Commit Graph

264 Commits

Author SHA1 Message Date
Jonah Back 6ddfdca123 fix aws alb auth provider key caching 2021-01-26 16:54:52 -08:00
Jonah Back 4eaa060572 Fix test, add changeset for ALB provider bug fix 2021-01-26 10:54:14 -08:00
Jonah Back f8b652614e fix: change issuer to iss to conform to JWT spec. Make issuer verification optional 2021-01-26 10:50:12 -08:00
Jonah Back 39b05b9ae0 fix: use .text instead of .json for ALB key http call 2021-01-22 15:00:39 -08:00
Patrik Oldsberg 58ff7d986e Merge pull request #3916 from erikxiv/feat/api-auth-backend
Optional identity token authorization of api requests
2021-01-21 13:11:05 +01:00
Patrik Oldsberg 7ae7fc615c auth-backend: revert jose to v3 2021-01-21 12:17:20 +01:00
Jonah Back c837adc23a Address some final review coments about cross-fetch and type-casting 2021-01-19 21:20:49 -08:00
Erik Larsson b798e8b9e8 Refactored as per PR comments 2021-01-20 01:06:34 +01:00
Erik Larsson acaa350fe5 Added more IdentityClient tests 2021-01-19 23:03:43 +01:00
Erik Larsson c2926a6c0c Refactored away from passport into IdentityClient 2021-01-19 23:03:43 +01:00
Erik Larsson 67e60126bb TODO: Extract and add tests to refreshKeyStore 2021-01-19 23:03:13 +01:00
Erik Larsson 4323cc66f9 Added todo on settling user format for authorized users 2021-01-19 23:03:13 +01:00
Erik Larsson 796d1fefbd Fix linting 2021-01-19 23:03:13 +01:00
Erik Larsson a2291d7cc5 Optional identity token authorization of api requests 2021-01-19 23:03:13 +01:00
Jonah Back c43d148556 Fix usage of JOSE library in OIDC test as part of JOSE upgrade 2021-01-18 14:39:53 -08:00
Jonah Back 02140eb89a Add basic node-cache with 1 hour TTL for caching keys retrieved from AWS public key endpoint 2021-01-18 14:25:03 -08:00
Jonah Back 147648a2d1 Update type definition and docs to be clear about experimental status 2021-01-18 14:23:57 -08:00
Jonah Back dfce32b356 Address review comments around algorithm being used, typescript ignore 2021-01-18 14:23:57 -08:00
Jonah Back 1f275fe31a Upgrade TokenFactory to latest jose library 2021-01-18 14:23:57 -08:00
Jonah Back 2335fa9d17 chore: add comment around payload passed in identity resolver 2021-01-18 14:23:56 -08:00
Jonah Back 0d6ad133c7 fix: simplify identity resolver 2021-01-18 14:23:56 -08:00
Jonah Back 6ef5428e73 fix: add new processor to index 2021-01-18 14:23:56 -08:00
Jonah Back aca5158c7f feature: add auth backend for AWS ALB 2021-01-18 14:23:56 -08:00
jmfrancois 0f7710b910 fix: CI 2021-01-13 11:54:44 +01:00
Joel Low 468579734a Add checks for blank cert and implement logout configs 2021-01-08 13:08:21 +08:00
Joel Low 79868eb110 Add additional SAML configuration options 2020-12-30 07:12:42 +08:00
Fredrik Adelöw 72108829ce Merge pull request #3822 from fidelcoria/fix-login-race
fix(auth): race condition between loginPopup and authFlowHelpers
2020-12-28 15:55:22 +01:00
Erik Larsson 4975224d8e Adjust test 2020-12-27 10:52:18 +01:00
Erik Larsson d63cc1fe52 fix: token expiration in s, not ms 2020-12-27 09:45:06 +01:00
Fidel Coria 7dfcdc1720 reduce close timeout to 100 ms 2020-12-23 11:15:36 -06:00
Fidel Coria 29b4056f2c delay window close by 200 ms 2020-12-22 16:03:21 -06:00
Govind 202da8ab36 Allow application to register custom AuthProviderFactory. Refs #1984 (#3329)
* Allow application to register custom `AuthProviderFactory`. Refs #1984

* PR comments: Explicit exports

* Export `OAuth` specific types from the package

* Update documentation on how to use the interfaces

* Re-export from base `index.ts` as per ADR-004

* pass `providerId` as a parameter to `AuthFactory` instead of hardcoding

Co-authored-by: Govindarajan Nagarajan <govindarajan.nagarajan@zalando.de>
2020-11-26 11:27:00 +01:00
Ben Lambert 8c58337a07 Merge pull request #3430 from jot-hub/bug/issue-3223
detect differing origin and indicate it at auth failure
2020-11-26 10:20:39 +01:00
jothisubaramaniam 039970d710 introduce data.type=config_info for the new postMessage in auth 2020-11-25 16:28:49 -05:00
Ben Lambert 26f5d6d224 Merge pull request #3409 from bleathem/oidc-provider
Fixed the OIDC token refresh
2020-11-25 14:07:32 +01:00
Fredrik Adelöw fae3fafcfa silence some new ts squigglies in the editor (#3435) 2020-11-25 09:57:16 +01:00
jothisubaramaniam 7e49365080 fix ci 2020-11-24 17:31:19 -05:00
jothisubaramaniam e338648910 add a postMessage with targetOrigin * 2020-11-24 16:52:56 -05:00
Brian Leathem 9c9d12e899 Added back the id_token when calling refresh 2020-11-24 11:30:25 -08:00
Brian Leathem cec3da2c90 Used ts private instead of _ naming convention 2020-11-24 10:26:39 -08:00
Brian Leathem 78177f24b7 Fixed a lint failure on the oidc provider test 2020-11-24 10:26:39 -08:00
Brian Leathem e3ad37e39d Fix broken tests 2020-11-24 10:26:39 -08:00
Brian Leathem 636cc58dca Fixed a TS type error in the OIDC provider test 2020-11-24 10:26:39 -08:00
Brian Leathem 5f1c1c2edf Fixed the OIDC token refresh 2020-11-24 10:26:39 -08:00
Brian Leathem 40b3036fac Added a test for the createOidcProvider method 2020-11-20 11:57:11 -08:00
Brian Leathem 68be35912b Conditionally enable the auth-backend session support 2020-11-20 11:57:11 -08:00
Brian Leathem 3712c47974 Added a test for the OidcAuthProvider handler method 2020-11-20 11:57:11 -08:00
Brian Leathem 78b390483d Added a oidc provider test 2020-11-20 11:57:10 -08:00
Brian Leathem 5c485ff60f Added a auth.session.secret config value for setting the express session secret 2020-11-20 11:57:10 -08:00
Brian Leathem 52e79a0032 Addressed PR feedback from @Rugvip 2020-11-20 11:57:10 -08:00