... The following validation is enforced: 1. Names must start with client.oauth.pinniped.dev- 2. Redirect URIs must start with https:// or http://127.0.0.1 or http://::1 3. All spec lists must not have duplicates Added an integration test to assert all static validations. Signed-off-by: Monis Khan <mok@vmware.com>		2022-06-15 15:09:40 -04:00
..
auth	Use CSP headers in auth handler response	2022-06-02 09:23:34 -07:00
callback	Login page styling/structure for users, screen readers, passwd managers	2022-05-05 13:13:25 -07:00
clientregistry	Add "response_mode=form_post" to CLI client.	2021-07-09 12:08:42 -05:00
csrftoken	Add some trivial unit tests to internal/oidc/csrftoken.	2021-02-02 09:38:17 -06:00
discovery	add a code comment	2022-04-19 11:35:46 -07:00
downstreamsession	Implement post_login_handler.go to accept form post and auth to LDAP/AD	2022-04-29 16:02:00 -07:00
dynamiccodec	internal/oidc/dynamiccodec: loosen test to reduce flakes	2020-12-11 11:49:27 -05:00
idpdiscovery	Advertise browser_authcode flow in ldap idp discovery	2022-04-25 14:54:21 -07:00
jwks	WIP: start to wire signing key into token handler	2020-12-03 15:37:25 -05:00
login	Small refactors and comments for LDAP/AD UI	2022-05-19 16:02:08 -07:00
provider	Bump project deps, including kube 0.23.6->0.24.1 and Go 1.18.1->1.18.3	2022-06-07 15:26:30 -04:00
token	Reserve all of *.pinniped.dev for requested aud in token exchanges	2022-06-13 12:08:11 -07:00
dynamic_oauth2_hmac_strategy.go	Add custom prefix to downstream access and refresh tokens and authcodes	2022-04-13 10:13:27 -07:00
dynamic_oauth2_hmac_strategy_test.go	Add custom prefix to downstream access and refresh tokens and authcodes	2022-04-13 10:13:27 -07:00
dynamic_open_id_connect_ecdsa_strategy.go	Implement upstream LDAP support in auth_handler.go	2021-04-08 17:28:01 -07:00
dynamic_open_id_connect_ecdsa_strategy_test.go	Implement upstream LDAP support in auth_handler.go	2021-04-08 17:28:01 -07:00
kube_storage.go	Changes for Fosite's new RevokeRefreshTokenMaybeGracePeriod() interface	2022-01-19 13:57:01 -08:00
nullstorage.go	Changes for Fosite's new RevokeRefreshTokenMaybeGracePeriod() interface	2022-01-19 13:57:01 -08:00
oidc.go	Static validation for OIDC clients	2022-06-15 15:09:40 -04:00
token_exchange.go	Reserve all of *.pinniped.dev for requested aud in token exchanges	2022-06-13 12:08:11 -07:00