Hidetake Iwata and GitHub
898e8a12de
Refactor PKCE implementation ( #1239 )
2025-01-12 21:41:20 +09:00
438068e9de
refactor: Move useAccessToken to oidc.Provider ( #1160 )
...
* refactor: Move useAccessToken to oidc.Provider
* Generated by GitHub Actions (go / generate)
https://github.com/int128/kubelogin/actions/runs/11530911738
---------
Co-authored-by: update-generated-files-action <41898282+github-actions[bot]@users.noreply.github.com>
2024-10-26 21:07:44 +09:00
Hidetake Iwata and GitHub
3d114bfeba
Lock token cache file before authentication ( #1126 )
...
* Lock token cache file in authentication
* Fix tests
* make generate
* Lock before FindByKey
* Fix test
2024-09-21 14:54:32 +09:00
Hidetake Iwata and GitHub
66127ff3fc
Migrate to mockery packages feature ( #1124 )
...
* Migrate to mockery packages feature
* Fix workflow
2024-08-17 12:27:13 +09:00
905238ce07
Add new --oidc-use-access-token flag to get-token ( #1084 )
...
* Add new `--oidc-use-access-token` flag to `get-token`
Implements https://github.com/int128/kubelogin/issues/1083 . See
description there for context.
In its current form, this PR is bare bones functionality. I have not yet
added any tests to confirm this behavior. Additionally, we could
consider updtating some of the naming. It is confusing to return a
`TokenSet` where `IDToken` actually has an `accessToken`. I'm open to
feedback on how best to improve this.
However, this PR is functional. I have validated it locally. Without
adding `--oidc-use-access-token`, and `id_token` is successfully
returned. Adding `--oidc-use-access-token` results in an `access_token`
being successfully returned.
* Fix failing tests
Needed to plumb through our new parameter `UseAccessToken` to the mocks
as well.
* Add a test to make sure new flag is plumbed through
* Support Access Tokens whose audience differ from the client_id
As noted in the PR, there are some cases where the access token `aud`
field will not be the `client_id`. To allow for these, we use a
different token verifier that will not verify that claim.
---------
Co-authored-by: Adam kafka <akafka@tesla.com >
2024-08-16 16:57:05 +09:00
9e2fcd8cdb
fix(deps): update module github.com/golang-jwt/jwt/v4 to v5 ( #925 )
...
* fix(deps): update module github.com/golang-jwt/jwt/v4 to v5
* Replace with `jwt.RegisteredClaims`
* Replace with `jwt.NewNumericDate`
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Hidetake Iwata <int128@gmail.com >
2023-05-14 21:38:48 +09:00
Hidetake Iwata and GitHub
7152bccd21
refactor: migrate to Testify Mock ( #739 )
2022-07-16 16:55:51 +09:00
Hidetake Iwata and GitHub
b1d8e8f7e1
Refactor: rewrite with Go errors package ( #427 )
2020-11-21 12:10:42 +09:00
Hidetake Iwata and GitHub
13d232ec21
Refactor: move oidc/client package ( #425 )
2020-11-21 07:27:34 +09:00
Hidetake Iwata and GitHub
34762216c1
Refactor: extract tlsclientconfig.Config ( #409 )
2020-11-03 14:37:24 +09:00
Hidetake Iwata and GitHub
5b2c82fc33
Refactor: replace DTO with oidc.TokenSet type ( #394 )
...
* Refactor: remove IDTokenClaims from TokenSet and decode in use-cases
* Refactor: use oidc.TokenSet for cache repository
2020-10-03 17:49:21 +09:00
Hidetake Iwata and GitHub
1dee4a354e
Refactor: extract oidc.Provider ( #393 )
2020-10-03 08:35:35 +09:00
Hidetake Iwata and GitHub
ebdfcfb1c8
Add --authentication-timeout-sec flag ( #387 )
2020-09-27 21:55:55 +09:00
Hidetake Iwata and GitHub
c488888834
Refactor: pull up packages of domain ( #349 )
2020-07-30 09:37:10 +09:00
Hidetake Iwata and GitHub
dbb684f10e
Refactor: use oidc.TokenSet in adaptors ( #347 )
2020-07-30 09:26:21 +09:00
Hidetake Iwata and GitHub
a0e81e762c
Refactor: split authentication package into methods ( #346 )
2020-07-30 00:31:23 +09:00
Hidetake Iwata and GitHub
804a245fde
Refactor: rename to AuthCodeBrowser ( #342 )
2020-07-26 18:49:22 +09:00
Hidetake Iwata and GitHub
e88138c640
Refactor: fix token verifier does not respect clock ( #290 )
2020-05-13 15:45:14 +09:00
Hidetake Iwata and GitHub
175275bf3d
Fix to send challenge only if provider supports PKCE ( #283 )
2020-05-08 22:19:32 +09:00
Hidetake Iwata
9d2d0109d5
Refactor: extract adaptor/clock and testing/clock
2020-02-21 22:49:48 +09:00
Hidetake Iwata
aac8780caf
Refactor: move to testing/logger
2020-02-21 22:39:27 +09:00
Hidetake Iwata and GitHub
f89525b184
Refactor: extract domain/jwt and testing/jwt ( #241 )
...
* Refactor: extract domain/jwt and testing/jwt
* Refactor: remove jwt-go dep from product code
2020-02-21 22:33:08 +09:00
Hidetake Iwata and GitHub
d223175b92
Refactor dependency injection ( #209 )
...
* Refactor: use func type instead of factory interface
* Refactor: remove duplicated dependencies in di.go
2020-01-17 22:01:40 +09:00
Hidetake Iwata and GitHub
76f61300d6
Refactor: extract oidc.Claims model ( #202 )
...
* Refactor: extract oidc.Claims model
* Refactor: extract Claims.IsExpired()
2019-12-26 20:17:30 +09:00
Hidetake Iwata and GitHub
f7f1985a89
Refactor ( #201 )
...
* Refactor: rename to tokencache.Value
* Refactor: move to cmp.Diff from deep.Equal
* Refactor: reword error messages
2019-12-26 11:51:14 +09:00
Hidetake Iwata and GitHub
b8c29985e7
Refactor ( #183 )
...
* Refactor: split authentication types
* Refactor: reduce responsibility of oidcclient package
2019-11-01 11:27:28 +09:00
Hidetake Iwata and GitHub
ec7f7a062a
Refactor: extract GrantOptionSet ( #180 )
2019-10-31 11:02:03 +09:00
Hidetake Iwata and GitHub
0c582e97ad
Add --grant-type option and username prompt for ROPC ( #178 )
2019-10-31 00:36:40 +09:00
Hidetake Iwata and GitHub
5a71247214
Refactor: extract authentication options ( #177 )
...
* Refactor: extract authentication options
* Refactor: make subtests
2019-10-30 21:32:51 +09:00
Hidetake Iwata and GitHub
cf4e310b2e
Refactor: rename to oidcclient package and extract method ( #175 )
...
* Refactor: rename oidc package to oidcclient
* Refactor: extract parseToken method
2019-10-29 10:18:24 +09:00
Hidetake Iwata and GitHub
4007e7f61a
Refactor: extract jwtdecoder package ( #174 )
2019-10-29 09:55:29 +09:00
Hidetake Iwata and GitHub
2700e439b9
Refactor: remove kubeconfig.OIDCConfig for single responsibility ( #173 )
...
* Refactor: remove kubeconfig.OIDCConfig for single responsibility
* fixup: add comments and rename methods
* fixup: fix methods name
* fixup: replace GetX509OrNil with SetRootCAs
2019-10-28 23:45:17 +09:00
Hidetake Iwata and GitHub
dbf6238029
Refactor: rename auth package ( #172 )
2019-10-28 20:02:59 +09:00
Hidetake IwataandGitHub
