feat: token revocation and OP certification (#2594)

* fix: try using only user session if no user is set (id_token_hint) on prompt none

* fix caos errors As implementation

* implement request mode

* return explicit error on invalid refresh token use

* begin token revocation

* token revocation

* tests

* tests

* cleanup

* set op config

* add revocation endpoint to config

* add revocation endpoint to config

* migration version

* error handling in token revocation

* migration version

* update oidc lib to 1.0.0
This commit is contained in:
Livio Amstutz
2021-11-03 08:35:24 +01:00
committed by GitHub
parent 8df5614e4d
commit fc6154cffc
25 changed files with 638 additions and 236 deletions

4
go.mod
View File

@@ -21,8 +21,8 @@ require (
github.com/aws/aws-sdk-go-v2/service/s3 v1.17.0
github.com/boombuler/barcode v1.0.1
github.com/caos/logging v0.0.2
github.com/caos/oidc v0.15.12
github.com/caos/orbos v1.5.14-0.20211022145449-6bd09d384fa8
github.com/caos/oidc v1.0.0
github.com/caos/orbos v1.5.14-0.20211102124704-34db02bceed2
github.com/cockroachdb/cockroach-go/v2 v2.2.1
github.com/dop251/goja v0.0.0-20211022113120-dc8c55024d06
github.com/dop251/goja_nodejs v0.0.0-20211022123610-8dd9abb0616d