Ryan Richard 0bb2c7beb7 Always add the azp claim to ID tokens to show the original client ID ... When the token exchange grant type is used to get a cluster-scoped ID token, the returned token has a new audience value. The client ID of the client which performed the authorization was lost. This didn't matter before, since the only client was `pinniped-cli`, but now that dynamic clients can be registered, the information would be lost in the cluster-scoped ID token. It could be useful for logging, tracing, or auditing, so preserve the information by putting the client ID into the `azp` claim in every ID token (authcode exchange, clsuter-scoped, and refreshed ID tokens).		2022-08-09 16:07:23 -07:00
..
category_test.go	Allow new warning messages about GCP plugin in TestGetPinnipedCategory	2022-06-08 10:22:15 -07:00
cli_test.go	Extract browsertest.LoginToUpstreamLDAP() integration test helper	2022-05-09 15:43:36 -07:00
concierge_api_serving_certs_test.go	test/integration: mark certain tests as disruptive	2021-08-26 15:11:47 -04:00
concierge_availability_test.go	Fix bad test package name	2021-06-22 11:23:19 -04:00
concierge_client_test.go	Fix bad test package name	2021-06-22 11:23:19 -04:00
concierge_credentialissuer_test.go	Fix bad test package name	2021-06-22 11:23:19 -04:00
concierge_credentialrequest_test.go	Merge branch 'main' into proposal_process	2022-02-17 10:07:37 -08:00
concierge_impersonation_proxy_test.go	Introduce FIPS compatibility	2022-03-29 16:58:41 -07:00
concierge_kubecertagent_test.go	Update TestKubeCertAgent to use new "v3" label value	2021-09-15 11:09:07 -07:00
concierge_kubectl_test.go	test/integration: run parallel tests concurrently with serial tests	2021-08-26 12:59:52 -04:00
controllerinit_test.go	Ensure concierge and supervisor gracefully exit	2021-08-30 20:29:52 -04:00
e2e_test.go	Create username scope, required for clients to get username in ID token	2022-08-08 16:29:22 -07:00
formposthtml_test.go	Enforce naming convention for browser based tests	2022-02-16 09:20:28 -05:00
kube_api_discovery_test.go	Configure printer columns for OIDCClient CRD	2022-07-21 16:40:03 -07:00
kubeclient_test.go	Fix bad test package name	2021-06-22 11:23:19 -04:00
ldap_client_test.go	Don't do ldap group search when group scope not specified	2022-06-22 10:58:08 -07:00
leaderelection_test.go	leader election test: approximate that followers have observed change	2021-08-26 12:59:52 -04:00
main_test.go	Allow focused integration tests to be run from the GoLand UI again	2021-09-21 12:04:45 -07:00
rbac_test.go	Fix bad test package name	2021-06-22 11:23:19 -04:00
securetls_fips_test.go	Remove duplication in secure TLS tests	2022-04-01 10:56:38 -04:00
securetls_test.go	Remove duplication in secure TLS tests	2022-04-01 10:56:38 -04:00
supervisor_discovery_test.go	Create username scope, required for clients to get username in ID token	2022-08-08 16:29:22 -07:00
supervisor_healthz_test.go	Rework or remove tests that rely on the http port	2022-03-10 19:43:12 -05:00
supervisor_login_test.go	Always add the azp claim to ID tokens to show the original client ID	2022-08-09 16:07:23 -07:00
supervisor_oidc_client_test.go	Add more unit tests for dynamic clients and enhance token exchange	2022-07-20 13:55:56 -07:00
supervisor_oidcclientsecret_test.go	Change group names	2022-06-13 14:28:05 -07:00
supervisor_secrets_test.go	test/integration: run parallel tests concurrently with serial tests	2021-08-26 12:59:52 -04:00
supervisor_storage_garbage_collection_test.go	test/integration: run parallel tests concurrently with serial tests	2021-08-26 12:59:52 -04:00
supervisor_storage_test.go	Fix bad test package name	2021-06-22 11:23:19 -04:00
supervisor_upstream_test.go	TestSupervisorUpstreamOIDCDiscovery: include AdditionalAuthorizeParametersValid condition	2021-10-25 10:21:51 -04:00
supervisor_warnings_test.go	Create username scope, required for clients to get username in ID token	2022-08-08 16:29:22 -07:00
whoami_test.go	Tests use CertificatesV1 when available, otherwise use CertificatesV1beta1	2021-09-20 17:14:58 -07:00