Code

Authn jwt refactor v5#2990

Code

Draft

jvanderhoof wants to merge 112 commits intomastercyberark/conjur:masterfrom authn-jwt-refactor-v5cyberark/conjur:authn-jwt-refactor-v5Copy head branch name to clipboard

+12,751-10,169

Commits

Commits on Jun 13, 2023

• Authn-JWT refactor

  Show description for 5fcbf0e
  jvanderhoof

  committed
  5fcbf0e

  Copy full SHA for 5fcbf0e

• Interface updates to Authn-OIDC code redirect authentication flow

  Show description for d035e93
  jvanderhoof

  committed
  d035e93

  Copy full SHA for d035e93

• Removes previous authn-jwt code

  Show description for f6f35d8
  jvanderhoof

  committed
  f6f35d8

  Copy full SHA for f6f35d8

Commits on Aug 31, 2023

• Update test env to use postgres 15

  

  telday

  authored and

  jvanderhoof

  committed
  a4354c0

  Copy full SHA for a4354c0

• Change from docker-compose to docker compose in scripts

  

  Isaiah Peralta

  authored and

  jvanderhoof

  committed
  0e7b00d

  Copy full SHA for 0e7b00d

• Fix changelog for 1.19.5 release

  

  gl-johnson

  authored and

  jvanderhoof

  committed
  50cbd20

  Copy full SHA for 50cbd20

• Moved stash operation after tests to post statement

  

  hdabrowski

  authored and

  jvanderhoof

  committed
  7e20e26

  Copy full SHA for 7e20e26

• Support extracting STS host region from authorization header

  

  gl-johnson

  authored and

  jvanderhoof

  committed
  9dd839b

  Copy full SHA for 9dd839b

• Separate call and retry logic

  

  gl-johnson

  authored and

  jvanderhoof

  committed
  c11bd8b

  Copy full SHA for c11bd8b

• Update CONJ00013E error message to apply to AuthnOIDC V1 and V2

  

  john-odonnell

  authored and

  jvanderhoof

  committed
  cceea17

  Copy full SHA for cceea17

• Parallel cukes: support socket connections to parallel Conjur services

  

  john-odonnell

  authored and

  jvanderhoof

  committed
  6fa60ad

  Copy full SHA for 6fa60ad

• Dev env fixes

  Show description for a49e921
  

  john-odonnell

  authored and

  jvanderhoof

  committed
  a49e921

  Copy full SHA for a49e921

• Apply a check to run different compose versions

  

  Isaiah Peralta

  authored and

  jvanderhoof

  committed
  f690530

  Copy full SHA for f690530

• Remove httpclient private certs

  Show description for 6e3dfa6
  

  andytinkham

  authored and

  jvanderhoof

  committed
  6e3dfa6

  Copy full SHA for 6e3dfa6

• Upgrade rails and webrick to latest versions

  Show description for 42daab3
  

  andytinkham

  authored and

  jvanderhoof

  committed
  42daab3

  Copy full SHA for 42daab3

• Add trivyignore for CONJSE-1795

  

  codihuston

  authored and

  jvanderhoof

  committed
  8ee6564

  Copy full SHA for 8ee6564

• Add Prometheus scrape target (/metrics) and client store

  

  gl-johnson

  authored and

  jvanderhoof

  committed
  4776e0f

  Copy full SHA for 4776e0f

• Add injectable lib for Pub/Sub mechanics

  Show description for 4d62818
  

  john-odonnell

  authored and

  jvanderhoof

  committed
  4d62818

  Copy full SHA for 4d62818

• Reorganize RSpec tests for Monitoring library and update requirements

  

  john-odonnell

  authored and

  jvanderhoof

  committed
  fa1a45c

  Copy full SHA for fa1a45c

• Clean up spec/lib/monitoring imports

  Show description for 42e6c4b
  

  doodlesbykumbi

  authored and

  jvanderhoof

  committed
  42e6c4b

  Copy full SHA for 42e6c4b

• Load telemetry_enabled value in ConjurConfig, add Prometheus initializer

  

  gl-johnson

  authored and

  jvanderhoof

  committed
  8aa5f9c

  Copy full SHA for 8aa5f9c

• Cleanup exporter tests

  

  gl-johnson

  authored and

  jvanderhoof

  committed
  3fcdc82

  Copy full SHA for 3fcdc82

• Add HTTP request collector middleware and metrics helper

  

  gl-johnson

  authored and

  jvanderhoof

  committed
  562aefb

  Copy full SHA for 562aefb

• Define request metrics, operations, and tests

  

  gl-johnson

  authored and

  jvanderhoof

  committed
  b22797d

  Copy full SHA for b22797d

• Update Prometheus initializer and cleanup

  

  gl-johnson

  authored and

  jvanderhoof

  committed
  e99f782

  Copy full SHA for e99f782

• Add policy resource metric and pub/sub events

  

  gl-johnson

  authored and

  jvanderhoof

  committed
  95cdde3

  Copy full SHA for 95cdde3

• Add stubs for future throttling of metric updates

  

  gl-johnson

  authored and

  jvanderhoof

  committed
  3ce082b

  Copy full SHA for 3ce082b

• Policy metric tests

  

  gl-johnson

  authored and

  jvanderhoof

  committed
  5d31202

  Copy full SHA for 5d31202

• Add policy role metric and tests

  

  gl-johnson

  authored and

  jvanderhoof

  committed
  2fa3d93

  Copy full SHA for 2fa3d93

• Add authenticator metric and tests

  

  gl-johnson

  authored and

  jvanderhoof

  committed
  d377685

  Copy full SHA for d377685

• Add prometheus service and config to dev/start script

  

  gl-johnson

  authored and

  jvanderhoof

  committed
  09f11ec

  Copy full SHA for 09f11ec

• Add telemetry docs

  

  gl-johnson

  authored and

  jvanderhoof

  committed
  74efeac

  Copy full SHA for 74efeac

• Lazy setup of metrics, remove unused throttling code/tests

  

  gl-johnson

  authored and

  jvanderhoof

  committed
  e748867

  Copy full SHA for e748867

• Log monitoring exceptions

  

  szh

  authored and

  jvanderhoof

  committed
  60f54e8

  Copy full SHA for 60f54e8

• Use custom error

  

  szh

  authored and

  jvanderhoof

  committed
  f4af817

  Copy full SHA for f4af817

• Use dependency injection for installed authenticators

  

  szh

  authored and

  jvanderhoof

  committed
  fb3eacb

  Copy full SHA for fb3eacb

• Add telemetry entry to CHANGELOG.md

  

  doodlesbykumbi

  authored and

  jvanderhoof

  committed
  169eee0

  Copy full SHA for 169eee0

• Add/refactor some unit tests

  

  gl-johnson

  authored and

  jvanderhoof

  committed
  77b0b1d

  Copy full SHA for 77b0b1d

• Temporarily enable all tests on all branch builds

  

  imheresamir

  authored and

  jvanderhoof

  committed
  da8cda6

  Copy full SHA for da8cda6

• Add flag to conjurctl server to skip migrations

  

  telday

  authored and

  jvanderhoof

  committed
  f6fe279

  Copy full SHA for f6fe279

• Support plural syntax for revoke and deny

  

  egvili

  authored and

  jvanderhoof

  committed
  1d69ea4

  Copy full SHA for 1d69ea4

• Update cucumber RestHelpers to support parallel tests

  Show description for 783bb98
  

  micahlee

  authored and

  jvanderhoof

  committed
  783bb98

  Copy full SHA for 783bb98

• Cleanup: Consolidate existing sequel config into initializer

  

  micahlee

  authored and

  jvanderhoof

  committed
  c9288a2

  Copy full SHA for c9288a2

• Cleanup: Fix issues in the changelog

  Show description for 78a6f08
  

  micahlee

  authored and

  jvanderhoof

  committed
  78a6f08

  Copy full SHA for 78a6f08

• Improve input validation and error messages

  Show description for ed839eb
  

  micahlee

  authored and

  jvanderhoof

  committed
  ed839eb

  Copy full SHA for ed839eb

• Use Conjur application settings in the appliance

  Show description for f6773a6
  

  micahlee

  authored and

  jvanderhoof

  committed
  f6773a6

  Copy full SHA for f6773a6

• Set the db connection pool size based on the worker thread count

  

  micahlee

  authored and

  jvanderhoof

  committed
  91f1214

  Copy full SHA for 91f1214

• Initial implementation of Policy Factories

  Show description for bb615d4
  jvanderhoof

  committed
  bb615d4

  Copy full SHA for bb615d4

• Initial set of Factory templates

  Show description for aa7c374
  jvanderhoof

  committed
  aa7c374

  Copy full SHA for aa7c374

• Fix CONJSE-1785

  

  egvili

  authored and

  jvanderhoof

  committed
  a3f48fd

  Copy full SHA for a3f48fd

• Cleanup: Fix changelog issues

  Show description for 745a311
  

  micahlee

  authored and

  jvanderhoof

  committed
  745a311

  Copy full SHA for 745a311

• Upgrade OpenIDConnect dependency to fix environment proxy support

  

  gl-johnson

  authored and

  jvanderhoof

  committed
  fccfa80

  Copy full SHA for fccfa80

• Allows Policy Factories with variables to be set in the root policy

  Show description for 9c81bb2
  jvanderhoof

  committed
  9c81bb2

  Copy full SHA for 9c81bb2

• Cukes: use CONJUR_APPLIANCE_URL before http://conjur

  

  john-odonnell

  authored and

  jvanderhoof

  committed
  98bc621

  Copy full SHA for 98bc621

• Capture current behavior of policy load to create/update annot

  

  john-odonnell

  authored and

  jvanderhoof

  committed
  ba18103

  Copy full SHA for ba18103

• Tag new Cucumber tests

  

  john-odonnell

  authored and

  jvanderhoof

  committed
  3f2e9e2

  Copy full SHA for 3f2e9e2

• Fail additive policy load requests that update existing resources

  

  john-odonnell

  authored and

  jvanderhoof

  committed
  4d8cbd0

  Copy full SHA for 4d8cbd0

• Create and use unique DisallowedPolicyOperation exception

  

  john-odonnell

  authored and

  jvanderhoof

  committed
  aa17be4

  Copy full SHA for aa17be4

• Remove oidc_connect gem test private key

  Show description for 1fb0429
  

  andytinkham

  authored and

  jvanderhoof

  committed
  1fb0429

  Copy full SHA for 1fb0429

• Authn-JWT refactor

  Show description for 727c828
  jvanderhoof

  committed
  727c828

  Copy full SHA for 727c828

• Refactor authenticator pattern to remove identity mapping

  jvanderhoof

  committed
  bef4fde

  Copy full SHA for bef4fde

Commits on Oct 13, 2023

• Small additional changes to refactor

  jvanderhoof

  committed
  bfb1688

  Copy full SHA for bfb1688

Commits on Oct 19, 2023

• Initial implementation of Policy Factories

  Show description for 551511b
  jvanderhoof

  committed
  551511b

  Copy full SHA for 551511b

• Update puma to version 6

  

  Matthew Felgate

  authored and

  jvanderhoof

  committed
  da4b572

  Copy full SHA for da4b572

• Update smaller gem files

  

  Matthew Felgate

  authored and

  jvanderhoof

  committed
  8dc5ac5

  Copy full SHA for 8dc5ac5

• Update jwt gem

  

  Matthew Felgate

  authored and

  jvanderhoof

  committed
  739118d

  Copy full SHA for 739118d

• Fix changelog links

  

  szh

  authored and

  jvanderhoof

  committed
  32f0cc1

  Copy full SHA for 32f0cc1

• DevEnv: Set COMPOSE envvar before sourcing keycloak_functions.sh

  

  john-odonnell

  authored and

  jvanderhoof

  committed
  fefb8e0

  Copy full SHA for fefb8e0

• AuthnOIDC: optionally write temp certs before provider discovery

  

  john-odonnell

  authored and

  jvanderhoof

  committed
  4288578

  Copy full SHA for 4288578

• AuthnOIDC: optionally write temp certs before Authz Code callback

  

  john-odonnell

  authored and

  jvanderhoof

  committed
  528397c

  Copy full SHA for 528397c

• Review updates: use CertUtils, handle hash collisions

  

  john-odonnell

  authored and

  jvanderhoof

  committed
  242f578

  Copy full SHA for 242f578

• Add optional 'ca-cert' config to authn-oidc

  

  gl-johnson

  authored and

  jvanderhoof

  committed
  69d7d3e

  Copy full SHA for 69d7d3e

• Review feedback and codeclimate adjustments

  

  gl-johnson

  authored and

  jvanderhoof

  committed
  f43a947

  Copy full SHA for f43a947

• Fix linting issues

  

  Matthew Felgate

  authored and

  jvanderhoof

  committed
  148cfda

  Copy full SHA for 148cfda

• Switch to base image new tagging; Add multistage image building

  

  hdabrowski

  authored and

  jvanderhoof

  committed
  2efc342

  Copy full SHA for 2efc342

• Add updated dependencies

  

  Matthew Felgate

  authored and

  jvanderhoof

  committed
  5d57f15

  Copy full SHA for 5d57f15

• Revert "Create and use unique DisallowedPolicyOperation exception"

  Show description for 208ddd3
  

  john-odonnell

  authored and

  jvanderhoof

  committed
  208ddd3

  Copy full SHA for 208ddd3

• Revert "Fail additive policy load reqs that update existing resources"

  Show description for 2c5727d
  

  john-odonnell

  authored and

  jvanderhoof

  committed
  2c5727d

  Copy full SHA for 2c5727d

• Wrap discovery and callback calls

  

  gl-johnson

  authored and

  jvanderhoof

  committed
  cace588

  Copy full SHA for cace588

• Update cukes and wrap jwks call

  

  gl-johnson

  authored and

  jvanderhoof

  committed
  174880c

  Copy full SHA for 174880c

• use deployment mode while bundling

  

  tarnowsc

  authored and

  jvanderhoof

  committed
  a96fb7b

  Copy full SHA for a96fb7b

• use bundler setup in conjurctl

  

  tarnowsc

  authored and

  jvanderhoof

  committed
  d078a40

  Copy full SHA for d078a40

• Allows Policy Factory to detect the correct port

  Show description for ae885e0
  jvanderhoof

  committed
  ae885e0

  Copy full SHA for ae885e0

• Use new FIPS base images

  

  tarnowsc

  authored and

  jvanderhoof

  committed
  c0120ff

  Copy full SHA for c0120ff

• Display fips mode status in the UI, temporary fix for openssl gem

  

  tarnowsc

  authored and

  jvanderhoof

  committed
  c37b235

  Copy full SHA for c37b235

• Update documentation

  

  rjurekca

  authored and

  jvanderhoof

  committed
  fa597fa

  Copy full SHA for fa597fa

• Update Authn-JWT test for openssl updates

  

  micahlee

  authored and

  jvanderhoof

  committed
  2fb80a0

  Copy full SHA for 2fb80a0

• Fix codeclimate issue

  

  tarnowsc

  authored and

  jvanderhoof

  committed
  ca8b22d

  Copy full SHA for ca8b22d

• !tmp: pin appliance version

  

  tarnowsc

  authored and

  jvanderhoof

  committed
  863949b

  Copy full SHA for 863949b

• Revert "!tmp: pin appliance version"

  Show description for e9c104b
  

  marek-jakubowski

  authored and

  jvanderhoof

  committed
  e9c104b

  Copy full SHA for e9c104b

• clean .trivyignore from issues that are no longer applicable for conjur

  

  tarnowsc

  authored and

  jvanderhoof

  committed
  12bb5b0

  Copy full SHA for 12bb5b0

• fix unwanted certs removal

  

  tarnowsc

  authored and

  jvanderhoof

  committed
  f9eacd0

  Copy full SHA for f9eacd0

• Allows optional values to optionally be present

  Show description for ad667e5
  jvanderhoof

  committed
  ad667e5

  Copy full SHA for ad667e5

• Update syntax to remove deprecated behavior

  jvanderhoof

  committed
  2be4710

  Copy full SHA for 2be4710

• Stop Syslog-NG with a Down file

  Show description for bdaa9a4
  jvanderhoof

  committed
  bdaa9a4

  Copy full SHA for bdaa9a4

• Adds better logging to enable troubleshooting policy factory loading

  jvanderhoof

  committed
  8ab23c9

  Copy full SHA for 8ab23c9

• Update notices.txt and API_VERSION

  

  gl-johnson

  authored and

  jvanderhoof

  committed
  cdd2422

  Copy full SHA for cdd2422

• Avoid flattening conjur-ubi image

  

  gl-johnson

  authored and

  jvanderhoof

  committed
  a4ac4a0

  Copy full SHA for a4ac4a0

• Bump google/cloud-sdk to 448.0.0 in tests

  Show description for adbcb60
  

  andytinkham

  authored and

  jvanderhoof

  committed
  adbcb60

  Copy full SHA for adbcb60

• Install build tools in policy-parser test dockerfile

  

  hughsaunders

  authored and

  jvanderhoof

  committed
  dd466c2

  Copy full SHA for dd466c2

• K8s authenticator now supports no_proxy env var

  

  telday

  authored and

  jvanderhoof

  committed
  1cf80ac

  Copy full SHA for 1cf80ac

• Force no_proxy in non-proxy authn_k8s cucumber tests

  

  Matthew Felgate

  authored and

  jvanderhoof

  committed
  2b87c5f

  Copy full SHA for 2b87c5f

• AuthnOIDC V2: write custom certs to non-default directory

  

  john-odonnell

  authored and

  jvanderhoof

  committed
  e5d76dc

  Copy full SHA for e5d76dc

• Fix OpenSSL X509 hash commands

  

  john-odonnell

  authored and

  jvanderhoof

  committed
  1dbf3b2

  Copy full SHA for 1dbf3b2

• Cukes: remove Keycloak cert from Conjur container

  

  john-odonnell

  authored and

  jvanderhoof

  committed
  d6bbabc

  Copy full SHA for d6bbabc

• Fix CHANGELOG entries for 1.20.1

  

  john-odonnell

  authored and

  jvanderhoof

  committed
  662b297

  Copy full SHA for 662b297

• Authn-JWT refactor

  Show description for 96bddd0
  jvanderhoof

  committed
  96bddd0

  Copy full SHA for 96bddd0

• Interface updates to Authn-OIDC code redirect authentication flow

  Show description for 433de10
  jvanderhoof

  committed
  433de10

  Copy full SHA for 433de10

• Removes previous authn-jwt code

  Show description for c458c75
  jvanderhoof

  committed
  c458c75

  Copy full SHA for c458c75

• Initial implementation of Policy Factories

  Show description for 7fdf97e
  jvanderhoof

  committed
  7fdf97e

  Copy full SHA for 7fdf97e

• Authn-JWT refactor

  Show description for db53dc8
  jvanderhoof

  committed
  db53dc8

  Copy full SHA for db53dc8

• WIP related to authenticator refactor

  jvanderhoof

  committed
  0be2668

  Copy full SHA for 0be2668