187 Commits

Author SHA1 Message Date
dependabot[bot] 95fefb46b2 build(deps): bump github.com/coreos/go-oidc/v3 in /examples (#4730)
Bumps [github.com/coreos/go-oidc/v3](https://github.com/coreos/go-oidc) from 3.17.0 to 3.18.0.
- [Release notes](https://github.com/coreos/go-oidc/releases)
- [Commits](https://github.com/coreos/go-oidc/compare/v3.17.0...v3.18.0)

---
updated-dependencies:
- dependency-name: github.com/coreos/go-oidc/v3
  dependency-version: 3.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-08 15:29:45 +02:00
dependabot[bot] 5b5b467f86 build(deps): bump github.com/go-jose/go-jose/v4 (#4718) 2026-04-03 07:33:34 +02:00
dependabot[bot] ed886522c2 build(deps): bump google.golang.org/grpc in /examples (#4710)
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.79.3 to 1.80.0.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.79.3...v1.80.0)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-version: 1.80.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-02 14:19:31 +02:00
Maksim Nabokikh 6f2e233c7a feat: example app session refactoring (#4712)
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
2026-04-02 14:19:10 +02:00
Maksim Nabokikh 3bf25fd6e0 feat: add SSO sharing policy (#4705)
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
2026-04-02 14:18:53 +02:00
Maksim Nabokikh 546e66cb5d feat: add WebAuthn support (#4704)
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
Signed-off-by: Maksim Nabokikh <max.nabokih@gmail.com>
Co-authored-by: Alwx <alwxsin@gmail.com>
2026-04-02 11:48:46 +02:00
iliaandreevde 098ab6036e feat: support ES256 local signer (#4682)
Signed-off-by: Ilia Andreev <ilia.andreev@palark.com>
Co-authored-by: Ilia Andreev <ilia.andreev@palark.com>
2026-03-25 09:46:45 +01:00
Maksim Nabokikh 3b5be6a876 Disable MFA configuration in config-dev.yaml (#4672)
Comment out multi-factor authentication configuration.

Signed-off-by: Maksim Nabokikh <maksim.nabokikh@flant.com>
2026-03-20 13:05:47 +01:00
Maksim Nabokikh 7ec1760c6b feat: Add OIDC conformance testing scripts and configuration (#4663)
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
2026-03-19 11:21:28 +01:00
Maksim Nabokikh 86abd336f8 Two-Factor authentication (TOTP) (#3712)
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
2026-03-18 18:20:20 +01:00
Maksim Nabokikh cbd7dd7f5a feat: Create AuthSessions and set cookies (#4650)
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
2026-03-18 11:58:18 +01:00
dependabot[bot] 8af6d3c4be build(deps): bump google.golang.org/grpc in /examples (#4661)
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.79.2 to 1.79.3.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.79.2...v1.79.3)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-version: 1.79.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-18 07:20:31 +01:00
Maksim Nabokikh 5bbfbbe168 feat: add PKCE (Proof Key for Code Exchange) configuration to OAuth2 settings (#4638)
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
2026-03-13 13:09:44 +01:00
Maksim Nabokikh 80d297b8a4 feat: update CSS for improved theming and button styles (#4634) 2026-03-12 09:18:12 +01:00
Maksim Nabokikh f80a89dd5d feat(client): add allowed connectors field to client configuration (#4610)
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
2026-03-11 23:00:38 +01:00
Maksim Nabokikh 7777773067 feat(connector): connectors for grants (#4619)
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
2026-03-11 07:21:14 +01:00
dependabot[bot] 01b6822bcb build(deps): bump google.golang.org/grpc in /examples (#4626)
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.79.1 to 1.79.2.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.79.1...v1.79.2)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-version: 1.79.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-09 21:35:13 +01:00
dependabot[bot] e2462a25ce build(deps): bump golang.org/x/oauth2 from 0.35.0 to 0.36.0 in /examples (#4627)
Bumps [golang.org/x/oauth2](https://github.com/golang/oauth2) from 0.35.0 to 0.36.0.
- [Commits](https://github.com/golang/oauth2/compare/v0.35.0...v0.36.0)

---
updated-dependencies:
- dependency-name: golang.org/x/oauth2
  dependency-version: 0.36.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-09 21:24:21 +01:00
Mathias Gebbe fec4f53203 feat(oauth2): add client credentials flow with opt-in config flag (#4583)
Implement the OAuth2 client_credentials grant type for
machine-to-machine authentication. The grant is gated behind a new
clientCredentialsEnabled config flag (defaults to false), following
the same pattern as passwordConnector for the password grant.

---------

Signed-off-by: Mathias Gebbe <mathias.gebbe@gmail.com>
Signed-off-by: Maksim Nabokikh <maksim.nabokikh@flant.com>
Signed-off-by: Maksim Nabokikh <max.nabokih@gmail.com>
Co-authored-by: Maksim Nabokikh <maksim.nabokikh@flant.com>
Co-authored-by: Maksim Nabokikh <max.nabokih@gmail.com>
2026-03-03 12:29:04 +01:00
Maksim Nabokikh 8db7699e0f feat: implement device code flow in example-app (#4570)
This is a KubeCon 2026 preparation:
1. Add device flow to the example-app
2. Add userinfo checker
3. Refactor the structure

Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
2026-02-22 23:06:03 +01:00
Maksim Nabokikh 5d27abc117 feat: refactor example-app with a new config (#4569)
This is a preparation for KubeCon 2026:
1. Restyle the app
2. Refactor advanced configuration options
3. Move embedded templates and css to separate files

Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
2026-02-21 15:34:03 +01:00
Maksim Nabokikh 29c7b6f4e3 feat: validate redirect URIs and safely append parameters (#4559)
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
2026-02-18 10:04:51 +01:00
dependabot[bot] 2976b2363a build(deps): bump google.golang.org/grpc in /examples (#4551)
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.79.0 to 1.79.1.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.79.0...v1.79.1)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-version: 1.79.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-16 08:45:58 +01:00
Maksim Nabokikh 785033767c feat: refactor signer configuration with local and vault options (#4532)
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
2026-02-15 16:08:21 +01:00
dependabot[bot] 9bee0b0bc6 build(deps): bump google.golang.org/grpc in /examples (#4537)
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.78.0 to 1.79.0.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.78.0...v1.79.0)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-version: 1.79.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-13 08:12:19 +01:00