You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
jwt resolver (#747)
* Update JWT config section, add config endpoints collection and timeouts.
* Remove the empty, unused `directory.txt` file
* Extract JWT resolver, separating resolve identity from resolve subject and fetching the user object.
* Extract gRPC common code from authz.go
* Rewire authorization service to use JWT resolver, which contains a JWKS cache when config endpoints are registered
* Remove existing JWT tests as the implementation require OIDC config endpoint which is currently not part of the test service.
* Remove the old JWT implementation
* Move identity resolution code from authz,go and the deleted jwt.go files.
* Set error on not OK
* Revert to AllowedIssuers, add ExpectedAudience
* Extract the OIDC client
* Refactor to use OidcClient, add config and JWT validation steps
* Explicitly add WithAudience when ExpectedAudience is set
* Add SECURE.md and enable reporting
* Add check unverifiedIssuer == ""
* Separate interactive JWTResolver debug tests
* Enable client injection for testing
* Port old jwt_test.go tests
* Fix review feedback
---------
Signed-off-by: Gert Drapers <1533850+gertd@users.noreply.github.com>