Authn jwt refactor v5 - #2990

Draft

jvanderhoof wants to merge 112 commits into

authn-jwt-refactor-v5

Commits on Jun 13, 2023

Commits on Aug 31, 2023

Update test env to use postgres 15

telday
authored and
jvanderhoof
committed
Change from docker-compose to docker compose in scripts

Isaiah Peralta
authored and
jvanderhoof
committed
Fix changelog for 1.19.5 release

gl-johnson
authored and
jvanderhoof
committed
Moved stash operation after tests to post statement

hdabrowski
authored and
jvanderhoof
committed
Support extracting STS host region from authorization header

gl-johnson
authored and
jvanderhoof
committed
Separate call and retry logic

gl-johnson
authored and
jvanderhoof
committed
Update CONJ00013E error message to apply to AuthnOIDC V1 and V2

john-odonnell
authored and
jvanderhoof
committed
Parallel cukes: support socket connections to parallel Conjur services

john-odonnell
authored and
jvanderhoof
committed
Dev env fixes

john-odonnell
authored and
jvanderhoof
committed
Apply a check to run different compose versions

Isaiah Peralta
authored and
jvanderhoof
committed
Remove httpclient private certs

andytinkham
authored and
jvanderhoof
committed
Upgrade rails and webrick to latest versions

andytinkham
authored and
jvanderhoof
committed
Add trivyignore for CONJSE-1795

codihuston
authored and
jvanderhoof
committed
Add Prometheus scrape target (/metrics) and client store

gl-johnson
authored and
jvanderhoof
committed
Add injectable lib for Pub/Sub mechanics

john-odonnell
authored and
jvanderhoof
committed
Reorganize RSpec tests for Monitoring library and update requirements

john-odonnell
authored and
jvanderhoof
committed
Clean up spec/lib/monitoring imports

doodlesbykumbi
authored and
jvanderhoof
committed
Load telemetry_enabled value in ConjurConfig, add Prometheus initializer

gl-johnson
authored and
jvanderhoof
committed
Cleanup exporter tests

gl-johnson
authored and
jvanderhoof
committed
Add HTTP request collector middleware and metrics helper

gl-johnson
authored and
jvanderhoof
committed
Define request metrics, operations, and tests

gl-johnson
authored and
jvanderhoof
committed
Update Prometheus initializer and cleanup

gl-johnson
authored and
jvanderhoof
committed
Add policy resource metric and pub/sub events

gl-johnson
authored and
jvanderhoof
committed
Add stubs for future throttling of metric updates

gl-johnson
authored and
jvanderhoof
committed
Policy metric tests

gl-johnson
authored and
jvanderhoof
committed
Add policy role metric and tests

gl-johnson
authored and
jvanderhoof
committed
Add authenticator metric and tests

gl-johnson
authored and
jvanderhoof
committed
Add prometheus service and config to dev/start script

gl-johnson
authored and
jvanderhoof
committed
Add telemetry docs

gl-johnson
authored and
jvanderhoof
committed
Lazy setup of metrics, remove unused throttling code/tests

gl-johnson
authored and
jvanderhoof
committed
Log monitoring exceptions

szh
authored and
jvanderhoof
committed
Use custom error

szh
authored and
jvanderhoof
committed
Use dependency injection for installed authenticators

szh
authored and
jvanderhoof
committed
Add telemetry entry to CHANGELOG.md

doodlesbykumbi
authored and
jvanderhoof
committed
Add/refactor some unit tests

gl-johnson
authored and
jvanderhoof
committed
Temporarily enable all tests on all branch builds

imheresamir
authored and
jvanderhoof
committed
Add flag to conjurctl server to skip migrations

telday
authored and
jvanderhoof
committed
Support plural syntax for revoke and deny

egvili
authored and
jvanderhoof
committed
Update cucumber RestHelpers to support parallel tests

micahlee
authored and
jvanderhoof
committed
Cleanup: Consolidate existing sequel config into initializer

micahlee
authored and
jvanderhoof
committed
Cleanup: Fix issues in the changelog

micahlee
authored and
jvanderhoof
committed
Improve input validation and error messages

micahlee
authored and
jvanderhoof
committed
Use Conjur application settings in the appliance

micahlee
authored and
jvanderhoof
committed
Set the db connection pool size based on the worker thread count

micahlee
authored and
jvanderhoof
committed
Initial implementation of Policy Factories
jvanderhoof
committed
Initial set of Factory templates
jvanderhoof
committed
Fix CONJSE-1785

egvili
authored and
jvanderhoof
committed
Cleanup: Fix changelog issues

micahlee
authored and
jvanderhoof
committed
Upgrade OpenIDConnect dependency to fix environment proxy support

gl-johnson
authored and
jvanderhoof
committed
Allows Policy Factories with variables to be set in the root policy
jvanderhoof
committed
Cukes: use CONJUR_APPLIANCE_URL before http://conjur

john-odonnell
authored and
jvanderhoof
committed
Capture current behavior of policy load to create/update annot

john-odonnell
authored and
jvanderhoof
committed
Tag new Cucumber tests

john-odonnell
authored and
jvanderhoof
committed
Fail additive policy load requests that update existing resources

john-odonnell
authored and
jvanderhoof
committed
Create and use unique DisallowedPolicyOperation exception

john-odonnell
authored and
jvanderhoof
committed
Remove oidc_connect gem test private key

andytinkham
authored and
jvanderhoof
committed
Authn-JWT refactor
jvanderhoof
committed
Refactor authenticator pattern to remove identity mapping
jvanderhoof
committed

Commits on Oct 13, 2023

Small additional changes to refactor
jvanderhoof
committed

Commits on Oct 19, 2023

Initial implementation of Policy Factories
jvanderhoof
committed
Update puma to version 6

mFelgate
authored and
jvanderhoof
committed
Update smaller gem files

mFelgate
authored and
jvanderhoof
committed
Update jwt gem

mFelgate
authored and
jvanderhoof
committed
Fix changelog links

szh
authored and
jvanderhoof
committed
DevEnv: Set COMPOSE envvar before sourcing keycloak_functions.sh

john-odonnell
authored and
jvanderhoof
committed
AuthnOIDC: optionally write temp certs before provider discovery

john-odonnell
authored and
jvanderhoof
committed
AuthnOIDC: optionally write temp certs before Authz Code callback

john-odonnell
authored and
jvanderhoof
committed
Review updates: use CertUtils, handle hash collisions

john-odonnell
authored and
jvanderhoof
committed
Add optional 'ca-cert' config to authn-oidc

gl-johnson
authored and
jvanderhoof
committed
Review feedback and codeclimate adjustments

gl-johnson
authored and
jvanderhoof
committed
Fix linting issues

mFelgate
authored and
jvanderhoof
committed
Switch to base image new tagging; Add multistage image building

hdabrowski
authored and
jvanderhoof
committed
Add updated dependencies

mFelgate
authored and
jvanderhoof
committed
Revert "Create and use unique DisallowedPolicyOperation exception"

john-odonnell
authored and
jvanderhoof
committed
Revert "Fail additive policy load reqs that update existing resources"

john-odonnell
authored and
jvanderhoof
committed
Wrap discovery and callback calls

gl-johnson
authored and
jvanderhoof
committed
Update cukes and wrap jwks call

gl-johnson
authored and
jvanderhoof
committed
use deployment mode while bundling

tarnowsc
authored and
jvanderhoof
committed
use bundler setup in conjurctl

tarnowsc
authored and
jvanderhoof
committed
Allows Policy Factory to detect the correct port
jvanderhoof
committed
Use new FIPS base images

tarnowsc
authored and
jvanderhoof
committed
Display fips mode status in the UI, temporary fix for openssl gem

tarnowsc
authored and
jvanderhoof
committed
Update documentation

rjurekca
authored and
jvanderhoof
committed
Update Authn-JWT test for openssl updates

micahlee
authored and
jvanderhoof
committed
Fix codeclimate issue

tarnowsc
authored and
jvanderhoof
committed
!tmp: pin appliance version

tarnowsc
authored and
jvanderhoof
committed
Revert "!tmp: pin appliance version"

marek-jakubowski
authored and
jvanderhoof
committed
clean .trivyignore from issues that are no longer applicable for conjur

tarnowsc
authored and
jvanderhoof
committed
fix unwanted certs removal

tarnowsc
authored and
jvanderhoof
committed
Allows optional values to optionally be present
jvanderhoof
committed
Update syntax to remove deprecated behavior
jvanderhoof
committed
Stop Syslog-NG with a Down file
jvanderhoof
committed
Adds better logging to enable troubleshooting policy factory loading
jvanderhoof
committed
Update notices.txt and API_VERSION

gl-johnson
authored and
jvanderhoof
committed
Avoid flattening conjur-ubi image

gl-johnson
authored and
jvanderhoof
committed
Bump google/cloud-sdk to 448.0.0 in tests

andytinkham
authored and
jvanderhoof
committed
Install build tools in policy-parser test dockerfile

hughsaunders
authored and
jvanderhoof
committed
K8s authenticator now supports no_proxy env var

telday
authored and
jvanderhoof
committed
Force no_proxy in non-proxy authn_k8s cucumber tests

mFelgate
authored and
jvanderhoof
committed
AuthnOIDC V2: write custom certs to non-default directory

john-odonnell
authored and
jvanderhoof
committed
Fix OpenSSL X509 hash commands

john-odonnell
authored and
jvanderhoof
committed
Cukes: remove Keycloak cert from Conjur container

john-odonnell
authored and
jvanderhoof
committed
Fix CHANGELOG entries for 1.20.1

john-odonnell
authored and
jvanderhoof
committed
Authn-JWT refactor
jvanderhoof
committed
Interface updates to Authn-OIDC code redirect authentication flow
jvanderhoof
committed
Removes previous authn-jwt code
jvanderhoof
committed
Initial implementation of Policy Factories
jvanderhoof
committed
Authn-JWT refactor
jvanderhoof
committed
WIP related to authenticator refactor
jvanderhoof
committed