Tim Möhlmann df57a64ed7 fix(oidc): ignore public key expiry for ID Token hints (#7293) ... * fix(oidc): ignore public key expiry for ID Token hints This splits the key sets used for access token and ID token hints. ID Token hints should be able to be verified by with public keys that are already expired. However, we do not want to change this behavior for Access Tokens, where an error for an expired public key is still returned. The public key cache is modified to purge public keys based on last use, instead of expiry. The cache is shared between both verifiers. * resolve review comments * pin oidc 3.11		2024-01-29 15:11:52 +00:00
..
assets	feat: block instances (#7129)	2024-01-17 10:16:48 +00:00
authz	feat: block instances (#7129)	2024-01-17 10:16:48 +00:00
call	fix: reset the call timestamp after a bulk trigger (#6080)	2023-07-07 08:15:05 +00:00
grpc	fix(console): display granted org name in authorizations and show user information (#7116)	2024-01-24 11:36:04 +01:00
http	fix(setup): init projections (#7194)	2024-01-25 17:28:20 +01:00
idp	fix(idp): provide id_token for tenant id based azure ad (#7188)	2024-01-10 15:02:17 +00:00
info	fix: correct method and path for session api activity (#6880)	2023-11-22 12:12:23 +02:00
oidc	fix(oidc): ignore public key expiry for ID Token hints (#7293)	2024-01-29 15:11:52 +00:00
robots_txt	fix: introduce measures to avoid bots crawling and indexing activities (#5728)	2023-05-05 10:25:02 +02:00
saml	feat(actions): add org metadata in complement token and saml response flows (#7263)	2024-01-26 08:56:10 +00:00
service	fix(eventstore): tests	2020-11-26 09:19:14 +01:00
ui	fix: detect autofill in chrome to enable login buttons (#7056)	2024-01-22 10:24:36 +01:00
api.go	refactor: rename package errors to zerrors (#7039)	2023-12-08 15:30:55 +01:00