mirrors/pinniped
1
0
Fork 0
mirror of https://github.com/vmware-tanzu/pinniped.git synced 2026-09-08 09:07:08 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
2,986 Commits 33 Branches 54 Tags
98b0b6b21cff5140a846746feaeb7e02b05920af
Commit Graph
2986 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Margo Crawford 98b0b6b21c One line fix to the supervisor warnings test 
Make the scopes in the cache key include the new groups scope

Signed-off-by: Margo Crawford <margaretc@vmware.com>
 2022-06-24 08:09:32 -07:00
Monis Khan f13c5e3f06 Fix supervisor scheme comment 
Signed-off-by: Monis Khan <mok@vmware.com>
 2022-06-24 09:56:44 -04:00
Mo KhanandGitHub d576e44f0a Merge pull request #1197 from vmware-tanzu/require-groups-scope 
Require groups scope
 2022-06-23 14:06:46 -04:00
Margo Crawford 8adc1ce345 Fix failing active directory integration test 
Signed-off-by: Margo Crawford <margaretc@vmware.com>
 2022-06-22 16:16:32 -07:00
Margo Crawford a010e72b29 Merge branch 'dynamic_clients' into require-groups-scope 2022-06-22 14:27:06 -07:00
Margo Crawford dac0395680 Add a couple tests, address pr comments 
Signed-off-by: Margo Crawford <margaretc@vmware.com>
 2022-06-22 14:19:55 -07:00
Margo Crawford f2005b4c7f Merge branch 'dynamic_clients' into require-groups-scope 2022-06-22 12:30:54 -07:00
Margo Crawford c70a0b99a8 Don't do ldap group search when group scope not specified 
Signed-off-by: Margo Crawford <margaretc@vmware.com>
 2022-06-22 10:58:08 -07:00
Margo Crawford 9903c5f79e Handle refresh requests without groups scope 
Signed-off-by: Margo Crawford <margaretc@vmware.com>
 2022-06-22 08:21:16 -07:00
Mo KhanandGitHub 0a2aa9338d Merge pull request #1198 from vmware-tanzu/oidcclient_controller 
New controller watches OIDCClients and updates validation Conditions
 2022-06-17 13:39:49 -04:00
Ryan RichardandMonis Khan 5aa0d91267 New controller watches OIDCClients and updates validation Conditions 2022-06-17 13:11:26 -04:00
Mo KhanandGitHub f8183e0fab Merge pull request #1199 from enj/enj/f/dynamic_clients_name_fix 
Fix TestOIDCClientStaticValidation on old servers
 2022-06-17 09:05:08 -04:00
Monis Khan 36a5c4c20d Fix TestOIDCClientStaticValidation on old servers 
Signed-off-by: Monis Khan <mok@vmware.com>
 2022-06-17 09:04:03 -04:00
Mo KhanandGitHub 4bf734061d Merge pull request #1190 from vmware-tanzu/client-secret-api-noop 
aggregated api for oidcclientsecretrequest
 2022-06-16 10:30:13 -04:00
Mo KhanandGitHub 90077f7135 Merge pull request #1195 from enj/enj/f/dynamic_clients_name 
Static validation for OIDC clients
 2022-06-16 10:29:03 -04:00
Margo Crawford 64cd8b0b9f Add e2e test for groups scope 
Signed-off-by: Margo Crawford <margaretc@vmware.com>
 2022-06-15 13:41:22 -07:00
Monis Khan 59d67322d3 Static validation for OIDC clients 
The following validation is enforced:

1. Names must start with client.oauth.pinniped.dev-
2. Redirect URIs must start with https://
   or http://127.0.0.1
   or http://::1
3. All spec lists must not have duplicates

Added an integration test to assert all static validations.

Signed-off-by: Monis Khan <mok@vmware.com>
 2022-06-15 15:09:40 -04:00
Margo Crawford ff26c424ae Remove unused role binding 
Signed-off-by: Margo Crawford <margaretc@vmware.com>
 2022-06-15 10:19:56 -07:00
Margo Crawford 424f925a14 Merge branch 'dynamic_clients' into client-secret-api-noop 2022-06-15 09:38:55 -07:00
Margo Crawford c117329553 Updates based on code review 
Signed-off-by: Margo Crawford <margaretc@vmware.com>
 2022-06-15 09:38:21 -07:00
Margo Crawford 4d0c2e16f4 require groups scope to get groups back from supervisor 
Signed-off-by: Margo Crawford <margaretc@vmware.com>
 2022-06-15 08:00:17 -07:00
Mo KhanandGitHub c77bee67c1 Merge pull request #1189 from vmware-tanzu/token_exchange_aud 
Disallow certain requested audience strings in token exchange
 2022-06-14 16:41:51 -04:00
Margo Crawford c95efad180 Merge branch 'dynamic_clients' into client-secret-api-noop 
Signed-off-by: Margo Crawford <margaretc@vmware.com>
 2022-06-13 17:12:00 -07:00
Ryan RichardandGitHub 268e1108d1 Merge pull request #1194 from vmware-tanzu/config_oidcclient 
Move oidcclient into config.supervisor.pinniped.dev
 2022-06-13 16:03:05 -07:00
Margo Crawford 104e08b0f6 Merge branch 'dynamic_clients' into client-secret-api-noop 2022-06-13 15:52:34 -07:00
Margo Crawford 0c1f48cbc1 Move oidcclient into config.supervisor.pinniped.dev 
Signed-off-by: Margo Crawford <margaretc@vmware.com>
 2022-06-13 15:48:54 -07:00
Margo Crawford 8f4285dbff Change group names 
Signed-off-by: Margo Crawford <margaretc@vmware.com>
 2022-06-13 14:28:05 -07:00
Ryan Richard aceea7888b Merge branch 'main' into dynamic_clients 2022-06-13 12:29:09 -07:00
Ryan Richard b9272b2729 Reserve all of *.pinniped.dev for requested aud in token exchanges 
Our previous plan was to reserve only *.oauth.pinniped.dev but we
changed our minds during PR review.
 2022-06-13 12:08:11 -07:00
Margo Crawford ba371423d9 Add integration test for OIDCClientSecretRequest 
Signed-off-by: Margo Crawford <margaretc@vmware.com>
 2022-06-10 13:56:15 -07:00
Margo CrawfordandGitHub 018bdacc6d Merge pull request #1191 from vmware-tanzu/codegen-docker-pull-always 
Always attempt to docker pull before codegen
 2022-06-10 13:31:47 -07:00
Ryan Richard e7096c61a8 Merge branch 'main' into dynamic_clients 2022-06-10 12:52:59 -07:00
Margo Crawford b3ad29fe1c Always attempt to docker pull before codegen 
Signed-off-by: Margo Crawford <margaretc@vmware.com>
 2022-06-10 12:26:40 -07:00
Margo Crawford 479b6c421d fix out of date codegen images 
Signed-off-by: Margo Crawford <margaretc@vmware.com>
 2022-06-10 09:51:37 -07:00
Margo Crawford 157b5a7079 Update 1.24 codegen 
Signed-off-by: Margo Crawford <margaretc@vmware.com>
 2022-06-10 07:55:46 -07:00
Margo Crawford 37884e7015 reran update.sh to get the codegen up to date 
Signed-off-by: Margo Crawford <margaretc@vmware.com>
 2022-06-09 14:39:06 -07:00
Margo Crawford 889348e999 WIP aggregated api for oidcclientsecretrequest 
Signed-off-by: Margo Crawford <margaretc@vmware.com>
 2022-06-09 13:47:19 -07:00
Ryan RichardandGitHub 484c8f4bf3 Merge pull request #1183 from anjaltelang/main 
Blog for v0.18.0
 2022-06-08 15:14:31 -07:00
Ryan RichardandGitHub 221f174768 Update v0.18.0 blog post date 2022-06-08 15:14:02 -07:00
Pinny 3ebf5ad4c3 Updated versions in docs for v0.18.0 release 2022-06-08 22:13:13 +00:00
Ryan Richard ec533cd781 Skip some recently added integration tests when LDAP is unavailable 
Also refactor to use shared test helper for skipping LDAP and AD tests.
v0.18.0 		2022-06-08 12:57:00 -07:00
Ryan Richard dd61ada540 Allow new warning messages about GCP plugin in TestGetPinnipedCategory 2022-06-08 10:22:15 -07:00
Ryan Richard 0b6b8b4fcd Merge branch 'dynamic_clients' into token_exchange_aud 2022-06-08 09:58:38 -07:00
Ryan Richard 77f37b5a57 run codegen 2022-06-08 09:41:35 -07:00
Ryan Richard 321abfc98d Merge branch 'dynamic_clients' into token_exchange_aud 2022-06-08 09:03:29 -07:00
Ryan Richard 97d17bbda8 Merge branch 'main' into dynamic_clients 2022-06-08 09:03:06 -07:00
Mo KhanandGitHub cc1163e326 Merge pull request #1179 from vmware-tanzu/auth_handler_form_post_csp 
Fix bug in certain error handling for authorize endpoint when response_mode=form_post is requested
 2022-06-08 08:47:56 -04:00
Ryan Richard ea45e5dfef Disallow certain requested audience strings in token exchange 2022-06-07 16:32:19 -07:00
Mo KhanandGitHub 472ab229e7 Merge branch 'main' into auth_handler_form_post_csp 2022-06-07 18:26:52 -04:00
Mo KhanandGitHub 2c7b52dce8 Merge pull request #1186 from vmware-tanzu/bump_deps 
Bump all project dependencies
 2022-06-07 18:25:12 -04:00