Code

OpenID Connect support#637

Code

Open

rawnsley wants to merge 39 commits intoHubs-Foundation:masterHubs-Foundation/reticulum:masterfrom LearnHub:avn-oidc-loginLearnHub/reticulum:avn-oidc-loginCopy head branch name to clipboard

+371-3

Commits

Commits on Oct 28, 2020

• First pass at a basic OIDC flow

  netpro2k

  committed
  4df2c3e

Commits on Oct 29, 2020

• Cleanup id token handling

  netpro2k

  committed
  4251e2f

Commits on Nov 13, 2020

• Handle using multiple public keys for OIDC

  netpro2k

  committed
  6b10355

• Don't assume name of authorize/token endponts

  netpro2k

  committed
  b4a5951

• Better displayname handling

  netpro2k

  committed
  9239a47

Commits on Nov 18, 2020

• Add habitat config for OIDC

  netpro2k

  committed
  59e3edc

Commits on Nov 21, 2020

• Fix escaping and formatting in habitat config

  netpro2k

  committed
  5f507f5

Commits on Dec 2, 2020

• Delint

  netpro2k

  committed
  888555b

• Cleanup dead code and remove debugging

  netpro2k

  committed
  1a6339c

• delint

  netpro2k

  committed
  a645f24

• No need to make scopes configurable right now

  netpro2k

  committed
  60aa6d2

Commits on Oct 12, 2022

• Merge branch 'master' into avn-oidc-login

  rawnsley

  committed
  56c7f8e

Commits on Oct 14, 2022

• OIDC example credentials for local testing

  rawnsley

  committed
  a17b7b1

• Guardian needs explicit list of signing algorithms to check

  rawnsley

  committed
  d1dc0e5

• Function requires options to be supplied in keyword format

  rawnsley

  committed
  95105b0

• Spelling typo

  rawnsley

  committed
  b8d7292

• Log OIDC errors on the server side for investigation

  rawnsley

  committed
  44eabd2

• Missing require import

  rawnsley

  committed
  cf4510d

Commits on Oct 17, 2022

• Passthrough UserInfo from OIDC

  rawnsley

  committed
  d96a6e0

Commits on Oct 19, 2022

• Encapsulated OIDC setup into single RemoteOIDCClient module and simplified required parameters

  rawnsley

  committed
  8849a40

• Definitive list of allowed algorithms for JSON signing

  rawnsley

  committed
  d5d996e

• Use supplied scopes for fetching token

  rawnsley

  committed
  f9f2cb6

• Small change to test data

  rawnsley

  committed
  ef9f963

• Statistic policy outside the scope of this PR

  rawnsley

  committed
  1f406f3

• Make some functions private

  rawnsley

  committed
  5096e48

• Comment update

  rawnsley

  committed
  664d933

Commits on Oct 20, 2022

• Hashed identifier that is unique for each OIDC provider and won't clash with email logins

  rawnsley

  committed
  d630e94

• Email account creation disabled in OIDC mode. The failure mode is as ungraceful as the existing path when disable_sign_up is true.

  rawnsley

  committed
  1adba56

• Don't allow OIDC auth unless explicitly enabled

  rawnsley

  committed
  996adea

Commits on Oct 21, 2022

• Lint suggestions

  rawnsley

  committed
  2f7bfe0

Commits on Oct 24, 2022

• Make list of permitted claims more a configurable parameter

  rawnsley

  committed
  599cd70

• Fix filtering when UserInfo endpoint is active

  rawnsley

  committed
  4009651

• More focused test parameters

  rawnsley

  committed
  f8e051a

• Support for additional authentication parameters

  rawnsley

  committed
  ee7ccc2

• Missing from last checkin

  rawnsley

  committed
  8b37956

• Merge branch 'master' into avn-oidc-login

  rawnsley

  committed
  254c2b0

Commits on Oct 28, 2022

• Merge branch 'master' into avn-oidc-login

  rawnsley

  committed
  50b0c06

Commits on Nov 8, 2022

• Merge branch 'master' into avn-oidc-login

  rawnsley

  committed
  ccfe143

Commits on Nov 21, 2022

• Merge branch 'master' into avn-oidc-login

  rawnsley

  committed
  66cbdf4