Joseph Schorr
|
8887f09ba8
|
Use the instance service key for registry JWT signing
|
2016-06-07 11:58:10 -04:00 |
|
Joseph Schorr
|
6e2df3b339
|
Fix key server to not list expired keys
Fixes the key server to not list expire keys and by default not return expired or unapproved keys unless explicitly requested.
Fixes #1430
|
2016-05-03 17:58:47 -04:00 |
|
Joseph Schorr
|
6091db983b
|
Hide expired keys outside of their staleness window
|
2016-04-29 14:10:33 -04:00 |
|
Jimmy Zelinskie
|
726cb5fe6a
|
key server: 403 on expired approved keys (#1410)
|
2016-04-29 14:09:37 -04:00 |
|
Jimmy Zelinskie
|
ca5794ba18
|
key server: use total_seconds() for cache headers
|
2016-04-29 14:09:37 -04:00 |
|
Joseph Schorr
|
5d6e5a42e8
|
Add delete logging and tests for logging
|
2016-04-29 14:09:09 -04:00 |
|
Jimmy Zelinskie
|
6aa7040f39
|
keyserver: add cache-control headers
|
2016-04-29 14:05:16 -04:00 |
|
Joseph Schorr
|
bc08ac2749
|
Fix timeouts in the JWT endpoint tests
|
2016-04-29 14:05:16 -04:00 |
|
Jimmy Zelinskie
|
370ac3ecd0
|
service keys: add rotation_duration field
|
2016-04-29 14:05:16 -04:00 |
|
Jimmy Zelinskie
|
9f4a4092da
|
keyserver: get signer kid from unverified headers
|
2016-04-29 14:05:16 -04:00 |
|
Jimmy Zelinskie
|
cfc15746a6
|
keyserver: tests!
|
2016-04-29 14:05:16 -04:00 |
|
Joseph Schorr
|
11ff3e9b59
|
keys ui WIP
|
2016-04-29 14:05:16 -04:00 |
|
Jimmy Zelinskie
|
136f92400f
|
key_server: remove s at the end of endpoint
|
2016-04-29 13:38:25 -04:00 |
|
Jimmy Zelinskie
|
e456228434
|
keyserver: insert rotation policy into metadata
|
2016-04-29 13:38:25 -04:00 |
|
Jimmy Zelinskie
|
885a41e6f5
|
key server: misc fixes to make jwtproxy work
|
2016-04-29 13:38:25 -04:00 |
|
Jimmy Zelinskie
|
50ad1bb6b1
|
key server: misc cleanup to get it working
|
2016-04-29 13:38:25 -04:00 |
|
Jimmy Zelinskie
|
c0ab45d335
|
key server: derive audience from host and scheme
|
2016-04-29 13:38:25 -04:00 |
|
Jimmy Zelinskie
|
d277fe6741
|
add final service key config
|
2016-04-29 13:38:25 -04:00 |
|
Jimmy Zelinskie
|
c6b8b3ce8c
|
service_keys: s/get_keys/list_keys
|
2016-04-29 13:38:25 -04:00 |
|
Jimmy Zelinskie
|
0ec54fc70e
|
clear notifications on delete/replace service_key
|
2016-04-29 13:38:25 -04:00 |
|
Jimmy Zelinskie
|
42b5196b21
|
add notification path and use for service keys
|
2016-04-29 13:38:25 -04:00 |
|
Jimmy Zelinskie
|
97ae800e6c
|
canonicalize json
|
2016-04-29 13:38:25 -04:00 |
|
Jimmy Zelinskie
|
f406942984
|
converging on proper rotation
|
2016-04-29 13:38:25 -04:00 |
|
Jimmy Zelinskie
|
aaf9e83278
|
basically finish superuser key api
|
2016-04-29 13:38:25 -04:00 |
|
Jimmy Zelinskie
|
35ed73e195
|
rework superuser api
|
2016-04-29 13:38:25 -04:00 |
|
Jimmy Zelinskie
|
4079dba167
|
service keys: do all the right stuff
|
2016-04-29 13:38:25 -04:00 |
|
Jimmy Zelinskie
|
499bb16306
|
service key server wip
|
2016-04-29 13:38:25 -04:00 |
|