TheArchive/zitadel
1
0
Fork 0
mirror of https://github.com/zitadel/zitadel.git synced 2024-12-17 21:37:35 +00:00
Code Issues Packages Projects Releases Wiki Activity
zitadel/go.mod

207 lines
9.5 KiB
Modula-2
Raw Permalink Normal View History

chore(v2): move to new org (#3499) * chore: move to new org * logging * fix: org rename caos -> zitadel Co-authored-by: adlerhurst <silvan.reusser@gmail.com>
2022-04-27 01:01:45 +02:00
module github.com/zitadel/zitadel
init go mod
2020-03-18 10:38:32 +01:00
chore: set specific go version (#7873) * chore: set specific go version * chore: set specific go version * chore: set specific go version
2024-05-07 10:44:39 +02:00
go 1.22.2
added main cmd structure
2020-03-18 15:46:41 +01:00
require (
chore(deps): update all go deps (#7773) This change updates all go modules, including oidc, a major version of go-jose and the go 1.22 release.
2024-04-15 12:17:36 +03:00
cloud.google.com/go/storage v1.40.0
fix(deps): upgrade oidc and otel (#6468)
2023-09-01 13:32:13 +03:00
github.com/BurntSushi/toml v1.3.2
chore(deps): upgrade all go deps (#7227) * chore(deps): upgrade all go deps Also `go mod tidy`. Added comments with URLs for package version lists to makefile commands. * Update Makefile Co-authored-by: Livio Spring <livio.a@gmail.com> --------- Co-authored-by: Livio Spring <livio.a@gmail.com>
2024-01-16 11:27:09 +02:00
github.com/DATA-DOG/go-sqlmock v1.5.2
chore(deps): update all go deps (#7773) This change updates all go modules, including oidc, a major version of go-jose and the go 1.22 release.
2024-04-15 12:17:36 +03:00
github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/trace v1.22.0
chore: update dependencies (#5401) * chore(backend): update dependencies * chore(pipeline): update golangci-lint
2023-04-06 08:29:55 +02:00
github.com/Masterminds/squirrel v1.5.4
fix: Allow empty email (#2593) * fix(management): allow emty email in resend initialization email * fix: update dependencies * download correct files
2021-10-28 17:35:24 +02:00
github.com/ajstarks/svgo v0.0.0-20211024235047-1546f124cd8b
fix(deps): upgrade oidc and otel (#6468)
2023-09-01 13:32:13 +03:00
github.com/benbjohnson/clock v1.3.5
fix(build): update go version to 1.16 and dependencies (#2136) * chore(deps): bump k8s.io/apiextensions-apiserver from 0.19.2 to 0.21.3 Bumps [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver) from 0.19.2 to 0.21.3. - [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases) - [Commits](https://github.com/kubernetes/apiextensions-apiserver/compare/v0.19.2...v0.21.3) --- updated-dependencies: - dependency-name: k8s.io/apiextensions-apiserver dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> * chore(deps): bump google.golang.org/api from 0.34.0 to 0.52.0 Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.34.0 to 0.52.0. - [Release notes](https://github.com/googleapis/google-api-go-client/releases) - [Changelog](https://github.com/googleapis/google-api-go-client/blob/master/CHANGES.md) - [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.34.0...v0.52.0) --- updated-dependencies: - dependency-name: google.golang.org/api dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> * start update dependencies * update mods and otlp * fix(build): update to go 1.16 * old version for k8s mods * update k8s versions * update orbos * with batcher * add batch span processor * try with older otel version 0.20 * remove syncer * otel rc2 * fix config Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Stefan Benz <stefan@caos.ch>
2021-08-10 07:27:27 +02:00
github.com/boombuler/barcode v1.0.1
chore(deps): update all go deps (#7773) This change updates all go modules, including oidc, a major version of go-jose and the go 1.22 release.
2024-04-15 12:17:36 +03:00
github.com/brianvoe/gofakeit/v6 v6.28.0
github.com/cockroachdb/cockroach-go/v2 v2.3.7
feat: show basic info start-from-init (#6183)
2023-07-12 19:46:50 +02:00
github.com/common-nighthawk/go-figure v0.0.0-20210622060536-734e95fb86be
chore: update dependencies (#6826)
2023-10-26 18:03:57 +03:00
github.com/crewjam/saml v0.4.14
feat: implement register Passkey user API v2 (#5873) * command/crypto: DRY the code - reuse the the algorithm switch to create a secret generator - add a verifyCryptoCode function * command: crypto code tests * migrate webauthn package * finish integration tests with webauthn mock client
2023-05-24 13:22:00 +03:00
github.com/descope/virtualwebauthn v1.0.2
chore(core): update dependencies (#7517) * chore(core): update dependencies * chore(core): update dependencies
2024-03-11 11:43:56 +01:00
github.com/dop251/goja v0.0.0-20240220182346-e401ed450204
github.com/dop251/goja_nodejs v0.0.0-20240221231712-27eeffc9c235
feat: add basic structure of idp templates (#5053) add basic structure and implement first providers for IDP templates to be able to manage and use them in the future
2023-01-23 08:11:40 +01:00
github.com/drone/envsubst v1.0.3
chore(core): update dependencies (#7517) * chore(core): update dependencies * chore(core): update dependencies
2024-03-11 11:43:56 +01:00
github.com/envoyproxy/protoc-gen-validate v1.0.4
chore(deps): upgrade all go modules (#6895) * chore(deps): upgrade all go modules This change upgrades all go.mod dependecies. As well as Makefile tools. There where some imports that still used the old and deprecated `github.com/golang/protobuf/ptypes` package. These have been moved to the equivelant `google.golang.org/protobuf/types/known` package. The `internal/proto` package is removed as was only used once. With a simple refactor in the Validator it became completely obsolete. * fix validate unit test * cleanup merge * update otel --------- Co-authored-by: Livio Spring <livio.a@gmail.com>
2023-11-13 12:41:29 +02:00
github.com/fatih/color v1.16.0
fix: detect mime type of uploaded asset (#7648)
2024-03-27 10:41:10 +01:00
github.com/gabriel-vasile/mimetype v1.4.3
chore(deps): update all go deps (#7773) This change updates all go modules, including oidc, a major version of go-jose and the go 1.22 release.
2024-04-15 12:17:36 +03:00
github.com/go-jose/go-jose/v4 v4.0.1
github.com/go-ldap/ldap/v3 v3.4.7
github.com/go-webauthn/webauthn v0.10.2
chore(deps): upgrade all go modules (#6895) * chore(deps): upgrade all go modules This change upgrades all go.mod dependecies. As well as Makefile tools. There where some imports that still used the old and deprecated `github.com/golang/protobuf/ptypes` package. These have been moved to the equivelant `google.golang.org/protobuf/types/known` package. The `internal/proto` package is removed as was only used once. With a simple refactor in the Validator it became completely obsolete. * fix validate unit test * cleanup merge * update otel --------- Co-authored-by: Livio Spring <livio.a@gmail.com>
2023-11-13 12:41:29 +02:00
github.com/gorilla/csrf v1.7.2
github.com/gorilla/mux v1.8.1
chore(deps): update all go deps (#7773) This change updates all go modules, including oidc, a major version of go-jose and the go 1.22 release.
2024-04-15 12:17:36 +03:00
github.com/gorilla/schema v1.3.0
fix: use x-zitadel-forwarded header (#6900) fix: use x-zitadel-forward header
2023-11-10 17:02:53 +02:00
github.com/gorilla/securecookie v1.1.2
chore: update dependencies (#5401) * chore(backend): update dependencies * chore(pipeline): update golangci-lint
2023-04-06 08:29:55 +02:00
github.com/grpc-ecosystem/go-grpc-middleware v1.4.0
fix(tracing): from opencensus to opentelemetry (#937) * refactor: switch from opencensus to opentelemetry * tempo works as designed nooooot * fix: log traceids * with grafana agent * fix: http tracing * fix: cleanup files * chore: remove todo * fix: bad test * fix: ignore methods in grpc interceptors * fix: remove test log * clean up * typo * fix(config): configure tracing endpoint * fix(span): add error id to span
2020-11-20 07:57:39 +01:00
github.com/grpc-ecosystem/grpc-gateway v1.16.0
chore(core): update dependencies (#7517) * chore(core): update dependencies * chore(core): update dependencies
2024-03-11 11:43:56 +01:00
github.com/grpc-ecosystem/grpc-gateway/v2 v2.19.1
feat: add basic structure of idp templates (#5053) add basic structure and implement first providers for IDP templates to be able to manage and use them in the future
2023-01-23 08:11:40 +01:00
github.com/h2non/gock v1.2.0
perf: cache auth request in memory (#7824) * perf: cache auth request in memory
2024-04-23 13:23:50 +02:00
github.com/hashicorp/golang-lru/v2 v2.0.7
feat: run on a single port (#3163) * start v2 * start * run * some cleanup * remove v2 pkg again * simplify * webauthn * remove unused config * fix login path in Dockerfile * fix asset_generator.go * health handler * fix grpc web * refactor * merge * build new main.go * run new main.go * update logging pkg * fix error msg * update logging * cleanup * cleanup * go mod tidy * change localDevMode * fix customEndpoints * update logging * comments * change local flag to external configs * fix location generated go code * fix Co-authored-by: fforootd <florian@caos.ch>
2022-02-14 17:22:30 +01:00
github.com/improbable-eng/grpc-web v0.15.0
chore: use pgx v5 (#7577) * chore: use pgx v5 * chore: update go version * remove direct pq dependency * remove unnecessary type * scan test * map scanner * converter * uint8 number array * duration * most unit tests work * unit tests work * chore: coverage * go 1.21 * linting * int64 gopfertammi * retry go 1.22 * retry go 1.22 * revert to go v1.21.5 * update go toolchain to 1.21.8 * go 1.21.8 * remove test flag * go 1.21.5 * linting * update toolchain * use correct array * use correct array * add byte array * correct value * correct error message * go 1.21 compatible
2024-03-27 14:48:22 +01:00
github.com/jackc/pgx/v5 v5.5.5
feat: add basic structure of idp templates (#5053) add basic structure and implement first providers for IDP templates to be able to manage and use them in the future
2023-01-23 08:11:40 +01:00
github.com/jarcoal/jpath v0.0.0-20140328210829-f76b8b2dbf52
chore(deps): bump github.com/jinzhu/gorm from 1.9.15 to 1.9.16 (#592) Bumps [github.com/jinzhu/gorm](https://github.com/jinzhu/gorm) from 1.9.15 to 1.9.16. - [Release notes](https://github.com/jinzhu/gorm/releases) - [Commits](https://github.com/jinzhu/gorm/compare/v1.9.15...v1.9.16) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-08-17 09:56:06 +02:00
github.com/jinzhu/gorm v1.9.16
fix(deps): upgrade oidc and otel (#6468)
2023-09-01 13:32:13 +03:00
github.com/k3a/html2text v1.2.1
chore(deps): upgrade all go modules (#6895) * chore(deps): upgrade all go modules This change upgrades all go.mod dependecies. As well as Makefile tools. There where some imports that still used the old and deprecated `github.com/golang/protobuf/ptypes` package. These have been moved to the equivelant `google.golang.org/protobuf/types/known` package. The `internal/proto` package is removed as was only used once. With a simple refactor in the Validator it became completely obsolete. * fix validate unit test * cleanup merge * update otel --------- Co-authored-by: Livio Spring <livio.a@gmail.com>
2023-11-13 12:41:29 +02:00
github.com/kevinburke/twilio-go v0.0.0-20231009225535-38b36b35294d
feat: label policy (#1708) * feat: label policy proto extension * feat: label policy and activate event * feat: label policy asset events * feat: label policy asset commands * feat: add storage key * feat: storage key validation * feat: label policy asset tests * feat: label policy query side * feat: avatar * feat: avatar event * feat: human avatar * feat: avatar read side * feat: font on iam label policy * feat: label policy font * feat: possiblity to create bucket on put file * uplaoder * login policy logo * set bucket prefix * feat: avatar upload * feat: avatar upload * feat: use assets on command side * feat: fix human avatar removed event * feat: remove human avatar * feat: mock asset storage * feat: remove human avatar * fix(operator): add configuration of asset storage to zitadel operator * feat(console): private labeling policy (#1697) * private labeling component, routing, preview * font, colors, upload, i18n * show logo * fix: uniqueness (#1710) * fix: uniqueconstraint to lower * feat: change org * feat: org change test * feat: change org * fix: tests * fix: handle domain claims correctly * feat: update org Co-authored-by: fabi <fabienne.gerschwiler@gmail.com> * fix: handle domain claimed event correctly for service users (#1711) * fix: handle domain claimed event correctly on user view * fix: ignore domain claimed events for email notifications * fix: change org * handle org changed in read models correctly * fix: change org in user grant handler Co-authored-by: fabi <fabienne.gerschwiler@gmail.com> * fix: correct value (#1695) * docs(api): correct link (#1712) * upload service Co-authored-by: Livio Amstutz <livio.a@gmail.com> Co-authored-by: fabi <fabienne.gerschwiler@gmail.com> Co-authored-by: Florian Forster <florian@caos.ch> * feat: fix tests, * feat: remove assets from label policy * fix npm, set environment * lint ts * remove stylelinting * fix(operator): add mapping for console with changed unit tests * fix(operator): add secrets as env variables to pod * feat: remove human avatar * fix(operator): add secrets as env variables to pod * feat: map label policy * feat: labelpolicy, admin, mgmt, adv settings (#1715) * fetch label policy, mgmt, admin service * feat: advanced beh, links, add, update * lint ts * feat: watermark * feat: remove human avatar * feat: remove human avatar * feat: remove human avatar * feat: remove human avatar * feat: remove human avatar * feat: remove human avatar * feat: remove human avatar * feat: custom css * css * css * css * css * css * getobject * feat: dynamic handler * feat: varibale css * content info * css overwrite * feat: variablen css * feat: generate css file * feat: dark mode * feat: dark mode * fix logo css * feat: upload logos * dark mode with cookie * feat: handle images in login * avatar css and begin font * feat: avatar * feat: user avatar * caching of static assets in login * add avatar.js to main.html * feat: header dont show logo if no url * feat: label policy colors * feat: mock asset storage * feat: mock asset storage * feat: fix tests * feat: user avatar * feat: header logo * avatar * avatar * make it compatible with go 1.15 * feat: remove unused logos * fix handler * fix: styling error handling * fonts * fix: download func * switch to mux * fix: change upload api to assets * fix build * fix: download avatar * fix: download logos * fix: my avatar * font * fix: remove error msg popup possibility * fix: docs * fix: svalidate colors * rem msg popup from frontend * fix: email with private labeling * fix: tests * fix: email templates * fix: change migration version * fix: fix duplicate imports * fix(console): assets, service url, upload, policy current and preview (#1781) * upload endpoint, layout * fetch current, preview, fix upload * cleanup private labeling * fix linting * begin generated asset handler * generate asset api in dockerfile * features for label policy * features for label policy * features * flag for asset generator * change asset generator flag * fix label policy view in grpc * fix: layout, activate policy (#1786) * theme switcher up on top * change layout * activate policy * feat(console): label policy back color, layout (#1788) * theme switcher up on top * change layout * activate policy * fix overwrite value fc * reset policy, reset service * autosave policy, preview desc, layout impv * layout, i18n * background colors, inject material styles * load images * clean, lint * fix layout * set custom hex * fix content size conversion * remove font format in generated css * fix features for assets * fix(console): label policy colors, image downloads, preview (#1804) * load images * colors, images binding * lint * refresh emitter * lint * propagate font colors * upload error handling * label policy feature check * add blob in csp for console * log * fix: feature edits for label policy, refresh state on upload (#1807) * show error on load image, stop spinner * fix merge * fix migration versions * fix assets * fix csp * fix background color * scss * fix build * lint scss * fix statik for console * fix features check for label policy * cleanup * lint * public links * fix notifications * public links * feat: merge main * feat: fix translation files * fix migration * set api domain * fix logo in email * font face in email * font face in email * validate assets on upload * cleanup * add missing translations * add missing translations Co-authored-by: Livio Amstutz <livio.a@gmail.com> Co-authored-by: Stefan Benz <stefan@caos.ch> Co-authored-by: Max Peintner <max@caos.ch> Co-authored-by: Florian Forster <florian@caos.ch>
2021-06-04 14:53:51 +02:00
github.com/lucasb-eyer/go-colorful v1.2.0
chore(deps): update all go deps (#7773) This change updates all go modules, including oidc, a major version of go-jose and the go 1.22 release.
2024-04-15 12:17:36 +03:00
github.com/minio/minio-go/v7 v7.0.69
perf: query data `AS OF SYSTEM TIME` (#5231) Queries the data in the storage layser at the timestamp when the call hit the API layer
2023-02-27 22:36:43 +01:00
github.com/mitchellh/mapstructure v1.5.0
github.com/muesli/gamut v0.3.1
feat: device authorization RFC 8628 (#5646) * device auth: implement the write events * add grant type device code * fix(init): check if default value implements stringer --------- Co-authored-by: adlerhurst <silvan.reusser@gmail.com>
2023-04-19 11:46:02 +03:00
github.com/muhlemmer/gu v0.3.1
chore(deps): upgrade to oidc v3 (#6737) This pr upgrades oidc to v3 . Function signature changes have been migrated as well. Specifically there are more client calls that take a context now. Where feasable a context is added to those calls. Where a context is not (easily) available context.TODO() is used as a reminder for when it does. Related to #6619
2023-10-17 18:19:51 +03:00
github.com/muhlemmer/httpforwarded v0.1.0
chore(core): update dependencies (#7517) * chore(core): update dependencies * chore(core): update dependencies
2024-03-11 11:43:56 +01:00
github.com/nicksnyder/go-i18n/v2 v2.4.0
perf: query data `AS OF SYSTEM TIME` (#5231) Queries the data in the storage layser at the timestamp when the call hit the API layer
2023-02-27 22:36:43 +01:00
github.com/pquerna/otp v1.4.0
feat(console): integrate frontend (#95) * feat: console frontend * chore(dependabot): cycle and npm * chore: rename citadel to zitadel, remove generated files * chore: delete go files * chore(frontend): ci steps * chore: remove docker and envoy files * chore: remove docker file * chore: working dir * chore: run proto build * add console start * chore: restructure folders * chore: remove gui build * statikFs * generate proto for console * add statik import * import * chore: try statik * chore: path * chore: path * chore: script in root * chore: order build steps * chore: go get * chore: folder traversal * chore: non empty test file * chore: gitignore * chore: gitignore * chore: statik path * chore: switch to failing FE build * fix: build * fix: project-grant-test * fix: rm test * add statik.go * go mod tidy * chore: place test, seperate test from build * chore: lint all the world * chore: ci the world instead * chore: tune docker * chore: undo container test * chore: fix run * chore: docker build * chore: test docker build * chore: go build flags * finaly * fix caos_local * go mod Co-authored-by: Livio Amstutz <livio.a@gmail.com> Co-authored-by: Max Peintner <max@caos.ch>
2020-05-13 14:41:43 +02:00
github.com/rakyll/statik v0.1.7
perf(oidc): optimize token creation (#7822) * implement code exchange * port tokenexchange to v2 tokens * implement refresh token * implement client credentials * implement jwt profile * implement device token * cleanup unused code * fix current unit tests * add user agent unit test * unit test domain package * need refresh token as argument * test commands create oidc session * test commands device auth * fix device auth build error * implicit for oidc session API * implement authorize callback handler for legacy implicit mode * upgrade oidc module to working draft * add missing auth methods and time * handle all errors in defer * do not fail auth request on error the oauth2 Go client automagically retries on any error. If we fail the auth request on the first error, the next attempt will always fail with the Errors.AuthRequest.NoCode, because the auth request state is already set to failed. The original error is then already lost and the oauth2 library does not return the original error. Therefore we should not fail the auth request. Might be worth discussing and perhaps send a bug report to Oauth2? * fix code flow tests by explicitly setting code exchanged * fix unit tests in command package * return allowed scope from client credential client * add device auth done reducer * carry nonce thru session into ID token * fix token exchange integration tests * allow project role scope prefix in client credentials client * gci formatting * do not return refresh token in client credentials and jwt profile * check org scope * solve linting issue on authorize callback error * end session based on v2 session ID * use preferred language and user agent ID for v2 access tokens * pin oidc v3.23.2 * add integration test for jwt profile and client credentials with org scopes * refresh token v1 to v2 * add user token v2 audit event * add activity trigger * cleanup and set panics for unused methods * use the encrypted code for v1 auth request get by code * add missing event translation * fix pipeline errors (hopefully) * fix another test * revert pointer usage of preferred language * solve browser info panic in device auth * remove duplicate entries in AMRToAuthMethodTypes to prevent future `mfa` claim * revoke v1 refresh token to prevent reuse * fix terminate oidc session * always return a new refresh toke in refresh token grant --------- Co-authored-by: Livio Spring <livio.a@gmail.com>
2024-05-16 08:07:56 +03:00
github.com/rs/cors v1.11.0
feat: implement user schema management (#7416) This PR adds the functionality to manage user schemas through the new user schema service. It includes the possibility to create a basic JSON schema and also provides a way on defining permissions (read, write) for owner and self context with an annotation. Further annotations for OIDC claims and SAML attribute mappings will follow. A guide on how to create a schema and assign permissions has been started. It will be extended though out the process of implementing the schema and users based on those. Note: This feature is in an early stage and therefore not enabled by default. To test it out, please enable the UserSchema feature flag on your instance / system though the feature service.
2024-03-12 14:50:13 +01:00
github.com/santhosh-tekuri/jsonschema/v5 v5.3.1
fix(deps): upgrade oidc and otel (#6468)
2023-09-01 13:32:13 +03:00
github.com/sony/sonyflake v1.2.0
chore(deps): upgrade all go modules (#6895) * chore(deps): upgrade all go modules This change upgrades all go.mod dependecies. As well as Makefile tools. There where some imports that still used the old and deprecated `github.com/golang/protobuf/ptypes` package. These have been moved to the equivelant `google.golang.org/protobuf/types/known` package. The `internal/proto` package is removed as was only used once. With a simple refactor in the Validator it became completely obsolete. * fix validate unit test * cleanup merge * update otel --------- Co-authored-by: Livio Spring <livio.a@gmail.com>
2023-11-13 12:41:29 +02:00
github.com/spf13/cobra v1.8.0
chore(deps): upgrade all go deps (#7227) * chore(deps): upgrade all go deps Also `go mod tidy`. Added comments with URLs for package version lists to makefile commands. * Update Makefile Co-authored-by: Livio Spring <livio.a@gmail.com> --------- Co-authored-by: Livio Spring <livio.a@gmail.com>
2024-01-16 11:27:09 +02:00
github.com/spf13/viper v1.18.2
chore(core): update dependencies (#7517) * chore(core): update dependencies * chore(core): update dependencies
2024-03-11 11:43:56 +01:00
github.com/stretchr/testify v1.9.0
cherry pick changes from main (#3371) * feat: remove exif data from uploaded images (#3221) * feat: remove exif tags from images * feat: remove exif data * feat: remove exif * fix: add preferredLoginName to user grant response (#3271) * chore: log webauthn parse error (#3272) * log error * log error * feat: Help link in privacy policy * fix: convert correct detail data on organization (#3279) * fix: handle empty editor users * fix: add some missing translations (#3291) * fix: org policy translations * fix: metadata event types translation * fix: translations * fix: filter resource owner correctly on project grant members (#3281) * fix: filter resource owner correctly on project grant members * fix: filter resource owner correctly on project grant members * fix: add orgIDs to zitadel permissions request Co-authored-by: fabi <fabienne.gerschwiler@gmail.com> * fix: get IAM memberships correctly in MyZitadelPermissions (#3309) * fix: correct login names on auth and notification users (#3349) * fix: correct login names on auth and notification users * fix: migration * fix: handle resource owner in action flows (#3361) * fix merge * fix: exchange exif library (#3366) * fix: exchange exif library * ignore tiffs * requested fixes * feat: Help link in privacy policy Co-authored-by: Fabi <38692350+fgerschwiler@users.noreply.github.com> Co-authored-by: fabi <fabienne.gerschwiler@gmail.com>
2022-03-24 14:00:24 +01:00
github.com/superseriousbusiness/exifremove v0.0.0-20210330092427-6acd27eac203
fix(build): update go version to 1.16 and dependencies (#2136) * chore(deps): bump k8s.io/apiextensions-apiserver from 0.19.2 to 0.21.3 Bumps [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver) from 0.19.2 to 0.21.3. - [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases) - [Commits](https://github.com/kubernetes/apiextensions-apiserver/compare/v0.19.2...v0.21.3) --- updated-dependencies: - dependency-name: k8s.io/apiextensions-apiserver dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> * chore(deps): bump google.golang.org/api from 0.34.0 to 0.52.0 Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.34.0 to 0.52.0. - [Release notes](https://github.com/googleapis/google-api-go-client/releases) - [Changelog](https://github.com/googleapis/google-api-go-client/blob/master/CHANGES.md) - [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.34.0...v0.52.0) --- updated-dependencies: - dependency-name: google.golang.org/api dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> * start update dependencies * update mods and otlp * fix(build): update to go 1.16 * old version for k8s mods * update k8s versions * update orbos * with batcher * add batch span processor * try with older otel version 0.20 * remove syncer * otel rc2 * fix config Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Stefan Benz <stefan@caos.ch>
2021-08-10 07:27:27 +02:00
github.com/ttacon/libphonenumber v1.2.1
chore(core): update dependencies (#7517) * chore(core): update dependencies * chore(core): update dependencies
2024-03-11 11:43:56 +01:00
github.com/zitadel/logging v0.6.0
perf(oidc): optimize token creation (#7822) * implement code exchange * port tokenexchange to v2 tokens * implement refresh token * implement client credentials * implement jwt profile * implement device token * cleanup unused code * fix current unit tests * add user agent unit test * unit test domain package * need refresh token as argument * test commands create oidc session * test commands device auth * fix device auth build error * implicit for oidc session API * implement authorize callback handler for legacy implicit mode * upgrade oidc module to working draft * add missing auth methods and time * handle all errors in defer * do not fail auth request on error the oauth2 Go client automagically retries on any error. If we fail the auth request on the first error, the next attempt will always fail with the Errors.AuthRequest.NoCode, because the auth request state is already set to failed. The original error is then already lost and the oauth2 library does not return the original error. Therefore we should not fail the auth request. Might be worth discussing and perhaps send a bug report to Oauth2? * fix code flow tests by explicitly setting code exchanged * fix unit tests in command package * return allowed scope from client credential client * add device auth done reducer * carry nonce thru session into ID token * fix token exchange integration tests * allow project role scope prefix in client credentials client * gci formatting * do not return refresh token in client credentials and jwt profile * check org scope * solve linting issue on authorize callback error * end session based on v2 session ID * use preferred language and user agent ID for v2 access tokens * pin oidc v3.23.2 * add integration test for jwt profile and client credentials with org scopes * refresh token v1 to v2 * add user token v2 audit event * add activity trigger * cleanup and set panics for unused methods * use the encrypted code for v1 auth request get by code * add missing event translation * fix pipeline errors (hopefully) * fix another test * revert pointer usage of preferred language * solve browser info panic in device auth * remove duplicate entries in AMRToAuthMethodTypes to prevent future `mfa` claim * revoke v1 refresh token to prevent reuse * fix terminate oidc session * always return a new refresh toke in refresh token grant --------- Co-authored-by: Livio Spring <livio.a@gmail.com>
2024-05-16 08:07:56 +03:00
github.com/zitadel/oidc/v3 v3.23.2
chore(deps): upgrade all go deps (#7227) * chore(deps): upgrade all go deps Also `go mod tidy`. Added comments with URLs for package version lists to makefile commands. * Update Makefile Co-authored-by: Livio Spring <livio.a@gmail.com> --------- Co-authored-by: Livio Spring <livio.a@gmail.com>
2024-01-16 11:27:09 +02:00
github.com/zitadel/passwap v0.5.0
fix: upgrade saml to v0.1.3 (#7072)
2023-12-13 11:43:02 +01:00
github.com/zitadel/saml v0.1.3
chore(deps): update all go deps (#7773) This change updates all go modules, including oidc, a major version of go-jose and the go 1.22 release.
2024-04-15 12:17:36 +03:00
github.com/zitadel/schema v1.3.0
perf(oidc): optimize token creation (#7822) * implement code exchange * port tokenexchange to v2 tokens * implement refresh token * implement client credentials * implement jwt profile * implement device token * cleanup unused code * fix current unit tests * add user agent unit test * unit test domain package * need refresh token as argument * test commands create oidc session * test commands device auth * fix device auth build error * implicit for oidc session API * implement authorize callback handler for legacy implicit mode * upgrade oidc module to working draft * add missing auth methods and time * handle all errors in defer * do not fail auth request on error the oauth2 Go client automagically retries on any error. If we fail the auth request on the first error, the next attempt will always fail with the Errors.AuthRequest.NoCode, because the auth request state is already set to failed. The original error is then already lost and the oauth2 library does not return the original error. Therefore we should not fail the auth request. Might be worth discussing and perhaps send a bug report to Oauth2? * fix code flow tests by explicitly setting code exchanged * fix unit tests in command package * return allowed scope from client credential client * add device auth done reducer * carry nonce thru session into ID token * fix token exchange integration tests * allow project role scope prefix in client credentials client * gci formatting * do not return refresh token in client credentials and jwt profile * check org scope * solve linting issue on authorize callback error * end session based on v2 session ID * use preferred language and user agent ID for v2 access tokens * pin oidc v3.23.2 * add integration test for jwt profile and client credentials with org scopes * refresh token v1 to v2 * add user token v2 audit event * add activity trigger * cleanup and set panics for unused methods * use the encrypted code for v1 auth request get by code * add missing event translation * fix pipeline errors (hopefully) * fix another test * revert pointer usage of preferred language * solve browser info panic in device auth * remove duplicate entries in AMRToAuthMethodTypes to prevent future `mfa` claim * revoke v1 refresh token to prevent reuse * fix terminate oidc session * always return a new refresh toke in refresh token grant --------- Co-authored-by: Livio Spring <livio.a@gmail.com>
2024-05-16 08:07:56 +03:00
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.51.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.51.0
go.opentelemetry.io/otel v1.26.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.26.0
go.opentelemetry.io/otel/exporters/prometheus v0.48.0
go.opentelemetry.io/otel/exporters/stdout/stdouttrace v1.26.0
go.opentelemetry.io/otel/metric v1.26.0
go.opentelemetry.io/otel/sdk v1.26.0
go.opentelemetry.io/otel/sdk/metric v1.26.0
go.opentelemetry.io/otel/trace v1.26.0
chore(deps): upgrade all go deps (#7227) * chore(deps): upgrade all go deps Also `go mod tidy`. Added comments with URLs for package version lists to makefile commands. * Update Makefile Co-authored-by: Livio Spring <livio.a@gmail.com> --------- Co-authored-by: Livio Spring <livio.a@gmail.com>
2024-01-16 11:27:09 +02:00
go.uber.org/mock v0.4.0
chore(deps): update all go deps (#7773) This change updates all go modules, including oidc, a major version of go-jose and the go 1.22 release.
2024-04-15 12:17:36 +03:00
golang.org/x/crypto v0.22.0
golang.org/x/exp v0.0.0-20240409090435-93d18d7e34b8
golang.org/x/net v0.24.0
golang.org/x/oauth2 v0.19.0
golang.org/x/sync v0.7.0
fix: use x-zitadel-forwarded header (#6900) fix: use x-zitadel-forward header
2023-11-10 17:02:53 +02:00
golang.org/x/text v0.14.0
chore(deps): update all go deps (#7773) This change updates all go modules, including oidc, a major version of go-jose and the go 1.22 release.
2024-04-15 12:17:36 +03:00
google.golang.org/api v0.172.0
perf(oidc): optimize token creation (#7822) * implement code exchange * port tokenexchange to v2 tokens * implement refresh token * implement client credentials * implement jwt profile * implement device token * cleanup unused code * fix current unit tests * add user agent unit test * unit test domain package * need refresh token as argument * test commands create oidc session * test commands device auth * fix device auth build error * implicit for oidc session API * implement authorize callback handler for legacy implicit mode * upgrade oidc module to working draft * add missing auth methods and time * handle all errors in defer * do not fail auth request on error the oauth2 Go client automagically retries on any error. If we fail the auth request on the first error, the next attempt will always fail with the Errors.AuthRequest.NoCode, because the auth request state is already set to failed. The original error is then already lost and the oauth2 library does not return the original error. Therefore we should not fail the auth request. Might be worth discussing and perhaps send a bug report to Oauth2? * fix code flow tests by explicitly setting code exchanged * fix unit tests in command package * return allowed scope from client credential client * add device auth done reducer * carry nonce thru session into ID token * fix token exchange integration tests * allow project role scope prefix in client credentials client * gci formatting * do not return refresh token in client credentials and jwt profile * check org scope * solve linting issue on authorize callback error * end session based on v2 session ID * use preferred language and user agent ID for v2 access tokens * pin oidc v3.23.2 * add integration test for jwt profile and client credentials with org scopes * refresh token v1 to v2 * add user token v2 audit event * add activity trigger * cleanup and set panics for unused methods * use the encrypted code for v1 auth request get by code * add missing event translation * fix pipeline errors (hopefully) * fix another test * revert pointer usage of preferred language * solve browser info panic in device auth * remove duplicate entries in AMRToAuthMethodTypes to prevent future `mfa` claim * revoke v1 refresh token to prevent reuse * fix terminate oidc session * always return a new refresh toke in refresh token grant --------- Co-authored-by: Livio Spring <livio.a@gmail.com>
2024-05-16 08:07:56 +03:00
google.golang.org/genproto/googleapis/api v0.0.0-20240429193739-8cf5692501f6
chore(deps): update all go deps (#7773) This change updates all go modules, including oidc, a major version of go-jose and the go 1.22 release.
2024-04-15 12:17:36 +03:00
google.golang.org/grpc v1.63.2
perf(oidc): optimize token creation (#7822) * implement code exchange * port tokenexchange to v2 tokens * implement refresh token * implement client credentials * implement jwt profile * implement device token * cleanup unused code * fix current unit tests * add user agent unit test * unit test domain package * need refresh token as argument * test commands create oidc session * test commands device auth * fix device auth build error * implicit for oidc session API * implement authorize callback handler for legacy implicit mode * upgrade oidc module to working draft * add missing auth methods and time * handle all errors in defer * do not fail auth request on error the oauth2 Go client automagically retries on any error. If we fail the auth request on the first error, the next attempt will always fail with the Errors.AuthRequest.NoCode, because the auth request state is already set to failed. The original error is then already lost and the oauth2 library does not return the original error. Therefore we should not fail the auth request. Might be worth discussing and perhaps send a bug report to Oauth2? * fix code flow tests by explicitly setting code exchanged * fix unit tests in command package * return allowed scope from client credential client * add device auth done reducer * carry nonce thru session into ID token * fix token exchange integration tests * allow project role scope prefix in client credentials client * gci formatting * do not return refresh token in client credentials and jwt profile * check org scope * solve linting issue on authorize callback error * end session based on v2 session ID * use preferred language and user agent ID for v2 access tokens * pin oidc v3.23.2 * add integration test for jwt profile and client credentials with org scopes * refresh token v1 to v2 * add user token v2 audit event * add activity trigger * cleanup and set panics for unused methods * use the encrypted code for v1 auth request get by code * add missing event translation * fix pipeline errors (hopefully) * fix another test * revert pointer usage of preferred language * solve browser info panic in device auth * remove duplicate entries in AMRToAuthMethodTypes to prevent future `mfa` claim * revoke v1 refresh token to prevent reuse * fix terminate oidc session * always return a new refresh toke in refresh token grant --------- Co-authored-by: Livio Spring <livio.a@gmail.com>
2024-05-16 08:07:56 +03:00
google.golang.org/protobuf v1.34.0
chore: update dependencies (#6826)
2023-10-26 18:03:57 +03:00
sigs.k8s.io/yaml v1.4.0
added main cmd structure
2020-03-18 15:46:41 +01:00
)
fix: remove vulnerable dependencies (#2577) * fix: remove vulnerable dependencies * fix: replace vulnerable dependencies (gin-gonic) * fix: replace vulnerable dependencies (gin-gonic)
2021-10-27 14:55:03 +02:00
feat: text query (#2735) * feat: change mail template to new query side * feat: adminapi message text * feat: adminapi message text * feat: adminapi message text * feat: message texts * feat: admin texts * feat: tests * feat: tests * feat: custom login text on adminapi * feat: custom login text * feat: custom login text * feat: message text prepare test * feat: login text texts * feat: custom login text * merge main * fix go.sum Co-authored-by: Livio Amstutz <livio.a@gmail.com>
2021-12-16 15:21:37 +01:00
require (
chore(deps): update all go deps (#7773) This change updates all go modules, including oidc, a major version of go-jose and the go 1.22 release.
2024-04-15 12:17:36 +03:00
github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping v0.46.0 // indirect
chore(deps): upgrade all go deps (#7227) * chore(deps): upgrade all go deps Also `go mod tidy`. Added comments with URLs for package version lists to makefile commands. * Update Makefile Co-authored-by: Livio Spring <livio.a@gmail.com> --------- Co-authored-by: Livio Spring <livio.a@gmail.com>
2024-01-16 11:27:09 +02:00
github.com/bmatcuk/doublestar/v4 v4.6.1 // indirect
feat: add SAML as identity provider (#6454) * feat: first implementation for saml sp * fix: add command side instance and org for saml provider * fix: add query side instance and org for saml provider * fix: request handling in event and retrieval of finished intent * fix: add review changes and integration tests * fix: add integration tests for saml idp * fix: correct unit tests with review changes * fix: add saml session unit test * fix: add saml session unit test * fix: add saml session unit test * fix: changes from review * fix: changes from review * fix: proto build error * fix: proto build error * fix: proto build error * fix: proto require metadata oneof * fix: login with saml provider * fix: integration test for saml assertion * lint client.go * fix json tag * fix: linting * fix import * fix: linting * fix saml idp query * fix: linting * lint: try all issues * revert linting config * fix: add regenerate endpoints * fix: translations * fix mk.yaml * ignore acs path for user agent cookie * fix: add AuthFromProvider test for saml * fix: integration test for saml retrieve information --------- Co-authored-by: Livio Spring <livio.a@gmail.com>
2023-09-29 11:26:14 +02:00
github.com/crewjam/httperr v0.2.0 // indirect
chore(core): update dependencies (#7517) * chore(core): update dependencies * chore(core): update dependencies
2024-03-11 11:43:56 +01:00
github.com/go-chi/chi/v5 v5.0.12 // indirect
chore(deps): upgrade all go deps (#7227) * chore(deps): upgrade all go deps Also `go mod tidy`. Added comments with URLs for package version lists to makefile commands. * Update Makefile Co-authored-by: Livio Spring <livio.a@gmail.com> --------- Co-authored-by: Livio Spring <livio.a@gmail.com>
2024-01-16 11:27:09 +02:00
github.com/go-logr/logr v1.4.1 // indirect
perf: query data `AS OF SYSTEM TIME` (#5231) Queries the data in the storage layser at the timestamp when the call hit the API layer
2023-02-27 22:36:43 +01:00
github.com/go-logr/stdr v1.2.2 // indirect
chore(deps): upgrade all go modules (#6895) * chore(deps): upgrade all go modules This change upgrades all go.mod dependecies. As well as Makefile tools. There where some imports that still used the old and deprecated `github.com/golang/protobuf/ptypes` package. These have been moved to the equivelant `google.golang.org/protobuf/types/known` package. The `internal/proto` package is removed as was only used once. With a simple refactor in the Validator it became completely obsolete. * fix validate unit test * cleanup merge * update otel --------- Co-authored-by: Livio Spring <livio.a@gmail.com>
2023-11-13 12:41:29 +02:00
github.com/go-sql-driver/mysql v1.7.1 // indirect
chore(deps): update all go deps (#7773) This change updates all go modules, including oidc, a major version of go-jose and the go 1.22 release.
2024-04-15 12:17:36 +03:00
github.com/go-webauthn/x v0.1.9 // indirect
chore(deps): upgrade all go modules (#6895) * chore(deps): upgrade all go modules This change upgrades all go.mod dependecies. As well as Makefile tools. There where some imports that still used the old and deprecated `github.com/golang/protobuf/ptypes` package. These have been moved to the equivelant `google.golang.org/protobuf/types/known` package. The `internal/proto` package is removed as was only used once. With a simple refactor in the Validator it became completely obsolete. * fix validate unit test * cleanup merge * update otel --------- Co-authored-by: Livio Spring <livio.a@gmail.com>
2023-11-13 12:41:29 +02:00
github.com/golang-jwt/jwt/v4 v4.5.0 // indirect
chore(core): update dependencies (#7517) * chore(core): update dependencies * chore(core): update dependencies
2024-03-11 11:43:56 +01:00
github.com/golang-jwt/jwt/v5 v5.2.1 // indirect
github.com/golang/protobuf v1.5.4 // indirect
fix(deps): upgrade oidc and otel (#6468)
2023-09-01 13:32:13 +03:00
github.com/google/go-tpm v0.9.0 // indirect
chore(deps): update all go deps (#7773) This change updates all go modules, including oidc, a major version of go-jose and the go 1.22 release.
2024-04-15 12:17:36 +03:00
github.com/google/pprof v0.0.0-20240409012703-83162a5b38cd // indirect
chore: update dependencies (#6826)
2023-10-26 18:03:57 +03:00
github.com/google/s2a-go v0.1.7 // indirect
chore: use pgx v5 (#7577) * chore: use pgx v5 * chore: update go version * remove direct pq dependency * remove unnecessary type * scan test * map scanner * converter * uint8 number array * duration * most unit tests work * unit tests work * chore: coverage * go 1.21 * linting * int64 gopfertammi * retry go 1.22 * retry go 1.22 * revert to go v1.21.5 * update go toolchain to 1.21.8 * go 1.21.8 * remove test flag * go 1.21.5 * linting * update toolchain * use correct array * use correct array * add byte array * correct value * correct error message * go 1.21 compatible
2024-03-27 14:48:22 +01:00
github.com/jackc/puddle/v2 v2.2.1 // indirect
chore(core): update dependencies (#7517) * chore(core): update dependencies * chore(core): update dependencies
2024-03-11 11:43:56 +01:00
github.com/klauspost/cpuid/v2 v2.2.7 // indirect
chore: use pgx v5 (#7577) * chore: use pgx v5 * chore: update go version * remove direct pq dependency * remove unnecessary type * scan test * map scanner * converter * uint8 number array * duration * most unit tests work * unit tests work * chore: coverage * go 1.21 * linting * int64 gopfertammi * retry go 1.22 * retry go 1.22 * revert to go v1.21.5 * update go toolchain to 1.21.8 * go 1.21.8 * remove test flag * go 1.21.5 * linting * update toolchain * use correct array * use correct array * add byte array * correct value * correct error message * go 1.21 compatible
2024-03-27 14:48:22 +01:00
github.com/lib/pq v1.10.9 // indirect
feat: add SAML as identity provider (#6454) * feat: first implementation for saml sp * fix: add command side instance and org for saml provider * fix: add query side instance and org for saml provider * fix: request handling in event and retrieval of finished intent * fix: add review changes and integration tests * fix: add integration tests for saml idp * fix: correct unit tests with review changes * fix: add saml session unit test * fix: add saml session unit test * fix: add saml session unit test * fix: changes from review * fix: changes from review * fix: proto build error * fix: proto build error * fix: proto build error * fix: proto require metadata oneof * fix: login with saml provider * fix: integration test for saml assertion * lint client.go * fix json tag * fix: linting * fix import * fix: linting * fix saml idp query * fix: linting * lint: try all issues * revert linting config * fix: add regenerate endpoints * fix: translations * fix mk.yaml * ignore acs path for user agent cookie * fix: add AuthFromProvider test for saml * fix: integration test for saml retrieve information --------- Co-authored-by: Livio Spring <livio.a@gmail.com>
2023-09-29 11:26:14 +02:00
github.com/mattermost/xml-roundtrip-validator v0.1.0 // indirect
fix(deps): upgrade oidc and otel (#6468)
2023-09-01 13:32:13 +03:00
github.com/mattn/go-colorable v0.1.13 // indirect
chore(deps): upgrade all go modules (#6895) * chore(deps): upgrade all go modules This change upgrades all go.mod dependecies. As well as Makefile tools. There where some imports that still used the old and deprecated `github.com/golang/protobuf/ptypes` package. These have been moved to the equivelant `google.golang.org/protobuf/types/known` package. The `internal/proto` package is removed as was only used once. With a simple refactor in the Validator it became completely obsolete. * fix validate unit test * cleanup merge * update otel --------- Co-authored-by: Livio Spring <livio.a@gmail.com>
2023-11-13 12:41:29 +02:00
github.com/mattn/go-isatty v0.0.20 // indirect
chore(deps): update all go deps (#7773) This change updates all go modules, including oidc, a major version of go-jose and the go 1.22 release.
2024-04-15 12:17:36 +03:00
github.com/pelletier/go-toml/v2 v2.2.1 // indirect
perf(oidc): optimize client verification (#6999) * fix some spelling errors * client credential auth * implementation of client auth * improve error handling * unit test command package * unit test database package * unit test query package * cleanup unused tracing func * fix integration tests * errz to zerrors * fix linting and import issues * fix another linting error * integration test with client secret * Revert "integration test with client secret" This reverts commit 0814ba522f0e2254bd8beaaf97d83ad1dc01228d. * add integration tests * client credentials integration test * resolve comments * pin oidc v3.5.0
2023-12-05 19:01:03 +02:00
github.com/pkg/errors v0.9.1 // indirect
chore(deps): upgrade all go deps (#7227) * chore(deps): upgrade all go deps Also `go mod tidy`. Added comments with URLs for package version lists to makefile commands. * Update Makefile Co-authored-by: Livio Spring <livio.a@gmail.com> --------- Co-authored-by: Livio Spring <livio.a@gmail.com>
2024-01-16 11:27:09 +02:00
github.com/sagikazarmark/locafero v0.4.0 // indirect
chore: update dependencies (#6826)
2023-10-26 18:03:57 +03:00
github.com/sagikazarmark/slog-shim v0.1.0 // indirect
github.com/sourcegraph/conc v0.3.0 // indirect
feat: add SAML as identity provider (#6454) * feat: first implementation for saml sp * fix: add command side instance and org for saml provider * fix: add query side instance and org for saml provider * fix: request handling in event and retrieval of finished intent * fix: add review changes and integration tests * fix: add integration tests for saml idp * fix: correct unit tests with review changes * fix: add saml session unit test * fix: add saml session unit test * fix: add saml session unit test * fix: changes from review * fix: changes from review * fix: proto build error * fix: proto build error * fix: proto build error * fix: proto require metadata oneof * fix: login with saml provider * fix: integration test for saml assertion * lint client.go * fix json tag * fix: linting * fix import * fix: linting * fix saml idp query * fix: linting * lint: try all issues * revert linting config * fix: add regenerate endpoints * fix: translations * fix mk.yaml * ignore acs path for user agent cookie * fix: add AuthFromProvider test for saml * fix: integration test for saml retrieve information --------- Co-authored-by: Livio Spring <livio.a@gmail.com>
2023-09-29 11:26:14 +02:00
github.com/zenazn/goji v1.0.1 // indirect
chore(deps): upgrade all go modules (#6895) * chore(deps): upgrade all go modules This change upgrades all go.mod dependecies. As well as Makefile tools. There where some imports that still used the old and deprecated `github.com/golang/protobuf/ptypes` package. These have been moved to the equivelant `google.golang.org/protobuf/types/known` package. The `internal/proto` package is removed as was only used once. With a simple refactor in the Validator it became completely obsolete. * fix validate unit test * cleanup merge * update otel --------- Co-authored-by: Livio Spring <livio.a@gmail.com>
2023-11-13 12:41:29 +02:00
go.uber.org/multierr v1.11.0 // indirect
chore(deps): upgrade all go deps (#7227) * chore(deps): upgrade all go deps Also `go mod tidy`. Added comments with URLs for package version lists to makefile commands. * Update Makefile Co-authored-by: Livio Spring <livio.a@gmail.com> --------- Co-authored-by: Livio Spring <livio.a@gmail.com>
2024-01-16 11:27:09 +02:00
golang.org/x/time v0.5.0 // indirect
chore(deps): update all go deps (#7773) This change updates all go modules, including oidc, a major version of go-jose and the go 1.22 release.
2024-04-15 12:17:36 +03:00
google.golang.org/genproto v0.0.0-20240412170617-26222e5d3d56 // indirect
perf(oidc): optimize token creation (#7822) * implement code exchange * port tokenexchange to v2 tokens * implement refresh token * implement client credentials * implement jwt profile * implement device token * cleanup unused code * fix current unit tests * add user agent unit test * unit test domain package * need refresh token as argument * test commands create oidc session * test commands device auth * fix device auth build error * implicit for oidc session API * implement authorize callback handler for legacy implicit mode * upgrade oidc module to working draft * add missing auth methods and time * handle all errors in defer * do not fail auth request on error the oauth2 Go client automagically retries on any error. If we fail the auth request on the first error, the next attempt will always fail with the Errors.AuthRequest.NoCode, because the auth request state is already set to failed. The original error is then already lost and the oauth2 library does not return the original error. Therefore we should not fail the auth request. Might be worth discussing and perhaps send a bug report to Oauth2? * fix code flow tests by explicitly setting code exchanged * fix unit tests in command package * return allowed scope from client credential client * add device auth done reducer * carry nonce thru session into ID token * fix token exchange integration tests * allow project role scope prefix in client credentials client * gci formatting * do not return refresh token in client credentials and jwt profile * check org scope * solve linting issue on authorize callback error * end session based on v2 session ID * use preferred language and user agent ID for v2 access tokens * pin oidc v3.23.2 * add integration test for jwt profile and client credentials with org scopes * refresh token v1 to v2 * add user token v2 audit event * add activity trigger * cleanup and set panics for unused methods * use the encrypted code for v1 auth request get by code * add missing event translation * fix pipeline errors (hopefully) * fix another test * revert pointer usage of preferred language * solve browser info panic in device auth * remove duplicate entries in AMRToAuthMethodTypes to prevent future `mfa` claim * revoke v1 refresh token to prevent reuse * fix terminate oidc session * always return a new refresh toke in refresh token grant --------- Co-authored-by: Livio Spring <livio.a@gmail.com>
2024-05-16 08:07:56 +03:00
google.golang.org/genproto/googleapis/rpc v0.0.0-20240429193739-8cf5692501f6 // indirect
perf: query data `AS OF SYSTEM TIME` (#5231) Queries the data in the storage layser at the timestamp when the call hit the API layer
2023-02-27 22:36:43 +01:00
)
require (
chore(deps): update all go deps (#7773) This change updates all go modules, including oidc, a major version of go-jose and the go 1.22 release.
2024-04-15 12:17:36 +03:00
cloud.google.com/go v0.112.2 // indirect
cloud.google.com/go/compute v1.25.1 // indirect
feat: add basic structure of idp templates (#5053) add basic structure and implement first providers for IDP templates to be able to manage and use them in the future
2023-01-23 08:11:40 +01:00
cloud.google.com/go/compute/metadata v0.2.3 // indirect
chore(deps): update all go deps (#7773) This change updates all go modules, including oidc, a major version of go-jose and the go 1.22 release.
2024-04-15 12:17:36 +03:00
cloud.google.com/go/iam v1.1.7 // indirect
cloud.google.com/go/trace v1.10.6 // indirect
feat: add management for ldap idp template (#5220) Add management functionality for LDAP idps with templates and the basic functionality for the LDAP provider, which can then be used with a separate login page in the future. --------- Co-authored-by: Livio Spring <livio.a@gmail.com>
2023-02-15 09:14:59 +01:00
github.com/Azure/go-ntlmssp v0.0.0-20221128193559-754e69321358 // indirect
feat(saml): implementation of saml for ZITADEL v2 (#3618)
2022-09-12 17:18:08 +01:00
github.com/amdonov/xmlsig v0.1.0 // indirect
chore(deps): upgrade all go deps (#7227) * chore(deps): upgrade all go deps Also `go mod tidy`. Added comments with URLs for package version lists to makefile commands. * Update Makefile Co-authored-by: Livio Spring <livio.a@gmail.com> --------- Co-authored-by: Livio Spring <livio.a@gmail.com>
2024-01-16 11:27:09 +02:00
github.com/beevik/etree v1.3.0
feat: text query (#2735) * feat: change mail template to new query side * feat: adminapi message text * feat: adminapi message text * feat: adminapi message text * feat: message texts * feat: admin texts * feat: tests * feat: tests * feat: custom login text on adminapi * feat: custom login text * feat: custom login text * feat: message text prepare test * feat: login text texts * feat: custom login text * merge main * fix go.sum Co-authored-by: Livio Amstutz <livio.a@gmail.com>
2021-12-16 15:21:37 +01:00
github.com/beorn7/perks v1.0.1 // indirect
chore(deps): update all go deps (#7773) This change updates all go modules, including oidc, a major version of go-jose and the go 1.22 release.
2024-04-15 12:17:36 +03:00
github.com/cenkalti/backoff/v4 v4.3.0 // indirect
github.com/cespare/xxhash/v2 v2.3.0 // indirect
chore: update dependencies (#6826)
2023-10-26 18:03:57 +03:00
github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
feat: run on a single port (#3163) * start v2 * start * run * some cleanup * remove v2 pkg again * simplify * webauthn * remove unused config * fix login path in Dockerfile * fix asset_generator.go * health handler * fix grpc web * refactor * merge * build new main.go * run new main.go * update logging pkg * fix error msg * update logging * cleanup * cleanup * go mod tidy * change localDevMode * fix customEndpoints * update logging * comments * change local flag to external configs * fix location generated go code * fix Co-authored-by: fforootd <florian@caos.ch>
2022-02-14 17:22:30 +01:00
github.com/desertbit/timer v0.0.0-20180107155436-c41aec40b27f // indirect
chore(core): update dependencies (#7517) * chore(core): update dependencies * chore(core): update dependencies
2024-03-11 11:43:56 +01:00
github.com/dlclark/regexp2 v1.11.0 // indirect
fix(deps): upgrade oidc and otel (#6468)
2023-09-01 13:32:13 +03:00
github.com/dsoprea/go-exif v0.0.0-20230826092837-6579e82b732d // indirect
github.com/dsoprea/go-exif/v2 v2.0.0-20230826092837-6579e82b732d // indirect
perf: query data `AS OF SYSTEM TIME` (#5231) Queries the data in the storage layser at the timestamp when the call hit the API layer
2023-02-27 22:36:43 +01:00
github.com/dsoprea/go-iptc v0.0.0-20200610044640-bc9ca208b413 // indirect
github.com/dsoprea/go-jpeg-image-structure v0.0.0-20221012074422-4f3f7e934102 // indirect
github.com/dsoprea/go-logging v0.0.0-20200710184922-b02d349568dd // indirect
github.com/dsoprea/go-photoshop-info-format v0.0.0-20200610045659-121dd752914d // indirect
github.com/dsoprea/go-png-image-structure v0.0.0-20210512210324-29b889a6093d // indirect
github.com/dsoprea/go-utility v0.0.0-20221003172846-a3e1774ef349 // indirect
github.com/dustin/go-humanize v1.0.1 // indirect
chore(deps): upgrade all go modules (#6895) * chore(deps): upgrade all go modules This change upgrades all go.mod dependecies. As well as Makefile tools. There where some imports that still used the old and deprecated `github.com/golang/protobuf/ptypes` package. These have been moved to the equivelant `google.golang.org/protobuf/types/known` package. The `internal/proto` package is removed as was only used once. With a simple refactor in the Validator it became completely obsolete. * fix validate unit test * cleanup merge * update otel --------- Co-authored-by: Livio Spring <livio.a@gmail.com>
2023-11-13 12:41:29 +02:00
github.com/felixge/httpsnoop v1.0.4 // indirect
github.com/fsnotify/fsnotify v1.7.0 // indirect
chore(core): update dependencies (#7517) * chore(core): update dependencies * chore(core): update dependencies
2024-03-11 11:43:56 +01:00
github.com/fxamacker/cbor/v2 v2.6.0 // indirect
chore(deps): upgrade all go modules (#6895) * chore(deps): upgrade all go modules This change upgrades all go.mod dependecies. As well as Makefile tools. There where some imports that still used the old and deprecated `github.com/golang/protobuf/ptypes` package. These have been moved to the equivelant `google.golang.org/protobuf/types/known` package. The `internal/proto` package is removed as was only used once. With a simple refactor in the Validator it became completely obsolete. * fix validate unit test * cleanup merge * update otel --------- Co-authored-by: Livio Spring <livio.a@gmail.com>
2023-11-13 12:41:29 +02:00
github.com/go-asn1-ber/asn1-ber v1.5.5 // indirect
github.com/go-errors/errors v1.5.1 // indirect
chore(deps): update all go deps (#7773) This change updates all go modules, including oidc, a major version of go-jose and the go 1.22 release.
2024-04-15 12:17:36 +03:00
github.com/go-sourcemap/sourcemap v2.1.4+incompatible // indirect
perf: query data `AS OF SYSTEM TIME` (#5231) Queries the data in the storage layser at the timestamp when the call hit the API layer
2023-02-27 22:36:43 +01:00
github.com/go-xmlfmt/xmlfmt v1.1.2 // indirect
feat: text query (#2735) * feat: change mail template to new query side * feat: adminapi message text * feat: adminapi message text * feat: adminapi message text * feat: message texts * feat: admin texts * feat: tests * feat: tests * feat: custom login text on adminapi * feat: custom login text * feat: custom login text * feat: message text prepare test * feat: login text texts * feat: custom login text * merge main * fix go.sum Co-authored-by: Livio Amstutz <livio.a@gmail.com>
2021-12-16 15:21:37 +01:00
github.com/gofrs/flock v0.8.1 // indirect
perf: query data `AS OF SYSTEM TIME` (#5231) Queries the data in the storage layser at the timestamp when the call hit the API layer
2023-02-27 22:36:43 +01:00
github.com/gofrs/uuid v4.4.0+incompatible // indirect
fix(deps): upgrade oidc and otel (#6468)
2023-09-01 13:32:13 +03:00
github.com/golang/geo v0.0.0-20230421003525-6adc56603217 // indirect
feat: text query (#2735) * feat: change mail template to new query side * feat: adminapi message text * feat: adminapi message text * feat: adminapi message text * feat: message texts * feat: admin texts * feat: tests * feat: tests * feat: custom login text on adminapi * feat: custom login text * feat: custom login text * feat: message text prepare test * feat: login text texts * feat: custom login text * merge main * fix go.sum Co-authored-by: Livio Amstutz <livio.a@gmail.com>
2021-12-16 15:21:37 +01:00
github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect
fix(oidc): ignore public key expiry for ID Token hints (#7293) * fix(oidc): ignore public key expiry for ID Token hints This splits the key sets used for access token and ID token hints. ID Token hints should be able to be verified by with public keys that are already expired. However, we do not want to change this behavior for Access Tokens, where an error for an expired public key is still returned. The public key cache is modified to purge public keys based on last use, instead of expiry. The cache is shared between both verifiers. * resolve review comments * pin oidc 3.11
2024-01-29 17:11:52 +02:00
github.com/google/uuid v1.6.0
chore(deps): upgrade all go modules (#6895) * chore(deps): upgrade all go modules This change upgrades all go.mod dependecies. As well as Makefile tools. There where some imports that still used the old and deprecated `github.com/golang/protobuf/ptypes` package. These have been moved to the equivelant `google.golang.org/protobuf/types/known` package. The `internal/proto` package is removed as was only used once. With a simple refactor in the Validator it became completely obsolete. * fix validate unit test * cleanup merge * update otel --------- Co-authored-by: Livio Spring <livio.a@gmail.com>
2023-11-13 12:41:29 +02:00
github.com/googleapis/enterprise-certificate-proxy v0.3.2 // indirect
chore(deps): update all go deps (#7773) This change updates all go modules, including oidc, a major version of go-jose and the go 1.22 release.
2024-04-15 12:17:36 +03:00
github.com/googleapis/gax-go/v2 v2.12.3 // indirect
chore(deps): upgrade all go modules (#6895) * chore(deps): upgrade all go modules This change upgrades all go.mod dependecies. As well as Makefile tools. There where some imports that still used the old and deprecated `github.com/golang/protobuf/ptypes` package. These have been moved to the equivelant `google.golang.org/protobuf/types/known` package. The `internal/proto` package is removed as was only used once. With a simple refactor in the Validator it became completely obsolete. * fix validate unit test * cleanup merge * update otel --------- Co-authored-by: Livio Spring <livio.a@gmail.com>
2023-11-13 12:41:29 +02:00
github.com/gorilla/handlers v1.5.2 // indirect
perf: query data `AS OF SYSTEM TIME` (#5231) Queries the data in the storage layser at the timestamp when the call hit the API layer
2023-02-27 22:36:43 +01:00
github.com/h2non/filetype v1.1.3 // indirect
feat: add basic structure of idp templates (#5053) add basic structure and implement first providers for IDP templates to be able to manage and use them in the future
2023-01-23 08:11:40 +01:00
github.com/h2non/parth v0.0.0-20190131123155-b4df798d6542 // indirect
feat(cli): init cli (#3186) * feat(cli): initilize cli * fix(config): allow multiple files * refactor(cli): constructor naming * go mod tidy * refactor: move code out of v2 package * chore: logging v0.1 * chore: remove old gitignore * fix func Co-authored-by: Livio Amstutz <livio.a@gmail.com>
2022-02-09 15:01:19 +01:00
github.com/hashicorp/hcl v1.0.0 // indirect
perf: query data `AS OF SYSTEM TIME` (#5231) Queries the data in the storage layser at the timestamp when the call hit the API layer
2023-02-27 22:36:43 +01:00
github.com/inconshreveable/mousetrap v1.1.0 // indirect
feat(database): support for postgres (#3998) * beginning with postgres statements * try pgx * use pgx * database * init works for postgres * arrays working * init for cockroach * init * start tests * tests * TESTS * ch * ch * chore: use go 1.18 * read stmts * fix typo * tests * connection string * add missing error handler * cleanup * start all apis * go mod tidy * old update * switch back to minute * on conflict * replace string slice with `database.StringArray` in db models * fix tests and start * update go version in dockerfile * setup go * clean up * remove notification migration * update * docs: add deploy guide for postgres * fix: revert sonyflake * use `database.StringArray` for daos * use `database.StringArray` every where * new tables * index naming, metadata primary key, project grant role key type * docs(postgres): change to beta * chore: correct compose * fix(defaults): add empty postgres config * refactor: remove unused code * docs: add postgres to self hosted * fix broken link * so? * change title * add mdx to link * fix stmt * update goreleaser in test-code * docs: improve postgres example * update more projections * fix: add beta log for postgres * revert index name change * prerelease * fix: add sequence to v1 "reduce paniced" * log if nil * add logging * fix: log output * fix(import): check if org exists and user * refactor: imports * fix(user): ignore malformed events * refactor: method naming * fix: test * refactor: correct errors.Is call * ci: don't build dev binaries on main * fix(go releaser): update version to 1.11.0 * fix(user): projection should not break * fix(user): handle error properly * docs: correct config example * Update .releaserc.js * Update .releaserc.js Co-authored-by: Livio Amstutz <livio.a@gmail.com> Co-authored-by: Elio Bischof <eliobischof@gmail.com>
2022-08-31 09:52:43 +02:00
github.com/jackc/pgpassfile v1.0.0 // indirect
chore(deps): upgrade all go deps (#7227) * chore(deps): upgrade all go deps Also `go mod tidy`. Added comments with URLs for package version lists to makefile commands. * Update Makefile Co-authored-by: Livio Spring <livio.a@gmail.com> --------- Co-authored-by: Livio Spring <livio.a@gmail.com>
2024-01-16 11:27:09 +02:00
github.com/jackc/pgservicefile v0.0.0-20231201235250-de7065d80cb9 // indirect
feat: text query (#2735) * feat: change mail template to new query side * feat: adminapi message text * feat: adminapi message text * feat: adminapi message text * feat: message texts * feat: admin texts * feat: tests * feat: tests * feat: custom login text on adminapi * feat: custom login text * feat: custom login text * feat: message text prepare test * feat: login text texts * feat: custom login text * merge main * fix go.sum Co-authored-by: Livio Amstutz <livio.a@gmail.com>
2021-12-16 15:21:37 +01:00
github.com/jinzhu/inflection v1.0.0 // indirect
perf(oidc): optimize the introspection endpoint (#6909) * get key by id and cache them * userinfo from events for v2 tokens * improve keyset caching * concurrent token and client checks * client and project in single query * logging and otel * drop owner_removed column on apps and authN tables * userinfo and project roles in go routines * get oidc user info from projections and add actions * add avatar URL * some cleanup * pull oidc work branch * remove storage from server * add config flag for experimental introspection * legacy introspection flag * drop owner_removed column on user projections * drop owner_removed column on useer_metadata * query userinfo unit test * query introspection client test * add user_grants to the userinfo query * handle PAT scopes * bring triggers back * test instance keys query * add userinfo unit tests * unit test keys * go mod tidy * solve some bugs * fix missing preferred login name * do not run triggers in go routines, they seem to deadlock * initialize the trigger handlers late with a sync.OnceValue * Revert "do not run triggers in go routines, they seem to deadlock" This reverts commit 2a03da2127b7dc74552ec25d4772282a82cc1cba. * add missing translations * chore: update go version for linting * pin oidc version * parse a global time location for query test * fix linter complains * upgrade go lint * fix more linting issues --------- Co-authored-by: Stefan Benz <46600784+stebenz@users.noreply.github.com>
2023-11-21 14:11:38 +02:00
github.com/jonboulle/clockwork v0.4.0
feat(cli): init cli (#3186) * feat(cli): initilize cli * fix(config): allow multiple files * refactor(cli): constructor naming * go mod tidy * refactor: move code out of v2 package * chore: logging v0.1 * chore: remove old gitignore * fix func Co-authored-by: Livio Amstutz <livio.a@gmail.com>
2022-02-09 15:01:19 +01:00
github.com/json-iterator/go v1.1.12 // indirect
feat: text query (#2735) * feat: change mail template to new query side * feat: adminapi message text * feat: adminapi message text * feat: adminapi message text * feat: message texts * feat: admin texts * feat: tests * feat: tests * feat: custom login text on adminapi * feat: custom login text * feat: custom login text * feat: message text prepare test * feat: login text texts * feat: custom login text * merge main * fix go.sum Co-authored-by: Livio Amstutz <livio.a@gmail.com>
2021-12-16 15:21:37 +01:00
github.com/kevinburke/go-types v0.0.0-20210723172823-2deba1f80ba7 // indirect
chore(deps): upgrade all go modules (#6895) * chore(deps): upgrade all go modules This change upgrades all go.mod dependecies. As well as Makefile tools. There where some imports that still used the old and deprecated `github.com/golang/protobuf/ptypes` package. These have been moved to the equivelant `google.golang.org/protobuf/types/known` package. The `internal/proto` package is removed as was only used once. With a simple refactor in the Validator it became completely obsolete. * fix validate unit test * cleanup merge * update otel --------- Co-authored-by: Livio Spring <livio.a@gmail.com>
2023-11-13 12:41:29 +02:00
github.com/kevinburke/rest v0.0.0-20231107185522-a9c371f90234 // indirect
chore(deps): update all go deps (#7773) This change updates all go modules, including oidc, a major version of go-jose and the go 1.22 release.
2024-04-15 12:17:36 +03:00
github.com/klauspost/compress v1.17.8 // indirect
feat: text query (#2735) * feat: change mail template to new query side * feat: adminapi message text * feat: adminapi message text * feat: adminapi message text * feat: message texts * feat: admin texts * feat: tests * feat: tests * feat: custom login text on adminapi * feat: custom login text * feat: custom login text * feat: message text prepare test * feat: login text texts * feat: custom login text * merge main * fix go.sum Co-authored-by: Livio Amstutz <livio.a@gmail.com>
2021-12-16 15:21:37 +01:00
github.com/lann/builder v0.0.0-20180802200727-47ae307949d0 // indirect
github.com/lann/ps v0.0.0-20150810152359-62de8c46ede0 // indirect
perf: query data `AS OF SYSTEM TIME` (#5231) Queries the data in the storage layser at the timestamp when the call hit the API layer
2023-02-27 22:36:43 +01:00
github.com/magiconair/properties v1.8.7 // indirect
feat: text query (#2735) * feat: change mail template to new query side * feat: adminapi message text * feat: adminapi message text * feat: adminapi message text * feat: message texts * feat: admin texts * feat: tests * feat: tests * feat: custom login text on adminapi * feat: custom login text * feat: custom login text * feat: message text prepare test * feat: login text texts * feat: custom login text * merge main * fix go.sum Co-authored-by: Livio Amstutz <livio.a@gmail.com>
2021-12-16 15:21:37 +01:00
github.com/mattn/go-sqlite3 v2.0.3+incompatible // indirect
perf: query data `AS OF SYSTEM TIME` (#5231) Queries the data in the storage layser at the timestamp when the call hit the API layer
2023-02-27 22:36:43 +01:00
github.com/minio/md5-simd v1.1.2 // indirect
fix(deps): upgrade oidc and otel (#6468)
2023-09-01 13:32:13 +03:00
github.com/minio/sha256-simd v1.0.1 // indirect
feat: text query (#2735) * feat: change mail template to new query side * feat: adminapi message text * feat: adminapi message text * feat: adminapi message text * feat: message texts * feat: admin texts * feat: tests * feat: tests * feat: custom login text on adminapi * feat: custom login text * feat: custom login text * feat: message text prepare test * feat: login text texts * feat: custom login text * merge main * fix go.sum Co-authored-by: Livio Amstutz <livio.a@gmail.com>
2021-12-16 15:21:37 +01:00
github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
feat(cli): init cli (#3186) * feat(cli): initilize cli * fix(config): allow multiple files * refactor(cli): constructor naming * go mod tidy * refactor: move code out of v2 package * chore: logging v0.1 * chore: remove old gitignore * fix func Co-authored-by: Livio Amstutz <livio.a@gmail.com>
2022-02-09 15:01:19 +01:00
github.com/modern-go/reflect2 v1.0.2 // indirect
feat: text query (#2735) * feat: change mail template to new query side * feat: adminapi message text * feat: adminapi message text * feat: adminapi message text * feat: message texts * feat: admin texts * feat: tests * feat: tests * feat: custom login text on adminapi * feat: custom login text * feat: custom login text * feat: message text prepare test * feat: login text texts * feat: custom login text * merge main * fix go.sum Co-authored-by: Livio Amstutz <livio.a@gmail.com>
2021-12-16 15:21:37 +01:00
github.com/muesli/clusters v0.0.0-20200529215643-2700303c1762 // indirect
perf: query data `AS OF SYSTEM TIME` (#5231) Queries the data in the storage layser at the timestamp when the call hit the API layer
2023-02-27 22:36:43 +01:00
github.com/muesli/kmeans v0.3.1 // indirect
chore: update dependencies (#6826)
2023-10-26 18:03:57 +03:00
github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect
chore(core): update dependencies (#7517) * chore(core): update dependencies * chore(core): update dependencies
2024-03-11 11:43:56 +01:00
github.com/prometheus/client_golang v1.19.0
chore(deps): update all go deps (#7773) This change updates all go modules, including oidc, a major version of go-jose and the go 1.22 release.
2024-04-15 12:17:36 +03:00
github.com/prometheus/client_model v0.6.1 // indirect
perf(oidc): optimize token creation (#7822) * implement code exchange * port tokenexchange to v2 tokens * implement refresh token * implement client credentials * implement jwt profile * implement device token * cleanup unused code * fix current unit tests * add user agent unit test * unit test domain package * need refresh token as argument * test commands create oidc session * test commands device auth * fix device auth build error * implicit for oidc session API * implement authorize callback handler for legacy implicit mode * upgrade oidc module to working draft * add missing auth methods and time * handle all errors in defer * do not fail auth request on error the oauth2 Go client automagically retries on any error. If we fail the auth request on the first error, the next attempt will always fail with the Errors.AuthRequest.NoCode, because the auth request state is already set to failed. The original error is then already lost and the oauth2 library does not return the original error. Therefore we should not fail the auth request. Might be worth discussing and perhaps send a bug report to Oauth2? * fix code flow tests by explicitly setting code exchanged * fix unit tests in command package * return allowed scope from client credential client * add device auth done reducer * carry nonce thru session into ID token * fix token exchange integration tests * allow project role scope prefix in client credentials client * gci formatting * do not return refresh token in client credentials and jwt profile * check org scope * solve linting issue on authorize callback error * end session based on v2 session ID * use preferred language and user agent ID for v2 access tokens * pin oidc v3.23.2 * add integration test for jwt profile and client credentials with org scopes * refresh token v1 to v2 * add user token v2 audit event * add activity trigger * cleanup and set panics for unused methods * use the encrypted code for v1 auth request get by code * add missing event translation * fix pipeline errors (hopefully) * fix another test * revert pointer usage of preferred language * solve browser info panic in device auth * remove duplicate entries in AMRToAuthMethodTypes to prevent future `mfa` claim * revoke v1 refresh token to prevent reuse * fix terminate oidc session * always return a new refresh toke in refresh token grant --------- Co-authored-by: Livio Spring <livio.a@gmail.com>
2024-05-16 08:07:56 +03:00
github.com/prometheus/common v0.53.0 // indirect
github.com/prometheus/procfs v0.14.0 // indirect
fix(deps): upgrade oidc and otel (#6468)
2023-09-01 13:32:13 +03:00
github.com/rs/xid v1.5.0 // indirect
feat: add saml custom attribute action and translations (#6341) * feat: add saml custom attribute action and translations * chore: update saml dependency * fix: apply suggestions from code review Co-authored-by: Livio Spring <livio.a@gmail.com> * fix: custom attribute action with variadic parameter * docs: add customize saml response docs * docs: update docs/docs/apis/actions/customize-samlresponse.md Co-authored-by: Livio Spring <livio.a@gmail.com> * docs: update docs/docs/apis/actions/customize-samlresponse.md Co-authored-by: Livio Spring <livio.a@gmail.com> --------- Co-authored-by: Livio Spring <livio.a@gmail.com>
2023-08-15 17:04:45 +02:00
github.com/russellhaering/goxmldsig v1.4.0 // indirect
chore(deps): update oidc (#6002)
2023-06-09 17:18:14 +02:00
github.com/sirupsen/logrus v1.9.3
chore(deps): upgrade all go deps (#7227) * chore(deps): upgrade all go deps Also `go mod tidy`. Added comments with URLs for package version lists to makefile commands. * Update Makefile Co-authored-by: Livio Spring <livio.a@gmail.com> --------- Co-authored-by: Livio Spring <livio.a@gmail.com>
2024-01-16 11:27:09 +02:00
github.com/spf13/afero v1.11.0 // indirect
github.com/spf13/cast v1.6.0 // indirect
fix(backend): respect start flags in all commands (#6621) * fix(backend): respect start flags in all commands Currently flags like --externalDomain do only work in the last registered command which currently is start-from-setup. This creates the flags globally in the init function in uses them for all start commands. * fix(backend): remove viper defaults in start flags At this point viper is not yet initialized so this defaults would have not effect either. * Remove flag name variables and run go mod tidy --------- Co-authored-by: Tim Möhlmann <tim+github@zitadel.com>
2024-02-21 13:26:51 +01:00
github.com/spf13/pflag v1.0.5
fix(deps): upgrade oidc and otel (#6468)
2023-09-01 13:32:13 +03:00
github.com/subosito/gotenv v1.6.0 // indirect
feat: text query (#2735) * feat: change mail template to new query side * feat: adminapi message text * feat: adminapi message text * feat: adminapi message text * feat: message texts * feat: admin texts * feat: tests * feat: tests * feat: custom login text on adminapi * feat: custom login text * feat: custom login text * feat: message text prepare test * feat: login text texts * feat: custom login text * merge main * fix go.sum Co-authored-by: Livio Amstutz <livio.a@gmail.com>
2021-12-16 15:21:37 +01:00
github.com/ttacon/builder v0.0.0-20170518171403-c099f663e1c2 // indirect
github.com/x448/float16 v0.8.4 // indirect
chore(deps): update all go deps (#7773) This change updates all go modules, including oidc, a major version of go-jose and the go 1.22 release.
2024-04-15 12:17:36 +03:00
github.com/xrash/smetrics v0.0.0-20240312152122-5f08fbb34913 // indirect
feat: add basic structure of idp templates (#5053) add basic structure and implement first providers for IDP templates to be able to manage and use them in the future
2023-01-23 08:11:40 +01:00
go.opencensus.io v0.24.0 // indirect
perf(oidc): optimize token creation (#7822) * implement code exchange * port tokenexchange to v2 tokens * implement refresh token * implement client credentials * implement jwt profile * implement device token * cleanup unused code * fix current unit tests * add user agent unit test * unit test domain package * need refresh token as argument * test commands create oidc session * test commands device auth * fix device auth build error * implicit for oidc session API * implement authorize callback handler for legacy implicit mode * upgrade oidc module to working draft * add missing auth methods and time * handle all errors in defer * do not fail auth request on error the oauth2 Go client automagically retries on any error. If we fail the auth request on the first error, the next attempt will always fail with the Errors.AuthRequest.NoCode, because the auth request state is already set to failed. The original error is then already lost and the oauth2 library does not return the original error. Therefore we should not fail the auth request. Might be worth discussing and perhaps send a bug report to Oauth2? * fix code flow tests by explicitly setting code exchanged * fix unit tests in command package * return allowed scope from client credential client * add device auth done reducer * carry nonce thru session into ID token * fix token exchange integration tests * allow project role scope prefix in client credentials client * gci formatting * do not return refresh token in client credentials and jwt profile * check org scope * solve linting issue on authorize callback error * end session based on v2 session ID * use preferred language and user agent ID for v2 access tokens * pin oidc v3.23.2 * add integration test for jwt profile and client credentials with org scopes * refresh token v1 to v2 * add user token v2 audit event * add activity trigger * cleanup and set panics for unused methods * use the encrypted code for v1 auth request get by code * add missing event translation * fix pipeline errors (hopefully) * fix another test * revert pointer usage of preferred language * solve browser info panic in device auth * remove duplicate entries in AMRToAuthMethodTypes to prevent future `mfa` claim * revoke v1 refresh token to prevent reuse * fix terminate oidc session * always return a new refresh toke in refresh token grant --------- Co-authored-by: Livio Spring <livio.a@gmail.com>
2024-05-16 08:07:56 +03:00
go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.26.0 // indirect
chore(deps): update all go deps (#7773) This change updates all go modules, including oidc, a major version of go-jose and the go 1.22 release.
2024-04-15 12:17:36 +03:00
go.opentelemetry.io/proto/otlp v1.2.0 // indirect
golang.org/x/sys v0.19.0
perf: query data `AS OF SYSTEM TIME` (#5231) Queries the data in the storage layser at the timestamp when the call hit the API layer
2023-02-27 22:36:43 +01:00
gopkg.in/ini.v1 v1.67.0 // indirect
feat: text query (#2735) * feat: change mail template to new query side * feat: adminapi message text * feat: adminapi message text * feat: adminapi message text * feat: message texts * feat: admin texts * feat: tests * feat: tests * feat: custom login text on adminapi * feat: custom login text * feat: custom login text * feat: message text prepare test * feat: login text texts * feat: custom login text * merge main * fix go.sum Co-authored-by: Livio Amstutz <livio.a@gmail.com>
2021-12-16 15:21:37 +01:00
gopkg.in/yaml.v2 v2.4.0 // indirect
feat(saml): implementation of saml for ZITADEL v2 (#3618)
2022-09-12 17:18:08 +01:00
gopkg.in/yaml.v3 v3.0.1 // indirect
chore(deps): update all go deps (#7773) This change updates all go modules, including oidc, a major version of go-jose and the go 1.22 release.
2024-04-15 12:17:36 +03:00
nhooyr.io/websocket v1.8.11 // indirect
feat: text query (#2735) * feat: change mail template to new query side * feat: adminapi message text * feat: adminapi message text * feat: adminapi message text * feat: message texts * feat: admin texts * feat: tests * feat: tests * feat: custom login text on adminapi * feat: custom login text * feat: custom login text * feat: message text prepare test * feat: login text texts * feat: custom login text * merge main * fix go.sum Co-authored-by: Livio Amstutz <livio.a@gmail.com>
2021-12-16 15:21:37 +01:00
)
Reference in New Issue Copy Permalink