Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

OIDC realm authentication flows #37787

Merged
merged 26 commits into from
Feb 5, 2019
Merged

OIDC realm authentication flows #37787

merged 26 commits into from
Feb 5, 2019

Commits on Jan 23, 2019

  1. Implement code and implicit flows 

    - Use nimbus oidc sdk
- JWE not handled
- UserInfo requests not handled
    @jkakavas
    jkakavas committed Jan 23, 2019
    Configuration menu
    Copy the full SHA
    6448271 View commit details
    Browse the repository at this point in the history

  2. fix licenses and SHAs for introduced dependencies

    @jkakavas
    jkakavas committed Jan 23, 2019
    Configuration menu
    Copy the full SHA
    92f63ef View commit details
    Browse the repository at this point in the history

  3. Support userinfo requests

    @jkakavas
    jkakavas committed Jan 23, 2019
    Configuration menu
    Copy the full SHA
    19034ce View commit details
    Browse the repository at this point in the history

Commits on Jan 24, 2019

  1. Merge remote-tracking branch 'origin/master' into oidc-realm-authenti… 

    …cation-flows
    @jkakavas
    jkakavas committed Jan 24, 2019
    Configuration menu
    Copy the full SHA
    aaa5426 View commit details
    Browse the repository at this point in the history

  2. Add few tests

    @jkakavas
    jkakavas committed Jan 24, 2019
    Configuration menu
    Copy the full SHA
    6614057 View commit details
    Browse the repository at this point in the history

Commits on Jan 25, 2019

  1. Fix bugs and add unit tests

    @jkakavas
    jkakavas committed Jan 25, 2019
    Configuration menu
    Copy the full SHA
    b70526a View commit details
    Browse the repository at this point in the history

  2. Merge remote-tracking branch 'origin/feature-oidc-realm' into oidc-re… 

    …alm-authentication-flows
    @jkakavas
    jkakavas committed Jan 25, 2019
    Configuration menu
    Copy the full SHA
    422319d View commit details
    Browse the repository at this point in the history

Commits on Jan 29, 2019

  1. Address Feedback 

    - Make the calls to TokenEndpoint and UserInfoEndpoint asynchrously
- Move IdTokenValidator to an instance variable
    @jkakavas
    jkakavas committed Jan 29, 2019
    Configuration menu
    Copy the full SHA
    05910d9 View commit details
    Browse the repository at this point in the history

  2. Merge remote-tracking branch 'origin/feature-oidc-realm' into oidc-re… 

    …alm-authentication-flows
    @jkakavas
    jkakavas committed Jan 29, 2019
    Configuration menu
    Copy the full SHA
    22e8bb7 View commit details
    Browse the repository at this point in the history

Commits on Jan 30, 2019

  1. Fix Access Token validation 

    Access Token will not be returned in the implicit flow if the
response type is set to "id_token" (as opposed to "id_token token")
In such cases, there is no access token to validate and we cannot
make requests to the UserInfo endpoint, even if the user has
configured the Userinfo endpoint in the configuration
    @jkakavas
    jkakavas committed Jan 30, 2019
    Configuration menu
    Copy the full SHA
    b8aa5be View commit details
    Browse the repository at this point in the history

  2. Completes security tests 

    Our tests now handle all applicable known attacks. References:

- https://www.nds.ruhr-uni-bochum.de/media/ei/veroeffentlichungen/2017/01/30/oidc-security.pdf
- https://www.nds.ruhr-uni-bochum.de/media/ei/veroeffentlichungen/2017/01/13/OIDCSecurity_1.pdf
- https://auth0.com/blog/critical-vulnerabilities-in-json-web-token-libraries/
    @jkakavas
    jkakavas committed Jan 30, 2019
    Configuration menu
    Copy the full SHA
    e3204f5 View commit details
    Browse the repository at this point in the history

  3. Merge remote-tracking branch 'origin/feature-oidc-realm' into oidc-re… 

    …alm-authentication-flows
    @jkakavas
    jkakavas committed Jan 30, 2019
    Configuration menu
    Copy the full SHA
    ad493a9 View commit details
    Browse the repository at this point in the history

  4. Fix checkstyle

    @jkakavas
    jkakavas committed Jan 30, 2019
    Configuration menu
    Copy the full SHA
    b3cbd8d View commit details
    Browse the repository at this point in the history

Commits on Feb 1, 2019

  1. Make JWKSource reloading async

    @jkakavas
    jkakavas committed Feb 1, 2019
    Configuration menu
    Copy the full SHA
    0a0ae0e View commit details
    Browse the repository at this point in the history

  2. Merge remote-tracking branch 'origin/feature-oidc-realm' into oidc-re… 

    …alm-authentication-flows
    @jkakavas
    jkakavas committed Feb 1, 2019
    Configuration menu
    Copy the full SHA
    bc1f552 View commit details
    Browse the repository at this point in the history

  3. fix thirdPartyAudit

    @jkakavas
    jkakavas committed Feb 1, 2019
    Configuration menu
    Copy the full SHA
    baadcdb View commit details
    Browse the repository at this point in the history

  4. address feedback

    @jkakavas
    jkakavas committed Feb 1, 2019
    Configuration menu
    Copy the full SHA
    09413b5 View commit details
    Browse the repository at this point in the history

Commits on Feb 2, 2019

  1. cleanup

    @jkakavas
    jkakavas committed Feb 2, 2019
    Configuration menu
    Copy the full SHA
    59bc122 View commit details
    Browse the repository at this point in the history

Commits on Feb 3, 2019

  1. re-introduce the option for facilitators to pass state and nonce values

    @jkakavas
    jkakavas committed Feb 3, 2019
    Configuration menu
    Copy the full SHA
    b368ffc View commit details
    Browse the repository at this point in the history

  2. remove unused import

    @jkakavas
    jkakavas committed Feb 3, 2019
    Configuration menu
    Copy the full SHA
    81a1770 View commit details
    Browse the repository at this point in the history

  3. Merge branch 'feature-oidc-realm' into oidc-realm-authentication-flows

    @jkakavas
    jkakavas committed Feb 3, 2019
    Configuration menu
    Copy the full SHA
    c9c1cf7 View commit details
    Browse the repository at this point in the history

  4. fix tests

    @jkakavas
    jkakavas committed Feb 3, 2019
    Configuration menu
    Copy the full SHA
    3450541 View commit details
    Browse the repository at this point in the history

Commits on Feb 5, 2019

  1. address feedback

    @jkakavas
    jkakavas committed Feb 5, 2019
    Configuration menu
    Copy the full SHA
    9d30bd2 View commit details
    Browse the repository at this point in the history

  2. Merge branch 'feature-oidc-realm' into oidc-realm-authentication-flows

    @jkakavas
    jkakavas committed Feb 5, 2019
    Configuration menu
    Copy the full SHA
    82d23a6 View commit details
    Browse the repository at this point in the history

  3. Handle deprecation header-AbstractUpgradeTestCase

    @jkakavas
    jkakavas committed Feb 5, 2019
    Configuration menu
    Copy the full SHA
    6098583 View commit details
    Browse the repository at this point in the history

  4. Revert "Handle deprecation header-AbstractUpgradeTestCase" 

    This reverts commit 6098583.
    @jkakavas
    jkakavas committed Feb 5, 2019
    Configuration menu
    Copy the full SHA
    fa7c024 View commit details
    Browse the repository at this point in the history