Joseph Schorr
|
90c0e34945
|
Add ability to configure custom email and username claims
This will help customers support active directory-based OIDC
|
2018-09-12 11:14:23 -04:00 |
|
Sam Chow
|
301cc6992a
|
Remove jwt validation for jschorr to fix later
Refactor oauth validate method to take config over entire appconfig
|
2018-06-01 15:07:06 -04:00 |
|
Joseph Schorr
|
22a39c3007
|
Fix bug with missing & in authorization URL for OIDC
Also adds testing to ensure we don't break this again
|
2018-05-15 14:52:00 -04:00 |
|
Joseph Schorr
|
3cd314874f
|
Add support for defining custom query parameters for OIDC endpoints
Fixes https://jira.coreos.com/browse/QUAY-886
|
2018-04-06 12:48:03 -04:00 |
|
Joseph Schorr
|
c55ad59f1f
|
Allow admins to configure the login scopes for OIDC login
Some OIDC implementations return a larger set of scopes than is necessary, so we allow admins to override.
|
2017-12-06 15:54:26 -05:00 |
|
Joseph Schorr
|
e724125459
|
Add support for using OIDC tokens via the Docker CLI
|
2017-09-12 12:23:22 -04:00 |
|
Joseph Schorr
|
751598056e
|
Enable support in OIDC for endpoints without user info support
The user info endpoint is apparently optional.
|
2017-08-01 13:24:27 -04:00 |
|
Joseph Schorr
|
c0cc574ca2
|
Add Authorization header with token to user info call
While not required, it is recommended to send the token as an Authorization header to the UserInfo call in OIDC: http://openid.net/specs/openid-connect-core-1_0.html#UserInfo
Some implementations expect this and will fail if not present
|
2017-04-27 11:24:12 -04:00 |
|
Joseph Schorr
|
f5dbc350f8
|
Fix missed tests and revert conftest change (breaks docker build)
|
2017-01-30 17:28:25 -05:00 |
|
Joseph Schorr
|
cf6033b423
|
Move http_client fixture to root-level conftest
|
2017-01-30 11:40:45 -05:00 |
|
Joseph Schorr
|
ce5fafcbd8
|
Fix pylint ignores to use names
|
2017-01-26 12:00:54 -05:00 |
|
Joseph Schorr
|
fda203e4d7
|
Add proper and tested OIDC support on the server
Note that this will still not work on the client side; the followup CL for the client side is right after this one.
|
2017-01-23 17:53:34 -05:00 |
|