74 Commits (master)

Author	SHA1	Message	Date
Mariano Cano	f8fba4df6b	Add audience in error.	5 years ago
Mariano Cano	23e6de57a2	Address comments in code review.	5 years ago
Mariano Cano	07cdc1021c	Use OIDC nonce as the reuse key.	5 years ago
Mariano Cano	ef4d809ee6	Move matchesAudience and stripPort tests to provisioner package.	5 years ago
Mariano Cano	af9688c419	Fix some testing errors.	5 years ago
Mariano Cano	2d00cd0933	Validate audiences in the default provisioner.	5 years ago
Mariano Cano	57b705f6cf	Use provisioner sign options.	5 years ago
Mariano Cano	602a42813c	Re-enable replay protection for JWK provisioner.	5 years ago
Mariano Cano	ab1cca03d7	Use new provisioners in authorize methods.	5 years ago
max furman	3415a1fef8	move SplitSANs to cli	5 years ago
max furman	6937bfea7b	claims.SANS -> claims.SANs	5 years ago
max furman	93f39c64a0	backwards compat only when SANS empty	5 years ago
max furman	fe8c8614b2	SANS backwards compat when token missing sujbect SAN	5 years ago
max furman	f0683c2e0a	Enable signing certificates with custom SANs ... * validate against SANs in token. must be 1:1 equivalent.	5 years ago
Mariano Cano	7e95fc0e45	Strip ports on audience check. ... Services might have proxies behind them so we cannot rely on them. Fixes #17	6 years ago
Mariano Cano	d6cad2a7f3	Add provisioner option to disable renewal. ... Fixes smallstep/ca-component#108	6 years ago
max furman	0d9dd2d14b	provisioner issuer -> name	6 years ago
max furman	a4a461466b	withProvisionerOID and unit test	6 years ago
max furman	283dc42904	add unit tests for MatchOne (token audience) and Authority.New	6 years ago
max furman	ee7db4006a	change sign + authorize authority api | add provisioners ... * authorize returns []interface{} - operators in this list can conform to any interface the user decides - our implementation has a combination of certificate claim validators and certificate template modifiers. * provisioners can set and enforce tls cert options	6 years ago
Mariano Cano	1c1ac1b3fb	Add disableIssuedAt check functionality ... Fixes #86	6 years ago
Mariano Cano	69da47a727	Set audience using the sign url.	6 years ago
max furman	0b5f6487e1	change provisioners api ... * /provisioners -> /provisioners/jwk-set-by-issuer * /provisioners now returns a list of Provisioners	6 years ago
max furman	c284a2c0ab	first commit	6 years ago