Skip to content

Comments

Auth grant type jwt bearer#560

Merged
aeneasr merged 35 commits intomasterfrom
auth-grant-type-jwt-bearer
Feb 5, 2021
Merged

Auth grant type jwt bearer#560
aeneasr merged 35 commits intomasterfrom
auth-grant-type-jwt-bearer

Conversation

@aeneasr
Copy link
Member

@aeneasr aeneasr commented Feb 5, 2021

Related issue

Proposed changes

Checklist

  • I have read the contributing guidelines
    and signed the CLA.
  • I have read the security policy.
  • I confirm that this pull request does not address a security
    vulnerability. If this pull request addresses a security vulnerability, I
    confirm that I got green light (please contact
    security@ory.sh) from the maintainers to push
    the changes.
  • I have added tests that prove my fix is effective or that my feature
    works.
  • I have added necessary documentation within the code base (if
    appropriate).

Further comments

Vladimir Kalugin and others added 30 commits December 14, 2020 13:34
feat: add ability to disable client authentication in token endpoint …
5bd00a4 
…handlers
feat(oauth2): add handler for authorize grant via jwt bearer
95798e7
fix(oauth2): mark jwt as used, if kid is provided in token
7e04502
refactor(oauth2): change err msg when no public key found for auth gr…
df5b6f1 
…ant assertion
feat(storage): add implementation of JWTAuthGrantStorage in MemoryStore
fd1ae59
feat(compose): add support for AuthorizeJwtGrantHandler in compose
1509763
fix(oauth2): fix incorrect message when validating assertion prerequi…
02992f7 
…sites
fix(oauth2): fix nil pointer if all public keys didn't match in Autho…
0e14733 
…rizeJwtGrantHandler
refactor(oauth2): change order of token validation in AuthorizeJwtGra…
18267a6 
…ntHandler, so it matches order in rfc
test: added unit tests for AuthorizeJwtGrantHandler
b406a62
fix(oauth2): fill session with subject, scopes, audience correctly in…
0d11ebd 
… AuthorizeJwtGrantHandler
test: fix test assertion
ca7f8a9
fix(oauth2): fix audience grant in AuthorizeJwtGrantHandler
f1a93b0
feat(oauth2): add additional check for exp claim in AuthorizeJwtGrant…
9cba91b 
…Handler
@seliverstov-tinkoff
cases for jwt bearer authorization grand creation
665b957
@seliverstov-tinkoff
draft introspection cases of jwt bearer
db0aafa
@seliverstov-tinkoff
add clients for jwt bearer test
db506b9
@seliverstov-tinkoff
introspect token expired test
38afdae
@seliverstov-tinkoff
add constants for tests and few test on introspect token
a9de527
@seliverstov-tinkoff
use jose for jwt generation in tests
af01a48
@seliverstov-tinkoff
rename jwt bearer tests
7dea172
@seliverstov-tinkoff
introspection auth header store in suite
92bee79
@seliverstov-tinkoff
fix TestSuccessResponseWithMultipleScopesToken test
ade7901
refactor: client authentification handling
6cf3d51
fix(oauth2): fix code style, naming and jwt token validation
27babf5
fix(oauth2): mark jwt as used only after all checks
418ddc3
@aeneasr
chore: apply code review
d7b294b
@aeneasr
refactor: move new changes to rfc7523
5fa6839
@aeneasr
refactor: clean up package changes and renaming
98fb2d0
@aeneasr
Merge remote-tracking branch 'origin/master' into auth-grant-type-jwt…
f6692bd 
…-bearer

# Conflicts:
#	go.mod
@aeneasr aeneasr merged commit 9720241 into master Feb 5, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@aeneasr @seliverstov-tinkoff