Matthew M. Boedicker
123d7c8124
Add --oidc-extra-url-params argument ( #255 )
...
* Add --oidc-extra-url-params argument
This accepts a comma-separated list of key-value pairs that will be
added to get token requests as query string parameters.
Closes #254 .
* Refactor
- move code setting the extra params to the authorization code flow specific functions (it is not needed in ROPC flow)
- add unit tests
- rename flag to --oidc-auth-request-extra-params
- add description to README.md
* Add integration test for --oidc-auth-request-extra-params
Co-authored-by: Hidetake Iwata <int128@gmail.com >
2020-03-25 11:52:53 +09:00
Hidetake Iwata
07e34d2222
Refactor ( #245 )
...
* Refactor: use Command.Context
* Refactor: do not infer command name for help/version
2020-02-22 15:40:43 +09:00
Hidetake Iwata
0e2d402c40
Bump github.com/int128/oauth2cli to v1.9.0 ( #244 )
...
* Bump github.com/int128/oauth2cli to v1.9.0
* Generate state parameter and pass to oauth2cli
* Refactor: use base64.NoPadding
2020-02-22 15:26:54 +09:00
Hidetake Iwata
8b9e31b4c5
Refactor: error messages and testing/logger ( #243 )
...
* Refactor: respect -v option in testing/logger
* Refactor: revise error messages
2020-02-22 12:31:00 +09:00
Hidetake Iwata
d59e3355fe
Refactor: rename to adaptor/reader
2020-02-21 22:56:43 +09:00
Hidetake Iwata
9d2d0109d5
Refactor: extract adaptor/clock and testing/clock
2020-02-21 22:49:48 +09:00
Hidetake Iwata
aac8780caf
Refactor: move to testing/logger
2020-02-21 22:39:27 +09:00
Hidetake Iwata
f89525b184
Refactor: extract domain/jwt and testing/jwt ( #241 )
...
* Refactor: extract domain/jwt and testing/jwt
* Refactor: remove jwt-go dep from product code
2020-02-21 22:33:08 +09:00
Hidetake Iwata
a46dab3dfd
Fix error if multiple aud claim is given ( #240 )
2020-02-21 09:58:01 +09:00
Hidetake Iwata
42879dc915
Revise setup instruction ( #235 )
2020-02-12 21:27:08 +09:00
Hidetake Iwata
7ce98c7119
Add --certificate-authority-data option ( #233 )
2020-02-12 10:15:12 +09:00
Hidetake Iwata
2fa306c348
Improve error message if cannot open browser ( #230 )
2020-02-11 15:50:10 +09:00
Hidetake Iwata
c53d415255
Refactor test and interfaces ( #227 )
...
* Refactor: extract adaptors.browser package
* Refactor: rename to idp.Provider
* Refactor: rename to adaptors.credentialpluginwriter
2020-02-07 11:56:31 +09:00
Hidetake Iwata
a614943642
Bump version of k8s.io/client-go, k8s.io/apimachinery ( #210 )
2020-01-17 22:31:48 +09:00
Hidetake Iwata
d223175b92
Refactor dependency injection ( #209 )
...
* Refactor: use func type instead of factory interface
* Refactor: remove duplicated dependencies in di.go
2020-01-17 22:01:40 +09:00
Hidetake Iwata
6075c9dbe7
Add --listen-address option to bind all interfaces ( #208 )
2020-01-17 20:57:05 +09:00
Hidetake Iwata
76f61300d6
Refactor: extract oidc.Claims model ( #202 )
...
* Refactor: extract oidc.Claims model
* Refactor: extract Claims.IsExpired()
2019-12-26 20:17:30 +09:00
Hidetake Iwata
f7f1985a89
Refactor ( #201 )
...
* Refactor: rename to tokencache.Value
* Refactor: move to cmp.Diff from deep.Equal
* Refactor: reword error messages
2019-12-26 11:51:14 +09:00
Hidetake Iwata
3d47c88a8d
Fix token cache is not refreshed when oidc options changed ( #200 )
2019-12-25 10:44:44 +09:00
Hidetake Iwata
b8c29985e7
Refactor ( #183 )
...
* Refactor: split authentication types
* Refactor: reduce responsibility of oidcclient package
2019-11-01 11:27:28 +09:00
Hidetake Iwata
4683a005c7
Add authorization code flow with keyboard interactive ( #182 )
2019-11-01 11:01:43 +09:00
Hidetake Iwata
cc48fb4cf7
Refactor: regenerate mocks with newer mockgen ( #181 )
2019-10-31 11:17:53 +09:00
Hidetake Iwata
ec7f7a062a
Refactor: extract GrantOptionSet ( #180 )
2019-10-31 11:02:03 +09:00
Hidetake Iwata
e9ae98dfaf
Fix nonce verification ( #179 )
...
fixup cf4e310b2e (#175 )
2019-10-31 10:03:29 +09:00
Hidetake Iwata
0c582e97ad
Add --grant-type option and username prompt for ROPC ( #178 )
2019-10-31 00:36:40 +09:00
Hidetake Iwata
5a71247214
Refactor: extract authentication options ( #177 )
...
* Refactor: extract authentication options
* Refactor: make subtests
2019-10-30 21:32:51 +09:00
Hidetake Iwata
4a084756c3
Add OAuth 2.0 PKCE support ( #176 )
2019-10-30 20:47:58 +09:00
Hidetake Iwata
cf4e310b2e
Refactor: rename to oidcclient package and extract method ( #175 )
...
* Refactor: rename oidc package to oidcclient
* Refactor: extract parseToken method
2019-10-29 10:18:24 +09:00
Hidetake Iwata
4007e7f61a
Refactor: extract jwtdecoder package ( #174 )
2019-10-29 09:55:29 +09:00
Hidetake Iwata
2700e439b9
Refactor: remove kubeconfig.OIDCConfig for single responsibility ( #173 )
...
* Refactor: remove kubeconfig.OIDCConfig for single responsibility
* fixup: add comments and rename methods
* fixup: fix methods name
* fixup: replace GetX509OrNil with SetRootCAs
2019-10-28 23:45:17 +09:00
Hidetake Iwata
dbf6238029
Refactor: rename auth package ( #172 )
2019-10-28 20:02:59 +09:00
Hidetake Iwata
93e893bc36
Refactor: replace ListenPort with BindAddress option ( #171 )
2019-10-28 19:59:45 +09:00
Hidetake Iwata
581284c626
Suppress success log to prevent screen disturbance ( #165 )
2019-10-19 15:36:47 +09:00
Hidetake Iwata
b5922f9419
Refactor: fix error handling and improve stability ( #163 )
...
* Fix ReadPassword() does not respect argument
* Do not ignore error when context has been cancelled
* Use longer timeout to reveal concurrency design failure
* Refactor: use context.TODO in test
2019-10-04 22:28:09 +09:00
Hidetake Iwata
7a0ca206d1
Bump Go 1.13 and dependencies ( #162 )
...
* Bump Go 1.13 and dependencies
* Fix lint error
2019-10-04 21:26:26 +09:00
Hidetake Iwata
0bc117ddc7
Refactor ( #158 )
...
* Refactor: template rendering
* Refactor: rename DecodedIDToken fields
* Refactor: expand command options
* Refactor: improve help messages
2019-09-30 18:27:23 +09:00
Hidetake Iwata
8c640f6c73
Add setup command ( #157 )
...
* Add setup command
* Refactor: extract IDTokenSubject instead of sub claims
2019-09-29 18:34:59 +09:00
Hidetake Iwata
8a5efac337
Add deprecation message of standalone mode ( #155 )
2019-09-28 11:03:03 +09:00
Hidetake Iwata
6b1e11f071
Refactor: use channel to wait for opening browser ( #143 )
2019-08-30 20:41:36 +09:00
Hidetake Iwata
bf02210f2a
Refactor: merge interface and implementation package ( #141 )
...
* Refactor: move logger interfaces
* Refactor: move oidc interfaces
* Refactor: move env interface
* Refactor: move credential plugin interface
* Refactor: move token cache interface
* Refactor: move kubeconfig interface
* Refactor: move cmd interface
* Refactor: move use-cases interfaces
2019-08-28 22:55:28 +09:00
Hidetake Iwata
53e8284b63
Move to k8s.io/klog ( #139 )
2019-08-27 14:48:44 +09:00
Hidetake Iwata
1e80481145
Refactor: split commands ( #137 )
2019-08-22 17:22:03 +09:00
Hidetake Iwata
315d6151d7
Refactor ( #133 )
...
* Refactor: change debug messages to lowercase
* Refactor: add debug messages
* Refactor Makefile
* Refactor: add keys and certificates of e2e tests
2019-08-18 15:14:07 +09:00
Hidetake Iwata
1ff03fdfb3
Skip verification of cached token to reduce time ( #132 )
2019-08-17 21:40:14 +09:00
Hidetake Iwata
5e0fc7f399
Save token cache for each issuer and client ID ( #131 )
2019-08-14 14:52:58 +09:00
Hidetake Iwata
0a4ebb26c2
Refactor packages structure ( #129 )
2019-08-09 10:15:17 +09:00