4 Commits

Author SHA1 Message Date
Pudong
6c7544ebca
[idp] improve idp (#19647)
* [idp] add repository claim

* [idp] add missing `use` field for key cache

* [idp] simplify logic for `idp token --decode` command

* [idp] add `gcloud-token` command

* Apply suggestions from code review

Co-authored-by: Huiwen <mhqnwt@gmail.com>

---------

Co-authored-by: Huiwen <mhqnwt@gmail.com>
2024-04-23 09:59:01 +02:00
Pudong
6c44003efa
[idp] periodically persist public key (#17759)
* [idp] make key id stable

* [idp] periodically persist public key

* fix

* addressed feedback

* Update components/public-api-server/pkg/identityprovider/cache.go

Co-authored-by: Christian Weichel <chris@gitpod.io>

* use option

* add test

* fix

---------

Co-authored-by: Christian Weichel <chris@gitpod.io>
2023-06-02 00:22:06 +08:00
Christian Weichel
8ed7b7d8a2
Repersist IDP public key when lost (#17422)
e.g. because Redis restarted.
2023-05-02 13:54:40 +08:00
Christian Weichel
da4cafd5e5
Gitpod OIDC Identity Provider (#16482)
* Prototype IDP provider

* [gp cli] Add IDP commands

* [public-api] Remove zitadel based IDP implementation

* [gitpod-cli] Add IDP support for Vault

* [idp] Remove per-org IDP

* [idp] Add key cache and random key IDs

* [idp] Defer GetIDToken authorisation to server

* [idp] Add Redis public key cache

* [gitpod-cli] Hide IDP commands

* [idp] Add key ID to JWT

* [idp] Add unit tests

* [idp] Adress review comments

* [public-api-server] Use logging middleware globally

* [public-api-server] Simplify service registration

* [idp] Add Redis outage resilience
2023-03-03 17:11:01 +01:00