Commit Graph

648 Commits

Author SHA1 Message Date
Renlord Yang 154544f43e Properly export CloudflareAccessClaims and CloudflareAccessIdentityProfile types
This allows these types to be used externally when injecting a custom auth handler.

Signed-off-by: Renlord Yang <me@renlord.com>
2022-07-18 21:49:56 +08:00
Renlord Yang 339a4213b8 return cloudflare access claims directly
Signed-off-by: Renlord Yang <renlord@cloudflare.com>
Signed-off-by: Renlord Yang <me@renlord.com>
2022-07-14 22:54:26 +08:00
Renlord Yang 9dce0535d6 add support to include cloudflare groups and implement caching
Signed-off-by: Renlord Yang <renlord@cloudflare.com>
Signed-off-by: Renlord Yang <me@renlord.com>
2022-07-14 22:54:26 +08:00
Renlord Yang 3cedfd8365 add Cloudflare Access authentication provider
Signed-off-by: Renlord Yang <renlord@cloudflare.com>
Signed-off-by: Renlord Yang <me@renlord.com>
2022-07-14 22:54:26 +08:00
David Zemon 58005b8bcd feat: [#12248] Update to latest @davidzemon/passport-oauth-okta
Signed-off-by: David Zemon <david@zemon.name>
2022-07-06 12:08:32 -05:00
David Zemon 777bddd123 feat: [#12248] Add Okta IDP option
Signed-off-by: David Zemon <david@zemon.name>
2022-07-06 12:08:32 -05:00
David Zemon 4443a5e9be fix: [#12248] Okta's auth server ID is optional, not required
Signed-off-by: David Zemon <david@zemon.name>
2022-07-06 12:08:32 -05:00
David Zemon a5a78be5b8 fix: [#12248] Fix bad import
Signed-off-by: David Zemon <david@zemon.name>
2022-07-06 12:08:32 -05:00
David Zemon 35233735e8 feat: [#12248] Switch to new okta strategy
This new Okta passport strategy support custom authorization server IDs

Signed-off-by: David Zemon <david@zemon.name>
2022-07-06 12:08:32 -05:00
Antonio Musolino fe8e025af5 feat: allowing post method into auth refresh api
Signed-off-by: Antonio Musolino <antoniomusolino007@gmail.com>
2022-07-05 15:33:29 +02:00
Simone Corsi 8e03db907a fix(auth-backend): adds missing createAuthProviderExport
Signed-off-by: Simone Corsi <simonecorsi.dev@gmail.com>
2022-07-01 10:20:46 +02:00
Fabio Torchetti 61edb85704 Naming chnage; fix release size
Signed-off-by: Fabio Torchetti <fabbari@amazon.com>
2022-06-27 10:12:19 -05:00
Fabio Torchetti c7358cdbc5 Remove docs for the moment
Signed-off-by: Fabio Torchetti <fabbari@amazon.com>
2022-06-27 10:12:19 -05:00
Fabio Torchetti b1c7792e6a Add documentation for new option
Signed-off-by: Fabio Torchetti <fabbari@amazon.com>
2022-06-27 10:12:19 -05:00
Fabio Torchetti 9c4e5cdee9 Allow specifying JWT token key algorithm
Signed-off-by: Fabio Torchetti <fabbari@amazon.com>
2022-06-27 10:12:19 -05:00
Patrik Oldsberg 66c79ff359 auth-backend: avoid marking TokenIssuer as internal
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2022-06-20 15:25:33 +02:00
Patrik Oldsberg 4d74ec0b22 auth-backend: remove direct provider exports
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2022-06-20 15:20:06 +02:00
Patrik Oldsberg 36e4377480 auth-backend: remove deprecated identity exports
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2022-06-20 15:20:06 +02:00
Patrik Oldsberg ba0cb5b99b auth-backend: remove deprecated provider factory fields and types
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2022-06-20 15:20:06 +02:00
Patrik Oldsberg 894e3412cf auth-backend: remove deprecated provider exports
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2022-06-20 15:20:06 +02:00
Patrik Oldsberg 3b773b8cc6 Merge pull request #11659 from backjo/fix/AlbThis
(fix): bind 'this' properly for getKey function in ALB auth provider
2022-05-30 11:28:32 +02:00
Jonah Back 467facc6ea (fix): bind 'this' properly for getKey function
Signed-off-by: Jonah Back <jonah@jonahback.com>
2022-05-24 14:41:22 -07:00
Manuel Scurti 416014b7b8 added migration file
Signed-off-by: Manuel Scurti <manuel.scurti@agilelab.it>
2022-05-22 19:30:40 +02:00
Manuel Scurti 6dcc5f1d3e fixed migration script for signing_keys
Signed-off-by: Manuel Scurti <manuel.scurti@agilelab.it>
2022-05-21 12:49:39 +02:00
Manuel Scurti 9079a78078 algorithms field is now array for IdentityClient
Signed-off-by: Manuel Scurti <manuel.scurti@agilelab.it>
2022-05-18 11:31:29 +02:00
Manuel Scurti f6aae90e4e Added configurable signing algorithm
Signed-off-by: Manuel Scurti <manuel.scurti@agilelab.it>
2022-05-17 19:40:15 +02:00
Patrik Oldsberg 2df2f01a29 auth-backend: remove disableRefresh option
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2022-05-12 14:51:19 +02:00
Patrik Oldsberg 09fff50b27 auth-backend: added note about oauth2-proxy example setup
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2022-05-02 17:35:36 +02:00
Patrik Oldsberg 906c235e5c auth-backend: update oauth2-proxy test
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2022-05-02 17:22:25 +02:00
Patrik Oldsberg 0caff59719 auth-backend: add a default auth handler for the oauth2-proxy provider
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2022-05-02 17:09:55 +02:00
Patrik Oldsberg abaa34aaa0 auth-backend: add getHeaders to oauth2-proxy + update docs for other fields
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2022-05-02 16:06:17 +02:00
Patrik Oldsberg 693112bec7 auth-backend: add headers to oauth2-proxy result
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2022-05-02 13:59:26 +02:00
Patrik Oldsberg cac3ba68a2 auth-backend: fix ent claim being dropped
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2022-04-27 20:20:32 +02:00
Fredrik Adelöw 7cd399ede0 most of these casts are apparently no longer necessary
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2022-04-27 11:01:31 +02:00
Johan Haals d047f48ae6 chore: rename to emailMatchingUserEntityProfileEmail
Signed-off-by: Johan Haals <johan.haals@gmail.com>
2022-04-26 13:41:29 +02:00
Patrick Jungermann 44bdcbdb66 feat: add common sign-in resolver for simple email-to-email matching
- `providers.google.resolvers.emailMatchingUserEntityEmail()`
- `providers.microsoft.resolvers.emailMatchingUserEntityEmail()`
- `providers.okta.resolvers.emailMatchingUserEntityEmail()`

Signed-off-by: Patrick Jungermann <Patrick.Jungermann@gmail.com>
2022-04-22 19:53:54 +02:00
Patrick Jungermann 787ae0d541 feat: add common signIn resolver to more provider
- `providers.microsoft.resolvers.emailLocalPartMatchingUserEntityName()`
- `providers.okta.resolvers.emailLocalPartMatchingUserEntityName()`

Signed-off-by: Patrick Jungermann <Patrick.Jungermann@gmail.com>
2022-04-21 16:19:00 +02:00
Andy Caruso d8063ed8e2 Use the algorithm from the key object
Signed-off-by: Andy Caruso <macaruso@gmail.com>
2022-04-18 23:49:27 +02:00
Andy Caruso d253d46ba9 Clean up as per review comments
Signed-off-by: Andy Caruso <macaruso@gmail.com>
2022-04-18 23:49:27 +02:00
Andy Caruso 1624b52168 Update jose to 4.6.0
Signed-off-by: Andy Caruso <macaruso@gmail.com>
2022-04-18 23:46:42 +02:00
Patrik Oldsberg 526f5a6079 Merge pull request #10300 from backstage/rugvip/default-resolvers
auth-backend: remove all default sign-in resolvers
2022-04-12 13:43:33 +02:00
Patrik Oldsberg cd0105ff42 auth-backend: update getDefaultOwnershipEntityRefs to only consider groups
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2022-04-12 11:35:58 +02:00
Patrik Oldsberg a479e76604 auth-backend: rename all built-in resolvers
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2022-04-12 11:03:25 +02:00
Patrik Oldsberg c93a63586d auth-backend: resolve context user -> User
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2022-04-12 10:13:29 +02:00
Fredrik Adelöw f4cdf4cac1 Defensively encode URL parameters when fetching ELB keys
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2022-04-11 15:06:35 +02:00
Patrik Oldsberg f9ece810dc auth-backend: remove duplicate comment
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2022-04-09 10:53:29 +02:00
Patrik Oldsberg 5a07982847 auth-backend: remove dead code
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2022-04-09 10:53:16 +02:00
Patrik Oldsberg 0f201ad50e auth-backend: API report cleanup
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2022-04-08 15:39:15 +02:00
Patrik Oldsberg c6899b4902 auth-backend: modernize the common local part resolver
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2022-04-08 15:20:41 +02:00
Patrik Oldsberg 9f03434cfb auth-backend: migrate saml sign-in resolver
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2022-04-08 15:18:41 +02:00