authelia/internal/handlers
James Elliott ef549f851d
feat(oidc): add additional config options, accurate token times, and refactoring (#1991)
* This gives admins more control over their OIDC installation exposing options that had defaults before. Things like lifespans for authorize codes, access tokens, id tokens, refresh tokens, a option to enable the debug client messages, minimum parameter entropy. It also allows admins to configure the response modes.
* Additionally this records specific values about a users session indicating when they performed a specific authz factor so this is represented in the token accurately. 
* Lastly we also implemented a OIDC key manager which calculates the kid for jwk's using the SHA1 digest instead of being static, or more specifically the first 7 chars. As per https://datatracker.ietf.org/doc/html/draft-ietf-jose-json-web-key#section-8.1.1 the kid should not exceed 8 chars. While it's allowed to exceed 8 chars, it must only be done so with a compelling reason, which we do not have.
2021-07-04 09:44:30 +10:00
..
const.go feat(oidc): add additional config options, accurate token times, and refactoring (#1991) 2021-07-04 09:44:30 +10:00
errors.go [MISC] Fixed typo in X-Forwarded headers (#1280) 2020-08-21 11:15:20 +10:00
handler_configuration_test.go fix(authorization): configuration reports 2fa disabled with 2fa oidc clients (#2089) 2021-06-18 11:38:01 +10:00
handler_configuration.go fix(authorization): configuration reports 2fa disabled with 2fa oidc clients (#2089) 2021-06-18 11:38:01 +10:00
handler_firstfactor_test.go fix(authorization): configuration reports 2fa disabled with 2fa oidc clients (#2089) 2021-06-18 11:38:01 +10:00
handler_firstfactor.go feat(oidc): add additional config options, accurate token times, and refactoring (#1991) 2021-07-04 09:44:30 +10:00
handler_health.go [FEATURE] Create dedicated health endpoint (#1489) 2020-11-25 10:20:52 +11:00
handler_logout_test.go [MISC] Refactor and address most errcheck linter ignores (#1511) 2020-12-16 12:47:31 +11:00
handler_logout.go fix(handlers): logout redirection validation (#1908) 2021-04-13 10:38:12 +02:00
handler_oidc_authorize.go feat(oidc): add additional config options, accurate token times, and refactoring (#1991) 2021-07-04 09:44:30 +10:00
handler_oidc_consent.go feat(oidc): add additional config options, accurate token times, and refactoring (#1991) 2021-07-04 09:44:30 +10:00
handler_oidc_introspect.go feat(oidc): add additional config options, accurate token times, and refactoring (#1991) 2021-07-04 09:44:30 +10:00
handler_oidc_jwks.go feat(oidc): add additional config options, accurate token times, and refactoring (#1991) 2021-07-04 09:44:30 +10:00
handler_oidc_revoke.go feature(oidc): add support for OpenID Connect 2021-05-05 00:15:36 +02:00
handler_oidc_token.go feat(oidc): add additional config options, accurate token times, and refactoring (#1991) 2021-07-04 09:44:30 +10:00
handler_oidc_wellknown.go feat(oidc): add additional config options, accurate token times, and refactoring (#1991) 2021-07-04 09:44:30 +10:00
handler_register_totp.go [MISC] Refactor and address most errcheck linter ignores (#1511) 2020-12-16 12:47:31 +11:00
handler_register_u2f_step1_test.go build(deps): replace jwt-go (#2092) 2021-06-18 10:39:19 +10:00
handler_register_u2f_step1.go [MISC] Refactor and address most errcheck linter ignores (#1511) 2020-12-16 12:47:31 +11:00
handler_register_u2f_step2.go [MISC] Refactor and address most errcheck linter ignores (#1511) 2020-12-16 12:47:31 +11:00
handler_reset_password_step1.go [MISC] Refactor and address most errcheck linter ignores (#1511) 2020-12-16 12:47:31 +11:00
handler_reset_password_step2.go feat(handlers): synology password complexity err on reset (#2083) 2021-06-16 12:50:14 +10:00
handler_sign_duo_test.go [MISC] Refactor and address most errcheck linter ignores (#1511) 2020-12-16 12:47:31 +11:00
handler_sign_duo.go feat(oidc): add additional config options, accurate token times, and refactoring (#1991) 2021-07-04 09:44:30 +10:00
handler_sign_totp_test.go [MISC] Refactor and address most errcheck linter ignores (#1511) 2020-12-16 12:47:31 +11:00
handler_sign_totp.go feat(oidc): add additional config options, accurate token times, and refactoring (#1991) 2021-07-04 09:44:30 +10:00
handler_sign_u2f_step1_test.go [MISC] Fixed typo in X-Forwarded headers (#1280) 2020-08-21 11:15:20 +10:00
handler_sign_u2f_step1.go [SECURITY] Fix Authentication HTTP Status Codes (#959) 2020-05-06 07:27:38 +10:00
handler_sign_u2f_step2_test.go [MISC] Refactor and address most errcheck linter ignores (#1511) 2020-12-16 12:47:31 +11:00
handler_sign_u2f_step2.go feat(oidc): add additional config options, accurate token times, and refactoring (#1991) 2021-07-04 09:44:30 +10:00
handler_state_test.go [MISC] Refactor and address most errcheck linter ignores (#1511) 2020-12-16 12:47:31 +11:00
handler_state.go [MISC] Refactor and address most errcheck linter ignores (#1511) 2020-12-16 12:47:31 +11:00
handler_user_info_test.go [MISC] Refactor and address most errcheck linter ignores (#1511) 2020-12-16 12:47:31 +11:00
handler_user_info.go [MISC] Refactor and address most errcheck linter ignores (#1511) 2020-12-16 12:47:31 +11:00
handler_verify_test.go fix(authorization): configuration reports 2fa disabled with 2fa oidc clients (#2089) 2021-06-18 11:38:01 +10:00
handler_verify.go feat(configuration): add error and warn log levels (#2050) 2021-06-01 14:09:50 +10:00
oidc_register.go feat(oidc): add additional config options, accurate token times, and refactoring (#1991) 2021-07-04 09:44:30 +10:00
oidc_test.go feature(oidc): add support for OpenID Connect 2021-05-05 00:15:36 +02:00
oidc.go feat(oidc): add additional config options, accurate token times, and refactoring (#1991) 2021-07-04 09:44:30 +10:00
response.go feat(oidc): add additional config options, accurate token times, and refactoring (#1991) 2021-07-04 09:44:30 +10:00
totp_mock.go [MISC] Update durations to notation format and housekeeping (#824) 2020-04-05 22:37:21 +10:00
totp.go [CI] Add wsl linter (#980) 2020-05-05 21:35:32 +02:00
types_oidc.go feat(oidc): add additional config options, accurate token times, and refactoring (#1991) 2021-07-04 09:44:30 +10:00
types.go perf(authorizer): preload access control lists (#1640) 2021-03-05 15:18:31 +11:00
u2f_mock.go [MISC] Update durations to notation format and housekeeping (#824) 2020-04-05 22:37:21 +10:00
u2f.go [CI] Add wsl linter (#980) 2020-05-05 21:35:32 +02:00