main

Commits

91defae
docs: add link to the wlif diagram
mo khan
2025-04-10 13:51:07
6748141
docs: add a link to the oidc spec
mo khan
2025-04-09 20:26:06
6cc7253
doc: put together a short slide deck
mo khan
2025-04-09 19:30:33
51c1a2c
chore: generate twirp rpc for golang
mo khan
2025-04-07 20:37:26
4d27620
chore: add tls config
mo khan
2025-04-07 20:30:30
b9111d3
chore: create tmp/cache dir
mo khan
2025-04-07 18:52:56
19057e3
chore: do not fail if cedar cli is already installed
mo khan
2025-04-07 17:47:03
7a9de18
refactor: switch to zerolog logger
mo khan
2025-04-04 23:03:21
0fc2735
chore: install cedar CLI
mo khan
2025-04-03 22:58:29
406476f
refactor: remove slog-http
mo khan
2025-04-03 14:25:43
de548af
fix: add app to default global id
mo khan
2025-04-03 00:51:56
6b06446
fix: switch back to casbin
mo khan
2025-04-03 00:49:33
064d14b
refactor: switch from casbin to cedar
mo khan
2025-04-03 00:44:34
96f7120
refactor: update gtwy cedar policy
mo khan
2025-04-03 00:13:52
d8bb191
chore: use cedar cli to fix entities.json
mo khan
2025-04-02 23:51:59
678aaa9
test: parse different types of global id
mo khan
2025-04-02 23:14:27
5c870c5
refactor: attempt to model a public policy in cedar
mo khan
2025-04-02 20:24:07
894e270
refactor: combine cedar policies and add tests
mo khan
2025-04-02 19:32:22
2a37de4
refactor: update cedar entities to match hierarchy defined in csv files
mo khan
2025-04-02 17:40:37
3f54e2f
refactor: move policies and entities in policies package
mo khan
2025-04-02 17:23:47
e8708d5
docs: provide sources for description of policy
mo khan
2025-04-02 16:42:25
ea82541
refactor: use xlog to log diagnostic data
mo khan
2025-04-02 16:35:00
60b090e
refactor: rename handler to service
mo khan
2025-04-02 16:34:41
c75ceda
feat: embed cedar policies in policies package
mo khan
2025-04-02 15:45:37
c851e7d
refactor: decouple authzd from cedar authorizer
mo khan
2025-04-02 03:50:36
7f6dddc
test: start an RPC server and run a smoke test
mo khan
2025-04-02 03:03:39
0a407b3
docs: add link to kubernetes policy management paper
mo khan
2025-03-31 20:37:16
2201dfd
docs: add policy architecture diagram
mo khan
2025-03-31 20:36:00
deb9cd0
chore: export step env vars with each command
mo khan
2025-03-31 20:22:58
f00c6bd
chore: run local certificate authority
mo khan
2025-03-31 20:14:07
3c3be96
test: start rpc server test
mo khan
2025-03-31 20:06:39
1ad773f
docs: remove example ruby code
mo khan
2025-03-31 20:04:02
3049ea5
chore: add smallstep ca
mo khan
2025-03-31 20:03:46
74a1170
docs: add links to rego bindings
mo khan
2025-03-31 20:00:56
65f0f8c
docs: add selection criteria scorecard
mo khan
2025-03-31 19:47:36
121a053
docs: describe PaC
mo khan
2025-03-31 19:31:35
f7065e0
chore: extract magefiles directory
mo khan
2025-03-29 03:40:05
9d4cc3d
chore: add temp directory
mo khan
2025-03-29 03:39:04
26968c4
chore: install nats-server
mo khan
2025-03-29 03:04:05
30bbdad
refactor: move authorizers into authz package
mo khan
2025-03-28 23:49:09
e47813e
feat: build entrypoint for golang rpc server
mo khan
2025-03-28 23:23:34
3872736
feat: generate golang rpc client/server
mo khan
2025-03-28 18:13:45
87cd5db
feat: initial commit for authzd
mo khan
2025-03-28 16:40:54
56331a6
refactor: split csv files into sub directory to simulate separate databases
mo khan
2025-03-27 21:25:34
c55e51e
refactor: extract method for UI landing page
mo khan
2025-03-27 21:21:22
dbb0cb7
docs: move experiments out of README
mo khan
2025-03-27 21:18:15
febd2c1
feat: pin to version 1.4.0 of saml-kit
mo khan
2025-03-27 21:08:22
f6fb753
chore: switch to firefox
mo khan
2025-03-27 21:06:09
f4678f4
docs: connect OIDC diagram to steps below
mo khan
2025-03-27 20:23:42
284e891
docs: connect UML with steps listed below
mo khan
2025-03-27 20:20:28
243ccf6
docs: mention authn vs authz terms
mo khan
2025-03-27 20:17:37
755e355
docs: note that grpc is for authz
mo khan
2025-03-27 20:16:08
1502563
docs: provide ascii diagram of current architecture
mo khan
2025-03-27 20:13:03
a86fca4
docs: add sequence diagram for OIDC Protocol Flow
mo khan
2025-03-27 20:06:32
2434ef5
docs: update SAML flow sequence diagram
mo khan
2025-03-27 20:02:48
c6327a5
docs: add UML Sequence Diagram of SAML flow
mo khan
2025-03-27 19:59:31
3aa60cb
chore: extract list of files to convert via dot
mo khan
2025-03-27 19:49:59
ce31ca6
docs: add steps for building sequence diagrams for different types of flows
mo khan
2025-03-27 19:49:38
3faa19c
feat: start to add structured logging
mo khan
2025-03-27 17:47:58
b08580f
refactor: use incoming request to build redirect uri
mo khan
2025-03-27 15:27:23
6f46dbe
refactor: use proxy request to add forwarded headers
mo khan
2025-03-27 15:26:30
f7b7b77
feat: add consistent header across services
mo khan
2025-03-27 14:57:49
739ff3c
feat: add nav to idp pages
mo khan
2025-03-26 22:16:51
2e636ea
feat: pretty up the IdP html pages
mo khan
2025-03-26 22:10:25
e1e0f14
feat: add h1 headings
mo khan
2025-03-26 21:56:07
83ccdf9
feat: extract a navigation header for each page in UI
mo khan
2025-03-26 21:53:08
d51fa3b
feat: use pico css to make the UI pretty
mo khan
2025-03-26 21:38:15
0436d46
feat: extract a layout helper for rendering html
mo khan
2025-03-26 21:27:30
842a8ea
feat: use the latest published version of saml-kit
mo khan
2025-03-26 20:50:59
e758496
feat: exchange a SAML assertion for an access token
mo khan
2025-03-26 20:46:20
ead9021
feat: exchange a saml response for a token
mo khan
2025-03-26 17:26:06
3135a4d
docs: add an issue to research zero-knowledge proofs
mo khan
2025-03-25 17:47:33
4a62275
docs: add issue to look into open pubkey
mo khan
2025-03-25 17:41:41
c6dd920
docs: add issue to use the ACME protocol
mo khan
2025-03-25 17:38:08
433b351
docs: add issue to learn about workload identity federation
mo khan
2025-03-25 17:28:09
5cd8ff3
docs: add issue to manage memberships
mo khan
2025-03-25 17:25:16
1c223e9
docs: add an issue to research how LDAP sync works
mo khan
2025-03-25 17:22:59
0704a77
feat: exchange saml assertion for an access token
mo khan
2025-03-25 15:51:32
c866f5e
docs: add weaknesses of ABAC
mo khan
2025-03-24 18:36:04
28c2dbe
docs: add ntoes from zanzibar paper
mo khan
2025-03-24 18:13:19
4eb8d5a
refactor: use schema and host config
mo khan
2025-03-21 00:18:16
d9739b9
feat: use warden to manage authenticated session
mo khan
2025-03-21 00:13:55
319986f
refactor: rename casbin files
mo khan
2025-03-20 16:53:47
fc07382
feat: add a cedar policy
mo khan
2025-03-20 16:49:23
761d493
feat: add logout and links to /index.html
mo khan
2025-03-20 15:50:46
b9c16b5
refactor: extract ui.example.com/index.html and print tokens
mo khan
2025-03-20 15:41:34
4d0c6c3
feat: add html pages to ui service that fetches data from rest api
mo khan
2025-03-20 15:13:08
136c4df
feat: add id_token when scope includes oidc
mo khan
2025-03-20 14:33:34
45937c0
feat: check if jwt is still valid
mo khan
2025-03-19 22:22:42
8f67677
fix: restore erb trim_mode option
mo khan
2025-03-19 20:52:53
4e0b350
refactor: extract http helpers module
mo khan
2025-03-18 22:35:05
6b53e1e
refactor: extract parameter for injecting a code_verifier
mo khan
2025-03-18 20:52:50
27a39de
refactor: allow overriding the default authorize uri query params
mo khan
2025-03-18 20:47:06
e6b7ade
refactor: use oauth server metadata to configure endpoints
mo khan
2025-03-18 20:32:45
53a7bd1
refactor: extract an OAuth::Client class to all the generation of dynamic client registration
mo khan
2025-03-18 20:25:16
a255f98
feat: add a token introspection endpoint
mo khan
2025-03-18 03:38:32
66edae4
refactor: add shim to handle other types of authorization grants
mo khan
2025-03-18 02:53:09
0e5426a
feat: exchange an authorization grant for a token
mo khan
2025-03-18 02:36:48
2cf2473
feat: add public groups endpoint
mo khan
2025-03-17 22:54:32
4d47f1b
test: update credentials used in test to match seed data
mo khan
2025-03-17 22:54:20