pinniped

mirror of https://github.com/vmware-tanzu/pinniped.git synced 2026-01-04 04:04:28 +00:00

Files

Ryan Richard 50e4d6db6c Support the new Go FIPS compiler which was upgraded inside Go 1.21.6

The release of Go 1.21.6 includes the new boring crypto when compiling
with FIPS enabled. See https://go.dev/doc/devel/release#go1.21.0 and
https://github.com/golang/go/issues/64717.

This new version of boring crypto allows the use of TLS v1.3 for the
first time, so we changed the Pinniped code to use TLS v1.3 where
appropriate when compiled with the FIPS compiler. It also changed the
allowed TLS v1.2 ciphers, so we updated those as well.

After this commit, the project must be compiled by at least Go v1.21.6
when compiling in fips mode. The hack/Dockerfile_fips was already
updated to use that version of Go in a previous commit.

Co-authored-by: Benjamin A. Petersen <ben@benjaminapetersen.me>

2024-01-18 14:23:26 -08:00

browsertest

Show an IDP chooser UI when appropriate from authorize endpoint

2023-10-30 11:05:53 -07:00

access.go

Increase some test timeouts

2023-05-31 17:41:36 -07:00

activedirectory.go

Allow dynamic clients to be used in downstream OIDC flows

2022-07-14 09:51:11 -07:00

assertions.go

Replace usages of deprecated funcs from the wait pkg