Updates for release v1.15.x - #1268
Draft
enricovianello wants to merge 23 commits into
Draft
Conversation
Add support for Explicit Client Registration (ECR) for OpenID Federation Relying Parties (RP). This change introduces the components required to register and manage RP clients through OpenID Federation metadata and trust chains. Main changes: - implement Explicit Client Registration flows for RP entities - integrate RP registration with IAM client management - add request object signature validation - extend OP Entity Configuration metadata - support dynamic client configuration resolution - improve endpoint handling and URL validation - refactor registration and client resolution logic - add integration and unit tests
when building entity statement during explicit client registration
from remote OP for debugging purposes
Use the IAM issuer instead of the IAM base URL when validating the subject. Also make the audience validation stricter, as the spec states that the "aud" value MUST be the Entity Identifier of the RP and MUST NOT include any other values.
* Fixed db migration by deleting unique constraint on client_id and adding it on entity_id * Service renamed
by fixing time handling
from federated client collection tables to avoid MySQL key length limitations on large VARCHAR columns.
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
No description provided.