Andrew KeeslerandRyan Richard b21f0035d7 callback_handler.go: Get upstream name from state instead of path ...

Also use ConstantTimeCompare() to compare CSRF tokens to prevent
leaking any information in how quickly we reject bad tokens.

Signed-off-by: Ryan Richard <richardry@vmware.com>

2020-11-20 13:33:08 -08:00

..

auth

Use /callback (without IDP name) path for callback endpoint (part 1)

2020-11-20 16:14:45 -05:00

callback

callback_handler.go: Get upstream name from state instead of path

2020-11-20 13:33:08 -08:00

csrftoken

WIP for saving authorize endpoint state into upstream state param

2020-11-10 17:58:00 -08:00

discovery

Implement per-issuer OIDC JWKS endpoint

2020-10-16 17:51:40 -07:00

jwks

Implement per-issuer OIDC JWKS endpoint

2020-10-16 17:51:40 -07:00

oidctestutil

Use /callback (without IDP name) path for callback endpoint (part 1)

2020-11-20 16:14:45 -05:00

provider

callback_handler.go: simplify stored ID token claims

2020-11-20 15:36:51 -05:00

nullstorage_test.go

Add NullStorage for the authorize endpoint to use

2020-11-11 14:49:24 -08:00

nullstorage.go

Add NullStorage for the authorize endpoint to use

2020-11-11 14:49:24 -08:00

oidc.go

Use /callback (without IDP name) path for callback endpoint (part 1)

2020-11-20 16:14:45 -05:00