letro/letro-authentication-service
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity
652 Commits 2 Branches 1 Tag
f0d8996dd67aaeb539f60aa4d71079703552fc6c
Commit Graph

652 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Quentin Gliech
f0d8996dd6 JWK signer 2022-09-02 15:37:46 +02:00
Quentin Gliech
eaadc8ad0e Private to public JWKS conversion 2022-09-02 15:37:46 +02:00
Quentin Gliech
25d16b34e9 Fix EC key conversion & constraints 2022-09-02 15:37:46 +02:00
Quentin Gliech
2df95f9503 cargo fmt 2022-09-02 15:37:46 +02:00
Quentin Gliech
57bcedfe58 Make the JWK generic over the parameters 2022-09-02 15:37:46 +02:00
Quentin Gliech
0649278713 Prepare the private JWK 2022-09-02 15:37:46 +02:00
Quentin Gliech
7f54cc9358 Sign all the things 2022-09-02 15:37:46 +02:00
Quentin Gliech
89a2d3fa8b WIP: better JOSE 2022-09-02 15:37:46 +02:00
Quentin Gliech
2281ccfcbd Remove support for the token response type 2022-09-02 13:59:10 +02:00
Kévin Commaille
0061c57d3b Improve docs and spec compliance of oauth2-types requests 2022-09-02 11:25:21 +02:00
Kévin Commaille
20dbe2d4f9 Add a constructor for a basic AuthorizationRequest 2022-09-02 11:25:21 +02:00
Kévin Commaille
99532e2b21 Basic improvements to oauth2-types requests 
Make sure all types implement Serialize, Deserialize, Debug and Clone.
Make sure all types can be constructed and all fields can be accessed.
 2022-09-02 11:25:21 +02:00
Kévin Commaille
df81c3e665 Use an enum for client error codes 
Replace the ClientError constants with From<ClientErrorCode>.
 2022-09-01 17:59:37 +02:00
Kévin Commaille
78cffd7e02 Make HTTP request layers convert to Bytes 
Add layer to convert a request's Bytes to a Body.
 2022-08-23 12:25:38 +02:00
dependabot[bot]
59e6cb2d5e Bump opa-wasm from 770075c to 223a17f 
Bumps [opa-wasm](https://github.com/matrix-org/rust-opa-wasm) from `770075c` to `223a17f`.
- [Release notes](https://github.com/matrix-org/rust-opa-wasm/releases)
- [Commits](770075c883...223a17f391)

---
updated-dependencies:
- dependency-name: opa-wasm
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-08-22 23:21:58 +02:00
Quentin Gliech
000e8519e0 Fix wasmtime cache config in Docker image 2022-08-22 17:55:54 +02:00
Quentin Gliech
acca0b8b89 Add a debug CLI command to check the compiled policies 2022-08-22 16:36:31 +02:00
Quentin Gliech
32319d354d Fix the -debug variant entrypoint in Docker image 2022-08-22 16:28:53 +02:00
dependabot[bot]
fe72da754e Bump serde_json from 1.0.83 to 1.0.85 
Bumps [serde_json](https://github.com/serde-rs/json) from 1.0.83 to 1.0.85.
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](https://github.com/serde-rs/json/compare/v1.0.83...v1.0.85)

---
updated-dependencies:
- dependency-name: serde_json
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-08-22 15:44:03 +02:00
Quentin Gliech
aba1919ba9 Bump OPA in GitHub Actions 2022-08-22 15:23:53 +02:00
Quentin Gliech
fcce789020 Allow making the contacts and client_uri optional in client registration 2022-08-22 15:23:53 +02:00
dependabot[bot]
e5d3f90ef9 Bump serde_yaml from 0.9.9 to 0.9.10 
Bumps [serde_yaml](https://github.com/dtolnay/serde-yaml) from 0.9.9 to 0.9.10.
- [Release notes](https://github.com/dtolnay/serde-yaml/releases)
- [Commits](https://github.com/dtolnay/serde-yaml/compare/0.9.9...0.9.10)

---
updated-dependencies:
- dependency-name: serde_yaml
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-08-22 15:22:50 +02:00
dependabot[bot]
82fa87729c Bump serde from 1.0.143 to 1.0.144 
Bumps [serde](https://github.com/serde-rs/serde) from 1.0.143 to 1.0.144.
- [Release notes](https://github.com/serde-rs/serde/releases)
- [Commits](https://github.com/serde-rs/serde/compare/v1.0.143...v1.0.144)

---
updated-dependencies:
- dependency-name: serde
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-08-22 15:22:04 +02:00
dependabot[bot]
ebb83053ec Bump actions/cache from 3.0.7 to 3.0.8 
Bumps [actions/cache](https://github.com/actions/cache) from 3.0.7 to 3.0.8.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v3.0.7...v3.0.8)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-08-22 15:10:04 +02:00
Kévin Commaille
3d9608ca82 Allow to validate client metadata 
According to OpenID Connect Dynamic Client Registration Spec 1.0.
Introduce VerifiedClientMetadata.
 2022-08-19 13:58:43 +02:00
dependabot[bot]
d65fcbc46b Bump futures from 0.3.21 to 0.3.23 
Bumps [futures](https://github.com/rust-lang/futures-rs) from 0.3.21 to 0.3.23.
- [Release notes](https://github.com/rust-lang/futures-rs/releases)
- [Changelog](https://github.com/rust-lang/futures-rs/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rust-lang/futures-rs/compare/0.3.21...0.3.23)

---
updated-dependencies:
- dependency-name: futures
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-08-19 13:07:10 +02:00
dependabot[bot]
3fce459536 Bump clap from 3.2.16 to 3.2.17 
Bumps [clap](https://github.com/clap-rs/clap) from 3.2.16 to 3.2.17.
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/v3.2.17/CHANGELOG.md)
- [Commits](https://github.com/clap-rs/clap/compare/v3.2.16...v3.2.17)

---
updated-dependencies:
- dependency-name: clap
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-08-19 12:47:36 +02:00
dependabot[bot]
90e4217d68 Bump ecdsa from 0.14.3 to 0.14.4 
Bumps [ecdsa](https://github.com/RustCrypto/signatures) from 0.14.3 to 0.14.4.
- [Release notes](https://github.com/RustCrypto/signatures/releases)
- [Commits](https://github.com/RustCrypto/signatures/compare/ecdsa/v0.14.3...ecdsa/v0.14.4)

---
updated-dependencies:
- dependency-name: ecdsa
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-08-19 12:43:27 +02:00
dependabot[bot]
42cf3016fa Bump once_cell from 1.13.0 to 1.13.1 
Bumps [once_cell](https://github.com/matklad/once_cell) from 1.13.0 to 1.13.1.
- [Release notes](https://github.com/matklad/once_cell/releases)
- [Changelog](https://github.com/matklad/once_cell/blob/master/CHANGELOG.md)
- [Commits](https://github.com/matklad/once_cell/compare/v1.13.0...v1.13.1)

---
updated-dependencies:
- dependency-name: once_cell
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-08-19 12:41:16 +02:00
Quentin Gliech
4f365ab0a6 Add the evaluation context policy generic parameter 2022-08-19 12:37:10 +02:00
dependabot[bot]
1316dfcb34 Bump opa-wasm from 1930d78 to 770075c 
Bumps [opa-wasm](https://github.com/matrix-org/rust-opa-wasm) from `1930d78` to `770075c`.
- [Release notes](https://github.com/matrix-org/rust-opa-wasm/releases)
- [Commits](1930d78b36...770075c883)

---
updated-dependencies:
- dependency-name: opa-wasm
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-08-19 12:37:10 +02:00
dependabot[bot]
0569280dfd Bump chrono from 0.4.20 to 0.4.22 
Bumps [chrono](https://github.com/chronotope/chrono) from 0.4.20 to 0.4.22.
- [Release notes](https://github.com/chronotope/chrono/releases)
- [Changelog](https://github.com/chronotope/chrono/blob/main/CHANGELOG.md)
- [Commits](https://github.com/chronotope/chrono/compare/v0.4.20...v0.4.22)

---
updated-dependencies:
- dependency-name: chrono
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-08-19 12:21:07 +02:00
dependabot[bot]
a3a1192d2a Bump futures-util from 0.3.21 to 0.3.23 
Bumps [futures-util](https://github.com/rust-lang/futures-rs) from 0.3.21 to 0.3.23.
- [Release notes](https://github.com/rust-lang/futures-rs/releases)
- [Changelog](https://github.com/rust-lang/futures-rs/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rust-lang/futures-rs/compare/0.3.21...0.3.23)

---
updated-dependencies:
- dependency-name: futures-util
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-08-19 12:19:45 +02:00
dependabot[bot]
7ecc7fce20 Bump axum-extra from 0.3.6 to 0.3.7 
Bumps [axum-extra](https://github.com/tokio-rs/axum) from 0.3.6 to 0.3.7.
- [Release notes](https://github.com/tokio-rs/axum/releases)
- [Changelog](https://github.com/tokio-rs/axum/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tokio-rs/axum/compare/axum-extra-v0.3.6...axum-extra-v0.3.7)

---
updated-dependencies:
- dependency-name: axum-extra
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-08-19 12:18:16 +02:00
dependabot[bot]
4395deb965 Bump signature from 1.5.0 to 1.6.0 
Bumps [signature](https://github.com/RustCrypto/traits) from 1.5.0 to 1.6.0.
- [Release notes](https://github.com/RustCrypto/traits/releases)
- [Commits](https://github.com/RustCrypto/traits/compare/signature-v1.5.0...signature-v1.6.0)

---
updated-dependencies:
- dependency-name: signature
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-08-19 12:11:30 +02:00
dependabot[bot]
21a400ffb5 Bump serde_yaml from 0.9.4 to 0.9.9 
Bumps [serde_yaml](https://github.com/dtolnay/serde-yaml) from 0.9.4 to 0.9.9.
- [Release notes](https://github.com/dtolnay/serde-yaml/releases)
- [Commits](https://github.com/dtolnay/serde-yaml/compare/0.9.4...0.9.9)

---
updated-dependencies:
- dependency-name: serde_yaml
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-08-19 11:57:58 +02:00
dependabot[bot]
11e440432c Bump tera from 1.16.0 to 1.17.0 
Bumps [tera](https://github.com/Keats/tera) from 1.16.0 to 1.17.0.
- [Release notes](https://github.com/Keats/tera/releases)
- [Changelog](https://github.com/Keats/tera/blob/master/CHANGELOG.md)
- [Commits](https://github.com/Keats/tera/compare/v1.16.0...v1.17.0)

---
updated-dependencies:
- dependency-name: tera
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-08-19 11:55:24 +02:00
dependabot[bot]
affa5cc080 Bump axum from 0.5.13 to 0.5.15 
Bumps [axum](https://github.com/tokio-rs/axum) from 0.5.13 to 0.5.15.
- [Release notes](https://github.com/tokio-rs/axum/releases)
- [Changelog](https://github.com/tokio-rs/axum/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tokio-rs/axum/compare/axum-v0.5.13...axum-v0.5.15)

---
updated-dependencies:
- dependency-name: axum
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-08-19 11:47:07 +02:00
Quentin Gliech
d2e2501e5f ci: Build the Docker image earlier 2022-08-19 11:43:36 +02:00
Quentin Gliech
b08accb42a ci: Only build docker image for amd64 in PRs 2022-08-19 11:43:36 +02:00
Quentin Gliech
b34f202517 Bump OPA to 0.43 and Rust to 1.63 in Docker image 
Also bumps the Dockerfile frontend to 1.4
 2022-08-19 11:43:36 +02:00
Quentin Gliech
3d25842853 Bump AWS crates 2022-08-19 11:13:36 +02:00
dependabot[bot]
e94344fca6 Bump chacha20poly1305 from 0.10.0 to 0.10.1 
Bumps [chacha20poly1305](https://github.com/RustCrypto/AEADs) from 0.10.0 to 0.10.1.
- [Release notes](https://github.com/RustCrypto/AEADs/releases)
- [Commits](https://github.com/RustCrypto/AEADs/compare/chacha20poly1305-v0.10.0...chacha20poly1305-v0.10.1)

---
updated-dependencies:
- dependency-name: chacha20poly1305
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-08-19 11:04:39 +02:00
Quentin Gliech
bf8b431d53 Apply suggestions from code review 
Co-authored-by: Kévin Commaille <76261501+zecakeh@users.noreply.github.com>
 2022-08-19 10:51:24 +02:00
Quentin Gliech
c23014b5de Gate some crates behind features in mas-http 2022-08-19 10:51:24 +02:00
Quentin Gliech
7dfebeda82 Add a layer to catch HTTP error codes 2022-08-19 10:51:24 +02:00
Quentin Gliech
3a8003f359 Layer to application/x-www-form-urlencoded bodies 2022-08-19 10:51:24 +02:00
Quentin Gliech
5bb2868795 Better Tower layers 2022-08-19 10:51:24 +02:00
dependabot[bot]
8efcaaadbb Bump cssnano from 5.1.12 to 5.1.13 in /crates/static-files 
Bumps [cssnano](https://github.com/cssnano/cssnano) from 5.1.12 to 5.1.13.
- [Release notes](https://github.com/cssnano/cssnano/releases)
- [Commits](https://github.com/cssnano/cssnano/commits)

---
updated-dependencies:
- dependency-name: cssnano
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-08-19 10:34:11 +02:00
dependabot[bot]
4bd231dbb7 Bump actions/cache from 3.0.5 to 3.0.7 
Bumps [actions/cache](https://github.com/actions/cache) from 3.0.5 to 3.0.7.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v3.0.5...v3.0.7)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-08-19 10:32:43 +02:00