Skip to content
This repository has been archived by the owner on Jan 8, 2024. It is now read-only.

OIDC Authentication #1831

Merged
merged 67 commits into from
Jul 14, 2021
Merged

OIDC Authentication #1831

merged 67 commits into from
Jul 14, 2021

Commits on Jul 14, 2021

  1. proto: AuthMethod message

    @mitchellh
    mitchellh committed Jul 14, 2021
    Configuration menu
    Copy the full SHA
    4b641dd View commit details
    Browse the repository at this point in the history

  2. proto: Ref.AuthMethod

    @mitchellh
    mitchellh committed Jul 14, 2021
    Configuration menu
    Copy the full SHA
    1bf1ab6 View commit details
    Browse the repository at this point in the history

  3. internal/server: state methods for auth methods

    @mitchellh
    mitchellh committed Jul 14, 2021
    Configuration menu
    Copy the full SHA
    1d083ba View commit details
    Browse the repository at this point in the history

  4. proto: RPC for Auth Methods

    @mitchellh
    mitchellh committed Jul 14, 2021
    Configuration menu
    Copy the full SHA
    2623a74 View commit details
    Browse the repository at this point in the history

  5. internal: boilerplate auth method RPCs

    @mitchellh
    mitchellh committed Jul 14, 2021
    Configuration menu
    Copy the full SHA
    b326da8 View commit details
    Browse the repository at this point in the history

  6. proto: ListOIDCAuthMethods

    @mitchellh
    mitchellh committed Jul 14, 2021
    Configuration menu
    Copy the full SHA
    f521530 View commit details
    Browse the repository at this point in the history

  7. internal/server: ListOIDCAuthMethods

    @mitchellh
    mitchellh committed Jul 14, 2021
    Configuration menu
    Copy the full SHA
    85dc9eb View commit details
    Browse the repository at this point in the history

  8. internal/server: ListOIDCAuthMethods test

    @mitchellh
    mitchellh committed Jul 14, 2021
    Configuration menu
    Copy the full SHA
    bed929b View commit details
    Browse the repository at this point in the history

  9. proto: GetOIDCAuthURL

    @mitchellh
    mitchellh committed Jul 14, 2021
    Configuration menu
    Copy the full SHA
    d216111 View commit details
    Browse the repository at this point in the history

  10. internal/server: implement GetOIDCAuthURL with a stub

    @mitchellh
    mitchellh committed Jul 14, 2021
    Configuration menu
    Copy the full SHA
    d387f7c View commit details
    Browse the repository at this point in the history

  11. proto: use ref

    @mitchellh
    mitchellh committed Jul 14, 2021
    Configuration menu
    Copy the full SHA
    205a5f5 View commit details
    Browse the repository at this point in the history

  12. go.mod

    @mitchellh
    mitchellh committed Jul 14, 2021
    Configuration menu
    Copy the full SHA
    e1c673b View commit details
    Browse the repository at this point in the history

  13. internal/server: GetOIDCAuthURL with no tests

    @mitchellh
    mitchellh committed Jul 14, 2021
    Configuration menu
    Copy the full SHA
    9f158bb View commit details
    Browse the repository at this point in the history

  14. proto: add signing algs to proto

    @mitchellh
    mitchellh committed Jul 14, 2021
    Configuration menu
    Copy the full SHA
    b7793fd View commit details
    Browse the repository at this point in the history

  15. internal/server: GetOIDCAuthURL test

    @mitchellh
    mitchellh committed Jul 14, 2021
    Configuration menu
    Copy the full SHA
    b1bb5e3 View commit details
    Browse the repository at this point in the history

  16. internal/auth/oidc: package to help with shared OIDC logic

    @mitchellh
    mitchellh committed Jul 14, 2021
    Configuration menu
    Copy the full SHA
    b9a4c72 View commit details
    Browse the repository at this point in the history

  17. internal/server: convert server to use OIDC provider cache

    @mitchellh
    mitchellh committed Jul 14, 2021
    Configuration menu
    Copy the full SHA
    42a554f View commit details
    Browse the repository at this point in the history

  18. internal/server: delete OIDC provider from cache on delete auth method

    @mitchellh
    mitchellh committed Jul 14, 2021
    Configuration menu
    Copy the full SHA
    1f47333 View commit details
    Browse the repository at this point in the history

  19. internal/server: can't update user email for now 

    We want to disable this while we don't have verification, because it is
a potential security issue where a user who updates their email can
fake being an OIDC user.

1. User A signs up
2. User A changes email to user B
3. User B logs in with OIDC for for the first time
4. User A and B are the same person now.
    @mitchellh
    mitchellh committed Jul 14, 2021
    Configuration menu
    Copy the full SHA
    abebc4e View commit details
    Browse the repository at this point in the history

  20. proto: clean up

    @mitchellh
    mitchellh committed Jul 14, 2021
    Configuration menu
    Copy the full SHA
    a222f41 View commit details
    Browse the repository at this point in the history

  21. internal/server: CompleteOIDCAuth

    @mitchellh
    mitchellh committed Jul 14, 2021
    Configuration menu
    Copy the full SHA
    608bdcf View commit details
    Browse the repository at this point in the history

  22. proto: add oidc link to user

    @mitchellh
    mitchellh committed Jul 14, 2021
    Configuration menu
    Copy the full SHA
    d45d412 View commit details
    Browse the repository at this point in the history

  23. internal/state: user lookup by OIDC link

    @mitchellh
    mitchellh committed Jul 14, 2021
    Configuration menu
    Copy the full SHA
    21cdc4b View commit details
    Browse the repository at this point in the history

  24. internal/server/state: lookup user by email

    @mitchellh
    mitchellh committed Jul 14, 2021
    Configuration menu
    Copy the full SHA
    c7f14da View commit details
    Browse the repository at this point in the history

  25. internal/server: CompleteOIDCAuth sets up the user and token

    @mitchellh
    mitchellh committed Jul 14, 2021
    Configuration menu
    Copy the full SHA
    f1720da View commit details
    Browse the repository at this point in the history

  26. fmt

    @mitchellh
    mitchellh committed Jul 14, 2021
    Configuration menu
    Copy the full SHA
    d95703c View commit details
    Browse the repository at this point in the history

  27. internal/cli: auth-method list/delete CLI

    @mitchellh
    mitchellh committed Jul 14, 2021
    Configuration menu
    Copy the full SHA
    63c84ff View commit details
    Browse the repository at this point in the history

  28. internal/cli: auth method set oidc

    @mitchellh
    mitchellh committed Jul 14, 2021
    Configuration menu
    Copy the full SHA
    1d3bbcb View commit details
    Browse the repository at this point in the history

  29. internal/server: display name is optional

    @mitchellh
    mitchellh committed Jul 14, 2021
    Configuration menu
    Copy the full SHA
    ac3f673 View commit details
    Browse the repository at this point in the history

  30. internal/auth/oidc: always allowed cli loopback address

    @mitchellh
    mitchellh committed Jul 14, 2021
    Configuration menu
    Copy the full SHA
    8550006 View commit details
    Browse the repository at this point in the history

  31. proto: nonce needs to be sent by client

    @mitchellh
    mitchellh committed Jul 14, 2021
    Configuration menu
    Copy the full SHA
    f1bce72 View commit details
    Browse the repository at this point in the history

  32. internal/cli: login command

    @mitchellh
    mitchellh committed Jul 14, 2021
    Configuration menu
    Copy the full SHA
    612bd19 View commit details
    Browse the repository at this point in the history

  33. internal/server: allowed redirect URIs not required

    @mitchellh
    mitchellh committed Jul 14, 2021
    Configuration menu
    Copy the full SHA
    26176df View commit details
    Browse the repository at this point in the history

  34. internal/cli/login: disallow local mode

    @mitchellh
    mitchellh committed Jul 14, 2021
    Configuration menu
    Copy the full SHA
    6fafbc3 View commit details
    Browse the repository at this point in the history

  35. internal/clicontext: parse a string into a context

    @mitchellh
    mitchellh committed Jul 14, 2021
    Configuration menu
    Copy the full SHA
    dbe3310 View commit details
    Browse the repository at this point in the history

  36. internal/cli: parse first argument to login as connection string

    @mitchellh
    mitchellh committed Jul 14, 2021
    Configuration menu
    Copy the full SHA
    81d44c9 View commit details
    Browse the repository at this point in the history

  37. internal/auth/oidc: add server advertise addrs

    @mitchellh
    mitchellh committed Jul 14, 2021
    Configuration menu
    Copy the full SHA
    0d61353 View commit details
    Browse the repository at this point in the history

  38. internal/clicontext: don't assume require auth

    @mitchellh
    mitchellh committed Jul 14, 2021
    Configuration menu
    Copy the full SHA
    dd95c31 View commit details
    Browse the repository at this point in the history

  39. internal/clicontext: assume no require auth

    @mitchellh
    mitchellh committed Jul 14, 2021
    Configuration menu
    Copy the full SHA
    9cb3817 View commit details
    Browse the repository at this point in the history

  40. internal/server: add unauthenticated methods

    @mitchellh
    mitchellh committed Jul 14, 2021
    Configuration menu
    Copy the full SHA
    85c188e View commit details
    Browse the repository at this point in the history

  41. changelog

    @mitchellh
    mitchellh committed Jul 14, 2021
    Configuration menu
    Copy the full SHA
    406ad30 View commit details
    Browse the repository at this point in the history

  42. internal/server: address TODO

    @mitchellh
    mitchellh committed Jul 14, 2021
    Configuration menu
    Copy the full SHA
    866c6a6 View commit details
    Browse the repository at this point in the history

  43. Update internal/auth/oidc/provider.go 

    Co-authored-by: Evan Phoenix <evan@hashicorp.com>
    @mitchellh @evanphx
    mitchellh and evanphx committed Jul 14, 2021
    Configuration menu
    Copy the full SHA
    b11badd View commit details
    Browse the repository at this point in the history

  44. internal/server: pull oidc req expiry into const

    @mitchellh
    mitchellh committed Jul 14, 2021
    Configuration menu
    Copy the full SHA
    6efbd34 View commit details
    Browse the repository at this point in the history

  45. internal/server: log when new user is linked from OIDC

    @mitchellh
    mitchellh committed Jul 14, 2021
    Configuration menu
    Copy the full SHA
    53e7c49 View commit details
    Browse the repository at this point in the history

  46. internal/auth/oidc: expire the provider cache periodically

    @mitchellh
    mitchellh committed Jul 14, 2021
    Configuration menu
    Copy the full SHA
    3cdfc8b View commit details
    Browse the repository at this point in the history

  47. internal/auth/oidc: cancel background loop on Close

    @mitchellh
    mitchellh committed Jul 14, 2021
    Configuration menu
    Copy the full SHA
    a2cbb73 View commit details
    Browse the repository at this point in the history

  48. proto: remove manual endpoints cause they don't work

    @mitchellh
    mitchellh committed Jul 14, 2021
    Configuration menu
    Copy the full SHA
    c48b42a View commit details
    Browse the repository at this point in the history

  49. Update internal/cli/auth_method_list.go 

    Co-authored-by: Izaak Lauer <8404559+izaaklauer@users.noreply.github.com>
    @mitchellh @izaaklauer
    mitchellh and izaaklauer committed Jul 14, 2021
    Configuration menu
    Copy the full SHA
    e9ee326 View commit details
    Browse the repository at this point in the history

  50. Update internal/cli/auth_method_list.go 

    Co-authored-by: Izaak Lauer <8404559+izaaklauer@users.noreply.github.com>
    @mitchellh @izaaklauer
    mitchellh and izaaklauer committed Jul 14, 2021
    Configuration menu
    Copy the full SHA
    5733d45 View commit details
    Browse the repository at this point in the history

  51. internal/auth/oidc: don't nil out providers cache map

    @mitchellh
    mitchellh committed Jul 14, 2021
    Configuration menu
    Copy the full SHA
    e70736a View commit details
    Browse the repository at this point in the history

  52. internal/server: oidc only links by email if email is verified

    @mitchellh
    mitchellh committed Jul 14, 2021
    Configuration menu
    Copy the full SHA
    112952e View commit details
    Browse the repository at this point in the history

  53. internal/server: auth method delete validates auth method exists

    @mitchellh
    mitchellh committed Jul 14, 2021
    Configuration menu
    Copy the full SHA
    fb5a34c View commit details
    Browse the repository at this point in the history

  54. internal/cli: special error message if user tries to delete token auth 

    method
    @mitchellh
    mitchellh committed Jul 14, 2021
    Configuration menu
    Copy the full SHA
    bacb05a View commit details
    Browse the repository at this point in the history

  55. internal/server: disallow "token" auth method name

    @mitchellh
    mitchellh committed Jul 14, 2021
    Configuration menu
    Copy the full SHA
    8436f6a View commit details
    Browse the repository at this point in the history

  56. internal/cli: auth method CLI no local server

    @mitchellh
    mitchellh committed Jul 14, 2021
    Configuration menu
    Copy the full SHA
    1a3c2af View commit details
    Browse the repository at this point in the history

  57. internal/cli: improve help

    @mitchellh
    mitchellh committed Jul 14, 2021
    Configuration menu
    Copy the full SHA
    8381f95 View commit details
    Browse the repository at this point in the history

  58. internal/cli: login overwrites default context if it matches

    @mitchellh
    mitchellh committed Jul 14, 2021
    Configuration menu
    Copy the full SHA
    6d95d50 View commit details
    Browse the repository at this point in the history

  59. internal/server: don't call DiscoveryInfo, makes a net call

    @mitchellh
    mitchellh committed Jul 14, 2021
    Configuration menu
    Copy the full SHA
    2fbb48b View commit details
    Browse the repository at this point in the history

  60. internal/cli: add auth-method inspect

    @mitchellh
    mitchellh committed Jul 14, 2021
    Configuration menu
    Copy the full SHA
    bc4c143 View commit details
    Browse the repository at this point in the history

  61. internal/cli: waypoint login supports tokens

    @mitchellh
    mitchellh committed Jul 14, 2021
    Configuration menu
    Copy the full SHA
    e8b8b81 View commit details
    Browse the repository at this point in the history

  62. internal/cli: capture client context

    @mitchellh
    mitchellh committed Jul 14, 2021
    Configuration menu
    Copy the full SHA
    5a0646f View commit details
    Browse the repository at this point in the history

  63. internal/cli: update error message for token

    @mitchellh
    mitchellh committed Jul 14, 2021
    Configuration menu
    Copy the full SHA
    15736dc View commit details
    Browse the repository at this point in the history

  64. changelog

    @mitchellh
    mitchellh committed Jul 14, 2021
    Configuration menu
    Copy the full SHA
    886438d View commit details
    Browse the repository at this point in the history

  65. internal/cli: use fmt instead of glint for auth method inspect

    @mitchellh
    mitchellh committed Jul 14, 2021
    Configuration menu
    Copy the full SHA
    840369f View commit details
    Browse the repository at this point in the history

  66. go.mod

    @mitchellh
    mitchellh committed Jul 14, 2021
    Configuration menu
    Copy the full SHA
    201e359 View commit details
    Browse the repository at this point in the history

  67. internal/server: fix username regexp

    @mitchellh
    mitchellh committed Jul 14, 2021
    Configuration menu
    Copy the full SHA
    eb74569 View commit details
    Browse the repository at this point in the history