4 Commits

Author	SHA1	Message	Date
Brian Tajuddin	32b707cf46	feat(6222): remove @ and project from OIDC client ID (#8178) ... # Which Problems Are Solved The client ID for OIDC applications has an `@` in it, which is not allowed in some 3rd-party systems (such as AWS). # How the Problems Are Solved Per @fforootd and @hifabienne in #6222, remove the project suffix and the `@` from the client ID and just use the generated ID. # Additional Changes N/A # Additional Context - Closes #6222 --------- Co-authored-by: Stefan Benz <46600784+stebenz@users.noreply.github.com> Co-authored-by: Livio Spring <livio.a@gmail.com>	2024-07-04 08:31:40 +00:00
Tim Möhlmann	6a51c4b0f5	feat(oidc): optimize the userinfo endpoint (#7706) ... * feat(oidc): optimize the userinfo endpoint * store project ID in the access token * query for projectID if not in token * add scope based tests * Revert "store project ID in the access token" This reverts commit 5f0262f23988e7f62d415d0e4a02a705f6ad5197. * query project role assertion * use project role assertion setting to return roles * workaround eventual consistency and handle PAT * do not append empty project id	2024-04-09 15:15:35 +02:00
Tim Möhlmann	2e505f40f9	fix(oidc): return clients without instance settings (#7036)	2023-12-07 09:43:45 +00:00
Tim Möhlmann	ec03340b67	perf(oidc): optimize client verification (#6999) ... * fix some spelling errors * client credential auth * implementation of client auth * improve error handling * unit test command package * unit test database package * unit test query package * cleanup unused tracing func * fix integration tests * errz to zerrors * fix linting and import issues * fix another linting error * integration test with client secret * Revert "integration test with client secret" This reverts commit 0814ba522f0e2254bd8beaaf97d83ad1dc01228d. * add integration tests * client credentials integration test * resolve comments * pin oidc v3.5.0	2023-12-05 17:01:03 +00:00