Renlord Yang
|
154544f43e
|
Properly export CloudflareAccessClaims and CloudflareAccessIdentityProfile types
This allows these types to be used externally when injecting a custom auth handler.
Signed-off-by: Renlord Yang <me@renlord.com>
|
2022-07-18 21:49:56 +08:00 |
|
Renlord Yang
|
339a4213b8
|
return cloudflare access claims directly
Signed-off-by: Renlord Yang <renlord@cloudflare.com>
Signed-off-by: Renlord Yang <me@renlord.com>
|
2022-07-14 22:54:26 +08:00 |
|
Renlord Yang
|
9dce0535d6
|
add support to include cloudflare groups and implement caching
Signed-off-by: Renlord Yang <renlord@cloudflare.com>
Signed-off-by: Renlord Yang <me@renlord.com>
|
2022-07-14 22:54:26 +08:00 |
|
Renlord Yang
|
3cedfd8365
|
add Cloudflare Access authentication provider
Signed-off-by: Renlord Yang <renlord@cloudflare.com>
Signed-off-by: Renlord Yang <me@renlord.com>
|
2022-07-14 22:54:26 +08:00 |
|
David Zemon
|
58005b8bcd
|
feat: [#12248] Update to latest @davidzemon/passport-oauth-okta
Signed-off-by: David Zemon <david@zemon.name>
|
2022-07-06 12:08:32 -05:00 |
|
David Zemon
|
777bddd123
|
feat: [#12248] Add Okta IDP option
Signed-off-by: David Zemon <david@zemon.name>
|
2022-07-06 12:08:32 -05:00 |
|
David Zemon
|
4443a5e9be
|
fix: [#12248] Okta's auth server ID is optional, not required
Signed-off-by: David Zemon <david@zemon.name>
|
2022-07-06 12:08:32 -05:00 |
|
David Zemon
|
a5a78be5b8
|
fix: [#12248] Fix bad import
Signed-off-by: David Zemon <david@zemon.name>
|
2022-07-06 12:08:32 -05:00 |
|
David Zemon
|
35233735e8
|
feat: [#12248] Switch to new okta strategy
This new Okta passport strategy support custom authorization server IDs
Signed-off-by: David Zemon <david@zemon.name>
|
2022-07-06 12:08:32 -05:00 |
|
Antonio Musolino
|
fe8e025af5
|
feat: allowing post method into auth refresh api
Signed-off-by: Antonio Musolino <antoniomusolino007@gmail.com>
|
2022-07-05 15:33:29 +02:00 |
|
Simone Corsi
|
8e03db907a
|
fix(auth-backend): adds missing createAuthProviderExport
Signed-off-by: Simone Corsi <simonecorsi.dev@gmail.com>
|
2022-07-01 10:20:46 +02:00 |
|
Fabio Torchetti
|
61edb85704
|
Naming chnage; fix release size
Signed-off-by: Fabio Torchetti <fabbari@amazon.com>
|
2022-06-27 10:12:19 -05:00 |
|
Fabio Torchetti
|
c7358cdbc5
|
Remove docs for the moment
Signed-off-by: Fabio Torchetti <fabbari@amazon.com>
|
2022-06-27 10:12:19 -05:00 |
|
Fabio Torchetti
|
b1c7792e6a
|
Add documentation for new option
Signed-off-by: Fabio Torchetti <fabbari@amazon.com>
|
2022-06-27 10:12:19 -05:00 |
|
Fabio Torchetti
|
9c4e5cdee9
|
Allow specifying JWT token key algorithm
Signed-off-by: Fabio Torchetti <fabbari@amazon.com>
|
2022-06-27 10:12:19 -05:00 |
|
Patrik Oldsberg
|
66c79ff359
|
auth-backend: avoid marking TokenIssuer as internal
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
|
2022-06-20 15:25:33 +02:00 |
|
Patrik Oldsberg
|
4d74ec0b22
|
auth-backend: remove direct provider exports
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
|
2022-06-20 15:20:06 +02:00 |
|
Patrik Oldsberg
|
36e4377480
|
auth-backend: remove deprecated identity exports
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
|
2022-06-20 15:20:06 +02:00 |
|
Patrik Oldsberg
|
ba0cb5b99b
|
auth-backend: remove deprecated provider factory fields and types
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
|
2022-06-20 15:20:06 +02:00 |
|
Patrik Oldsberg
|
894e3412cf
|
auth-backend: remove deprecated provider exports
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
|
2022-06-20 15:20:06 +02:00 |
|
Patrik Oldsberg
|
3b773b8cc6
|
Merge pull request #11659 from backjo/fix/AlbThis
(fix): bind 'this' properly for getKey function in ALB auth provider
|
2022-05-30 11:28:32 +02:00 |
|
Jonah Back
|
467facc6ea
|
(fix): bind 'this' properly for getKey function
Signed-off-by: Jonah Back <jonah@jonahback.com>
|
2022-05-24 14:41:22 -07:00 |
|
Manuel Scurti
|
416014b7b8
|
added migration file
Signed-off-by: Manuel Scurti <manuel.scurti@agilelab.it>
|
2022-05-22 19:30:40 +02:00 |
|
Manuel Scurti
|
6dcc5f1d3e
|
fixed migration script for signing_keys
Signed-off-by: Manuel Scurti <manuel.scurti@agilelab.it>
|
2022-05-21 12:49:39 +02:00 |
|
Manuel Scurti
|
9079a78078
|
algorithms field is now array for IdentityClient
Signed-off-by: Manuel Scurti <manuel.scurti@agilelab.it>
|
2022-05-18 11:31:29 +02:00 |
|
Manuel Scurti
|
f6aae90e4e
|
Added configurable signing algorithm
Signed-off-by: Manuel Scurti <manuel.scurti@agilelab.it>
|
2022-05-17 19:40:15 +02:00 |
|
Patrik Oldsberg
|
2df2f01a29
|
auth-backend: remove disableRefresh option
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
|
2022-05-12 14:51:19 +02:00 |
|
Patrik Oldsberg
|
09fff50b27
|
auth-backend: added note about oauth2-proxy example setup
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
|
2022-05-02 17:35:36 +02:00 |
|
Patrik Oldsberg
|
906c235e5c
|
auth-backend: update oauth2-proxy test
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
|
2022-05-02 17:22:25 +02:00 |
|
Patrik Oldsberg
|
0caff59719
|
auth-backend: add a default auth handler for the oauth2-proxy provider
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
|
2022-05-02 17:09:55 +02:00 |
|
Patrik Oldsberg
|
abaa34aaa0
|
auth-backend: add getHeaders to oauth2-proxy + update docs for other fields
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
|
2022-05-02 16:06:17 +02:00 |
|
Patrik Oldsberg
|
693112bec7
|
auth-backend: add headers to oauth2-proxy result
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
|
2022-05-02 13:59:26 +02:00 |
|
Patrik Oldsberg
|
cac3ba68a2
|
auth-backend: fix ent claim being dropped
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
|
2022-04-27 20:20:32 +02:00 |
|
Fredrik Adelöw
|
7cd399ede0
|
most of these casts are apparently no longer necessary
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
|
2022-04-27 11:01:31 +02:00 |
|
Johan Haals
|
d047f48ae6
|
chore: rename to emailMatchingUserEntityProfileEmail
Signed-off-by: Johan Haals <johan.haals@gmail.com>
|
2022-04-26 13:41:29 +02:00 |
|
Patrick Jungermann
|
44bdcbdb66
|
feat: add common sign-in resolver for simple email-to-email matching
- `providers.google.resolvers.emailMatchingUserEntityEmail()`
- `providers.microsoft.resolvers.emailMatchingUserEntityEmail()`
- `providers.okta.resolvers.emailMatchingUserEntityEmail()`
Signed-off-by: Patrick Jungermann <Patrick.Jungermann@gmail.com>
|
2022-04-22 19:53:54 +02:00 |
|
Patrick Jungermann
|
787ae0d541
|
feat: add common signIn resolver to more provider
- `providers.microsoft.resolvers.emailLocalPartMatchingUserEntityName()`
- `providers.okta.resolvers.emailLocalPartMatchingUserEntityName()`
Signed-off-by: Patrick Jungermann <Patrick.Jungermann@gmail.com>
|
2022-04-21 16:19:00 +02:00 |
|
Andy Caruso
|
d8063ed8e2
|
Use the algorithm from the key object
Signed-off-by: Andy Caruso <macaruso@gmail.com>
|
2022-04-18 23:49:27 +02:00 |
|
Andy Caruso
|
d253d46ba9
|
Clean up as per review comments
Signed-off-by: Andy Caruso <macaruso@gmail.com>
|
2022-04-18 23:49:27 +02:00 |
|
Andy Caruso
|
1624b52168
|
Update jose to 4.6.0
Signed-off-by: Andy Caruso <macaruso@gmail.com>
|
2022-04-18 23:46:42 +02:00 |
|
Patrik Oldsberg
|
526f5a6079
|
Merge pull request #10300 from backstage/rugvip/default-resolvers
auth-backend: remove all default sign-in resolvers
|
2022-04-12 13:43:33 +02:00 |
|
Patrik Oldsberg
|
cd0105ff42
|
auth-backend: update getDefaultOwnershipEntityRefs to only consider groups
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
|
2022-04-12 11:35:58 +02:00 |
|
Patrik Oldsberg
|
a479e76604
|
auth-backend: rename all built-in resolvers
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
|
2022-04-12 11:03:25 +02:00 |
|
Patrik Oldsberg
|
c93a63586d
|
auth-backend: resolve context user -> User
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
|
2022-04-12 10:13:29 +02:00 |
|
Fredrik Adelöw
|
f4cdf4cac1
|
Defensively encode URL parameters when fetching ELB keys
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
|
2022-04-11 15:06:35 +02:00 |
|
Patrik Oldsberg
|
f9ece810dc
|
auth-backend: remove duplicate comment
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
|
2022-04-09 10:53:29 +02:00 |
|
Patrik Oldsberg
|
5a07982847
|
auth-backend: remove dead code
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
|
2022-04-09 10:53:16 +02:00 |
|
Patrik Oldsberg
|
0f201ad50e
|
auth-backend: API report cleanup
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
|
2022-04-08 15:39:15 +02:00 |
|
Patrik Oldsberg
|
c6899b4902
|
auth-backend: modernize the common local part resolver
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
|
2022-04-08 15:20:41 +02:00 |
|
Patrik Oldsberg
|
9f03434cfb
|
auth-backend: migrate saml sign-in resolver
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
|
2022-04-08 15:18:41 +02:00 |
|