Commit Graph

  • 1092fc4a9e Add PR link to LDAP UI proposal Ryan Richard 2022-05-16 16:21:17 -07:00
  • dc6874e9cd Move remaining open q's to answered q's Ryan Richard 2022-05-16 16:20:42 -07:00
  • 0f2a984308 Merge branch 'main' into ldap-login-ui Ryan Richard 2022-05-11 11:32:15 -07:00
  • 4101a55001 Update docs for new LDAP/AD browser-based login flow Ryan Richard 2022-05-11 11:19:08 -07:00
  • aa732a41fb Add LDAP browser flow login failure tests to supervisor_login_test.go Ryan Richard 2022-05-10 16:22:07 -07:00
  • 0b106c245e Add LDAP browser flow login test to supervisor_login_test.go Ryan Richard 2022-05-10 12:54:40 -07:00
  • ab302cf2b7 Add AD via browser login e2e test and refactor e2e tests to share code Ryan Richard 2022-05-10 10:30:32 -07:00
  • a4e32d8f3d Extract browsertest.LoginToUpstreamLDAP() integration test helper Ryan Richard 2022-05-09 15:43:36 -07:00
  • 831abc315e Update audit log proposal key names and timestamp format Ryan Richard 2022-05-09 14:45:18 -07:00
  • 6bb34130fe Add asymmetric crypto based client secret generation Monis Khan 2022-05-09 15:58:52 -04:00
  • 22aea6ab9d Address some small comments to make the doc more understandable Margo Crawford 2022-05-09 12:55:32 -07:00
  • 58f8a10919 Add data model and secret generation alternatives Monis Khan 2022-05-09 00:05:06 -04:00
  • 1c4ed8b404 Add recommendation for solving the audience confusion problem Monis Khan 2022-05-06 18:08:24 -04:00
  • afc73221d6 Updated versions in docs for v0.17.0 release Pinny 2022-05-06 19:28:56 +00:00
  • 4c44f583e9 Don't add pinniped_idp_name pinniped_idp_type params into upstream state Ryan Richard 2022-05-06 12:00:46 -07:00
  • 408e390094 Add more detail on how we should display errors Margo Crawford 2022-05-06 11:00:01 -07:00
  • ec22b5715b Add Pinniped favicon to login UI page 🦭 Ryan Richard 2022-05-05 14:46:07 -07:00
  • 6e6e1f4add Update login page CSS selectors in e2e test Ryan Richard 2022-05-05 13:56:38 -07:00
  • 00d68845c4 Add --flow to choose login flow in prepare-supervisor-on-kind.sh Ryan Richard 2022-05-05 13:42:23 -07:00
  • cffa353ffb Login page styling/structure for users, screen readers, passwd managers Ryan Richard 2022-05-05 13:12:06 -07:00
  • 6ca7c932ae Add unit test for rendering form_post response from POST /login Ryan Richard 2022-05-04 12:12:14 -07:00
  • b458cd43b9 Merge pull request #1159 from vmware-tanzu/fix-openldap-typo v0.17.0 Margo Crawford 2022-05-05 12:50:43 -07:00
  • 07a3faf449 Merge branch 'main' into fix-openldap-typo Margo Crawford 2022-05-05 10:51:09 -07:00
  • 329d41aac7 Add the full end to end test for ldap web ui Margo Crawford 2022-05-05 08:49:58 -07:00
  • 079908fb50 Update to reflect further conversations we've had Margo Crawford 2022-05-04 13:28:54 -07:00
  • 1a59b6a686 Update ROADMAP.md anjalitelang 2022-05-04 16:06:33 -04:00
  • eb891d77a5 Tiny fix: pinninpeds->pinnipeds Margo Crawford 2022-05-04 12:42:55 -07:00
  • 572474605f Merge pull request #1151 from vmware-tanzu/more_unit_tests_for_ldap_escaping Ryan Richard 2022-05-04 09:49:20 -07:00
  • 656f221fb7 Merge branch 'main' into ldap-login-ui Ryan Richard 2022-05-04 09:29:15 -07:00
  • a36688573b Merge pull request #1150 from vmware-tanzu/prepare_supervisor_on_kind_active_directory Ryan Richard 2022-05-04 09:16:13 -07:00
  • 2e031f727b Use security headers for the form_post page in the POST /login endpoint Ryan Richard 2022-05-03 16:46:09 -07:00
  • acc6c50e48 More unit tests for LDAP DNs which contain special chars Ryan Richard 2022-05-03 15:43:01 -07:00
  • 388cdb6ddd Fix bug where form was posting to the wrong path Margo Crawford 2022-05-03 15:18:38 -07:00
  • eaa87c7628 support AD in hack/prepare-supervisor-on-kind.sh Ryan Richard 2022-05-03 12:59:39 -07:00
  • d6e61012c6 Merge pull request #1149 from vmware-tanzu/update_kube_versions Ryan Richard 2022-05-02 15:35:49 -07:00
  • cc1f0b8db9 Merge pull request #1148 from vmware-tanzu/ldap_group_search_escape Ryan Richard 2022-05-02 14:44:45 -07:00
  • 90e88bb83c Update kube codegen versions Ryan Richard 2022-05-02 14:33:33 -07:00
  • 2ad181c7dd Merge branch 'main' into ldap_group_search_escape Ryan Richard 2022-05-02 13:49:55 -07:00
  • ee881aa406 Merge pull request #1146 from enj/enj/i/bump_0007 Mo Khan 2022-05-02 16:44:49 -04:00
  • c74dea6405 Escape special characters in LDAP DNs when used in search filters Ryan Richard 2022-05-02 13:37:32 -07:00
  • dfbc33b933 Apply suggestions from code review Ryan Richard 2022-05-02 09:47:09 -07:00
  • 69e5169fc5 Implement post_login_handler.go to accept form post and auth to LDAP/AD Ryan Richard 2022-04-29 16:01:51 -07:00
  • 56c8b9f884 Add recommendations to dynamic client proposal Ryan Richard 2022-04-29 12:48:03 -07:00
  • 646c6ec9ed Show error message on login page Margo Crawford 2022-04-29 10:36:13 -07:00
  • 2cdb55e7da Bump deps to latest and go mod compat to 1.17 Monis Khan 2022-04-28 15:31:50 -04:00
  • 453c69af7d Fix some errors and pass state as form element Margo Crawford 2022-04-28 12:07:04 -07:00
  • 07b2306254 Add basic outline of login get handler Margo Crawford 2022-04-28 09:11:51 -07:00
  • 77f016fb64 Allow browser_authcode flow for pinniped login command Margo Crawford 2022-04-27 08:53:53 -07:00
  • ae60d4356b Some refactoring of shared code between OIDC and LDAP browser flows Margo Crawford 2022-04-27 08:51:37 -07:00
  • 379a803509 when password header but not username is sent to password grant, error Margo Crawford 2022-04-26 16:46:58 -07:00
  • 65eed7e742 Implement login_handler.go to defer to other handlers Ryan Richard 2022-04-26 15:30:39 -07:00
  • eb1d3812ec Update authorization endpoint to redirect to new login page Margo Crawford 2022-04-26 12:51:56 -07:00
  • 8832362b94 WIP: Add login handler for LDAP/AD web login Margo Crawford 2022-04-25 16:41:55 -07:00
  • 694e4d6df6 Advertise browser_authcode flow in ldap idp discovery Margo Crawford 2022-04-20 14:58:09 -07:00
  • 973c3102bb add audit logging proposal Ryan Richard 2022-04-21 14:50:48 -07:00
  • 24b0ddf600 Merge pull request #1140 from vmware-tanzu/bump_kube_deps_v0.23.6 Ryan Richard 2022-04-21 10:18:43 -07:00
  • cab9ac8368 bump kube deps from v0.23.5 to v0.23.6 Ryan Richard 2022-04-21 09:17:24 -07:00
  • 444cf111d0 Add more detail about how the flow should work Margo Crawford 2022-04-20 16:17:49 -07:00
  • 793b8b9260 Merge pull request #1121 from anjaltelang/main Ryan Richard 2022-04-20 11:54:20 -07:00
  • 4071b48f01 Updated versions in docs for v0.16.0 release Pinny 2022-04-20 18:52:59 +00:00
  • 46e61bdea9 Update 2022-04-15-fips-and-more.md Ryan Richard 2022-04-20 10:56:21 -07:00
  • 52341f4e49 Merge pull request #1083 from vmware-tanzu/dependabot/go_modules/k8s.io/klog/v2-2.60.1 v0.16.0 Ryan Richard 2022-04-19 15:22:08 -07:00
  • cd982655a2 Bump k8s.io/klog/v2 from 2.40.1 to 2.60.1 dependabot[bot] 2022-04-19 20:33:38 +00:00
  • 311bb05993 Merge pull request #1130 from vmware-tanzu/kube-versions-april-22 Margo Crawford 2022-04-19 13:30:40 -07:00
  • 0ec5e57114 Merge pull request #1131 from vmware-tanzu/bump_some_deps Ryan Richard 2022-04-19 13:29:28 -07:00
  • 63779ddac2 Merge pull request #1129 from vmware-tanzu/jwt-authenticator-client-field Margo Crawford 2022-04-19 13:28:43 -07:00
  • 4de8004094 Empty commit to trigger CI Ryan Richard 2022-04-19 12:12:45 -07:00
  • 0b72f7084c JWTAuthenticator distributed claims resolution honors tls config Margo Crawford 2022-04-18 11:46:33 -07:00
  • 132d2aac72 add a code comment Ryan Richard 2022-04-19 11:35:46 -07:00
  • 2d4f4e4efd Merge branch 'main' into bump_some_deps Ryan Richard 2022-04-19 11:32:53 -07:00
  • c40bca5e65 Merge pull request #1127 from hectorj2f/add_code_challenge_method_support Margo Crawford 2022-04-19 11:23:57 -07:00
  • 019750a292 Update kube versions to latest patch Margo Crawford 2022-04-19 10:48:48 -07:00
  • 9e5d4ae51c Blog for v0.16.0 Anjali Telang 2022-04-14 09:45:54 -04:00
  • 5b9831d319 bump the kube direct deps Ryan Richard 2022-04-19 11:13:52 -07:00
  • fb8083d024 bump some direct deps Ryan Richard 2022-04-19 11:09:24 -07:00
  • a3f7afaec4 oidc: add code challenge supported methods hectorj2f 2022-04-18 01:06:59 +02:00
  • 19149ff043 Update proposal state to "in-review" Ryan Richard 2022-04-15 13:35:07 -07:00
  • e2836fbdb5 Dynamic Supervisor OIDC Clients proposal Ryan Richard 2022-04-15 13:23:40 -07:00
  • f5cf3276d5 Merge pull request #1123 from vmware-tanzu/macos-untrusted-certificate-errors Margo Crawford 2022-04-14 20:15:31 -07:00
  • d5337c9c19 Error format of untrusted certificate errors should depend on OS Margo Crawford 2022-04-14 17:37:36 -07:00
  • 96137cd0ee ldap/ad web ui proposal Margo Crawford 2022-04-12 16:27:42 -07:00
  • c624846eaa Merge pull request #1122 from vmware-tanzu/impersonator-only-http2 Mo Khan 2022-04-14 16:55:50 -04:00
  • 03f19da21c the http2RoundTripper should only use http2 Margo Crawford 2022-04-14 09:59:19 -07:00
  • 8fe635e7ce Merge pull request #1096 from vmware-tanzu/dependabot/docker/distroless/static-2556293 Mo Khan 2022-04-14 12:53:59 -04:00
  • 2fa81546f3 Bump distroless/static from 80c956f to 2556293 dependabot[bot] 2022-04-14 14:51:17 +00:00
  • 43485563ff Merge pull request #1120 from vmware-tanzu/dependabot/docker/hack/google.com/api-project-999119582588/go-boringcrypto/golang-1.18.1b7 Mo Khan 2022-04-14 10:26:04 -04:00
  • 5621c1161a Bump google.com/api-project-999119582588/go-boringcrypto/golang in /hack dependabot[bot] 2022-04-14 13:26:21 +00:00
  • 79fd8e2901 Merge pull request #1119 from enj/enj/i/fips_log_errs Mo Khan 2022-04-14 09:19:40 -04:00
  • e0886c6948 Only emit FIPS startup log when running a server component Monis Khan 2022-04-13 17:38:12 -04:00
  • f5cc2f20f7 Merge pull request #1118 from enj/enj/i/go1.18_linter_fix Mo Khan 2022-04-13 18:15:20 -04:00
  • 8fd77b72df Bump to go1.18.1 and fix linter errors Monis Khan 2022-04-13 16:35:06 -04:00
  • 8ecf18521c Merge pull request #1112 from vmware-tanzu/fips-website-docs Mo Khan 2022-04-13 16:41:25 -04:00
  • 96c705bf94 document how to use the fips dockerfile on our website Margo Crawford 2022-04-11 13:53:26 -07:00
  • d0d20e00e4 Merge pull request #1117 from vmware-tanzu/prefix_tokens Mo Khan 2022-04-13 15:34:42 -04:00
  • 53348b8464 Add custom prefix to downstream access and refresh tokens and authcodes Ryan Richard 2022-04-13 10:13:27 -07:00
  • 13daf59217 Merge pull request #1108 from vicmarbev/main Ryan Richard 2022-04-13 08:43:39 -07:00
  • 9ebf3a5b92 Merge branch 'main' into main Ryan Richard 2022-04-13 08:41:04 -07:00
  • 6af1aaeb20 Merge pull request #1114 from enj/enj/i/fips_init_log Mo Khan 2022-04-12 16:23:38 -04:00
  • 6b4fbb6e0e Use klog to make sure FIPS init log is emitted Monis Khan 2022-04-12 14:27:07 -04:00
  • edf4ffb018 Merge pull request #1101 from vmware-tanzu/dependabot/docker/hack/distroless/static-2556293 Mo Khan 2022-04-11 12:37:25 -04:00