Gero Posmyk-Leinemann
feb6058859
[idp] Guarantee stable email address for IDP token for organization-bound users ( #20199 )
2024-09-12 04:14:57 -04:00
Gero Posmyk-Leinemann
4524c19868
[OIDC] IDP: use workspace.context.normalizedContextUrl to fill the "sub" and "context" claims of the IDToken ( #20111 )
...
The motivation is to have more uniform URL shapes to match against e.g. across different IDEs.
2024-08-13 10:41:15 -04:00
Huiwen
5ff4535ac5
Add scope flag to idp commands ( #19727 )
...
* Add `scope` flag to idp commands
* fix flag inherit
2024-05-15 16:27:53 +08:00
Pudong
6c7544ebca
[idp] improve idp ( #19647 )
...
* [idp] add repository claim
* [idp] add missing `use` field for key cache
* [idp] simplify logic for `idp token --decode` command
* [idp] add `gcloud-token` command
* Apply suggestions from code review
Co-authored-by: Huiwen <mhqnwt@gmail.com>
---------
Co-authored-by: Huiwen <mhqnwt@gmail.com>
2024-04-23 09:59:01 +02:00
Huiwen
9719e619be
[IdP] add user_id claim and allow to customize OIDC subject via FF ( #19455 )
...
* [papi] add user_id field to idp token
* [idp] allow to customize claim keys
* fixup update FF
* Update splitor and add more unit tests
2024-02-22 19:03:03 +02:00
Pudong
f74ba1cbc3
Add organization id in claims ( #17954 )
...
* add OrganizationId in claims.
* Update components/gitpod-protocol/go/gitpod-service.go
* fix
2023-06-26 16:37:50 +08:00
Pudong
4aede056ab
[IDP] set email_verified to false if user is not org-owned user ( #17896 )
...
* set email_verified to false if user is not org-owned user
* update test
2023-06-12 18:46:03 +08:00
Christian Weichel
36905ac004
[idp] Add email to ID token ( #17678 )
...
* [idp] Add email to ID token
* [idp] Claim that the email is verified
which is a valid claim because it's verified by the original IDP,
and this is not the user-editable value.
* Incorporate review feedback
2023-05-19 22:07:53 +08:00
Milan Pavlik
59e58f96c1
[common-go] Composable log fields ( #16860 )
...
* [common-go] Composable log fields
* add test for compose
* use in public api
* fix
* fix
2023-03-16 20:57:08 +01:00
Milan Pavlik
59ff034d6f
[public-api] Use context logger ( #16686 )
...
* Fix
* Fix
* Fix
* Fix
* Fix
* [public-api] Use context logger
* fix
* Fix
* fix
* Fix
* fix
* fix
* fix
* fix
* fix
* Fix
* fmt
* fix
* retest
2023-03-15 13:52:07 +01:00
Christian Weichel
da4cafd5e5
Gitpod OIDC Identity Provider ( #16482 )
...
* Prototype IDP provider
* [gp cli] Add IDP commands
* [public-api] Remove zitadel based IDP implementation
* [gitpod-cli] Add IDP support for Vault
* [idp] Remove per-org IDP
* [idp] Add key cache and random key IDs
* [idp] Defer GetIDToken authorisation to server
* [idp] Add Redis public key cache
* [gitpod-cli] Hide IDP commands
* [idp] Add key ID to JWT
* [idp] Add unit tests
* [idp] Adress review comments
* [public-api-server] Use logging middleware globally
* [public-api-server] Simplify service registration
* [idp] Add Redis outage resilience
2023-03-03 17:11:01 +01:00
