Tim Möhlmann df57a64ed7

fix(oidc): ignore public key expiry for ID Token hints (#7293) ...

* fix(oidc): ignore public key expiry for ID Token hints

This splits the key sets used for access token and ID token hints.
ID Token hints should be able to be verified by with public keys that are already expired.
However, we do not want to change this behavior for Access Tokens,
where an error for an expired public key is still returned.

The public key cache is modified to purge public keys based on last use,
instead of expiry.
The cache is shared between both verifiers.

* resolve review comments

* pin oidc 3.11

2024-01-29 15:11:52 +00:00

..

admin

chore: test server for direct resource access

2023-04-24 20:40:31 +03:00

build

fix: allow version to be overwritten by build again (#4656)

2022-11-07 09:50:44 +00:00

encryption

fix(setup): init projections (#7194)

2024-01-25 17:28:20 +01:00

initialise

feat: block instances (#7129)

2024-01-17 10:16:48 +00:00

key

fix(db): always use begin tx (#7142)

2024-01-04 16:12:20 +00:00

ready

feat: improve UX for external configuration (#6861)

2023-11-09 11:30:15 +01:00

setup

fix(setup): init projections (#7194)

2024-01-25 17:28:20 +01:00

start

fix(setup): init projections (#7194)

2024-01-25 17:28:20 +01:00

systemapi

fix(setup): init projections (#7194)

2024-01-25 17:28:20 +01:00

tls

fix: enable env vars in setup steps (and deprecate admin subcommand) (#3871)

2022-06-27 10:32:34 +00:00

defaults.yaml

fix(oidc): ignore public key expiry for ID Token hints (#7293)

2024-01-29 15:11:52 +00:00

zitadel.go

ci: improve performance (#5953)

2023-07-17 10:08:20 +02:00