main

Commits

338ff46
feat: fix the csv data and serve it from the REST API
mo khan
2025-03-17 22:48:25
084ec28
feat: use csv files to simulate database tables
mo khan
2025-03-17 22:32:11
94d084a
docs: add notes on ABAC and weakness of RBAC
mo khan
2025-03-17 20:45:41
f916808
docs: read more papers from Dr. Philip W.L. Fong
mo khan
2025-03-17 19:59:19
d981d42
docs: start reading another paper on rebac
mo khan
2025-03-17 17:42:15
877469f
docs: add conclusion on ReBAC paper
mo khan
2025-03-17 17:34:04
8548a32
docs: extract a page to describe policy and FAQ
mo khan
2025-03-17 17:13:11
e6e7a91
docs: I finally understand why a formal policy language is helpful
mo khan
2025-03-17 16:39:51
0588e54
doc: split access control docs into separate files
mo khan
2025-03-17 16:11:41
2c19e54
doc: move nodes on access control models to the top of the file
mo khan
2025-03-17 15:53:23
a8aead7
docs: remove screencast from README
mo khan
2025-03-15 21:22:54
b27894f
refactor: authorize unsigned JWT in requests
mo khan
2025-03-15 21:20:53
80f1b83
docs: describe the ReBAC policy expressed as a formula
mo khan
2025-03-14 17:42:44
9ecf8c0
docs: describe the ReBAC model and how it differs from RBAC
mo khan
2025-03-14 17:14:17
d034240
docs: add prelim notes on ReBAC
mo khan
2025-03-14 16:57:45
bd8de4c
fix: combine host and path in logs
mo khan
2025-03-14 16:41:56
71056c9
chore: update rubygems
mo khan
2025-03-14 16:41:38
b3958d6
chore: switch to pure debian
mo khan
2025-03-14 16:31:48
2d5999b
chore: update package index
mo khan
2025-03-14 16:21:43
3966355
chore: source mise activation and install bundler
mo khan
2025-03-14 16:19:28
5b840c3
chore: switch to debian in ci b/c playwright drivers need glibc
mo khan
2025-03-14 16:15:13
97be97f
doc: add research on RBAC
mo khan
2025-03-14 16:12:12
7deb66e
chore: user .gitlab-ci.yml file `variables` syntax
mo khan
2025-03-14 14:53:12
39e09f5
chore: install nodejs in ci and provide path to playwright
mo khan
2025-03-14 14:51:09
c9f394f
refactor: extract authz interface to test out different PaC libraries
mo khan
2025-03-13 22:43:47
b55a661
chore: run the end to end tests by default
mo khan
2025-03-13 18:07:11
857af59
refactor: extract WithRoutes config option
mo khan
2025-03-13 16:04:25
d442b77
feat: add self-signed tls support
mo khan
2025-03-13 15:24:51
52ca752
refactor: extract proxy package
mo khan
2025-03-13 15:19:45
fa14111
refactor: extract cfg package
mo khan
2025-03-13 15:16:39
6ad85c4
refactor: extract srv package
mo khan
2025-03-13 15:12:17
0c50b10
fix: append host to redirect location
mo khan
2025-03-13 14:49:36
601de5a
refactor: use rack to parse authorization header
mo khan
2025-03-13 14:40:13
9b267c4
feat: require a login before authorizing an auth grant
mo khan
2025-03-12 22:15:20
f62507b
refactor: redirect to the standalone login page and continue saml transaction
mo khan
2025-03-12 19:19:38
d1562ce
feat: add a basic login page and dashboard
mo khan
2025-03-12 18:56:33
be5f395
test: fix the e2e test to enter username/password
mo khan
2025-03-12 18:17:21
165c219
feat: generate users with bcrypt password digest
mo khan
2025-03-12 18:07:24
44a0ee1
feat: render a simple login page
mo khan
2025-03-12 17:52:07
a06598e
chore: remove ./bin/e2e script
mo khan
2025-03-12 16:49:35
4f59ea1
doc: write up some ideas around how authz works vs desired
mo khan
2025-03-12 15:56:50
ff722f7
test: GET ./well-known/openid-configuration
mo khan
2025-03-11 22:54:26
bb0dc45
test: /.well-known/oauth-authorization-server
mo khan
2025-03-11 22:45:30
9309624
refactor: move more saml code into authn namespace
mo khan
2025-03-11 22:45:12
ae6a630
refactor: extract oauth controller
mo khan
2025-03-11 22:25:32
5ad8108
refactor: separate authn/authz code into separate modules
mo khan
2025-03-11 22:16:56
de1cf9c
test: use golang oauth client to test IdP
mo khan
2025-03-11 01:11:44
2a9b689
chore: install mage using go tool
mo khan
2025-03-11 00:23:01
9a86595
test: add e2e spec for OIDC login
mo khan
2025-03-10 20:54:11
ef02c04
chore: activate mise in makefile
mo khan
2025-03-10 20:46:04
a429250
test: check the parsed saml response
mo khan
2025-03-10 20:34:44
a3a057b
chore: activate mise shell
mo khan
2025-03-10 20:29:28
a56695f
chore: install ruby dependencies and add golang
mo khan
2025-03-10 20:22:15
db72f33
fix: the first monday of daylight saving time :facepalm:
mo khan
2025-03-10 20:07:16
782af3f
chore: add some end to end tests
mo khan
2025-03-10 20:02:27
5083ab8
chore: add a test target
mo khan
2025-03-10 17:06:36
498fbca
Remove code comments
mo khan
2025-03-10 17:01:59
ca89b78
docs: tidy up the architecture diagram
mo khan
2025-03-06 21:32:17
7f1b5e2
refactor: leave shared code in lib folder and move everything else to the service related code
mo khan
2025-03-06 20:23:09
1faacf8
feat: provide JWT token and GlobalID to make the remote authorization decision
mo khan
2025-03-06 20:18:30
68aaeca
feat: remove standalone gRPC server
mo khan
2025-03-06 19:27:03
534c909
chore: remove saved callback from development
mo khan
2025-03-06 19:08:22
b860827
refactor: connect twirp client/server components to rack
mo khan
2025-03-06 19:06:21
bad7655
refactor: move protobuf rpc services to lib/authx/rpc
mo khan
2025-03-06 18:37:01
27e5b88
refactor: use protobuf3 and define twirp service
mo khan
2025-03-06 18:24:42
0fb8fe9
chore: add script to run manual tests
mo khan
2025-03-06 18:22:32
b3bb680
chore: create pkg/ dir
mo khan
2025-03-06 18:22:04
ba0d45a
docs: add links to docs and make ascii diagram mobile friendly
mo khan
2025-03-06 18:02:34
d30e3ca
chore: use make to install tools and run mage
mo khan
2025-03-06 18:02:09
d3846f0
chore: install protoc
mo khan
2025-03-06 18:01:55
a8de396
chore: install twirp plugin as go tool
mo khan
2025-03-06 17:23:50
37565b6
chore: compile each protobuf definition
mo khan
2025-03-06 17:18:52
e31ddc3
feat: add declarative policy
mo khan
2025-03-06 00:49:59
44ad2cc
docs: add architecture diagram to README
mo khan
2025-03-06 00:40:06
6300c41
feat: connect REST API to gRPC Ability.allowed? service
mo khan
2025-03-06 00:24:44
61b6d01
feat: define the protobuf service definition
mo khan
2025-03-06 00:12:02
4100066
docs: fix sh examples in README
mo khan
2025-03-05 20:07:14
8e8b719
docs: update the README
mo khan
2025-03-05 20:06:06
e1fe97f
feat: connect the reverse proxy to a casbin policy enforcement and separate hostnames
mo khan
2025-03-05 20:02:36
06a4e07
refactor: move SAML routes to /saml/ path
mo khan
2025-03-05 19:26:47
20e1521
refactor: extract scheme and provide the appropriate nameid for saml transaction
mo khan
2025-03-05 18:43:07
502228f
feat: add a REST API service
mo khan
2025-03-05 18:10:34
98512fe
refactor: collapse director and server into usage
mo khan
2025-03-05 00:18:36
27f7691
docs: create a questions section for the README
mo khan
2025-03-05 00:14:48
5e1054b
docs: summarize the contents of the README
mo khan
2025-03-05 00:11:18
281f540
docs: clarify description for each experiment
mo khan
2025-03-05 00:04:27
8e5dfb9
feat: add API gateway to reverse proxy requests in front of two different services
mo khan
2025-03-04 21:35:24
8abcc2c
Create entrypoint for api gateway
mo khan
2025-03-04 20:22:16
5ab9f7f
docs: remove code comment
mo khan
2025-03-03 20:26:54
159b5ab
feat: add a simple grant exchange endpoint
mo khan
2025-02-28 22:38:33
68f6057
feat: implement more of the OIDC workflow
mo khan
2025-02-28 22:23:06
f6f82b7
Add openid/oauth endpoints
mo khan
2025-02-28 21:49:49
ad97794
fix: remove safe_level paramter from ERB ctor
mo khan
2025-02-27 23:41:45
6b04821
docs: remove outdated code comments
mo khan
2025-02-27 23:36:59
f25dacf
docs: fixup the README
mo khan
2025-02-27 23:35:20
5be9581
docs: add screencast
mo khan
2025-02-27 23:33:22
11b0233
docs: fix up the readme
mo khan
2025-02-27 23:29:09
b2f1867
Install twirp gem
mo khan
2025-02-27 23:26:29
ce51782
Stub out endpoints for OIDC/OAuth metadata endpoints
mo khan
2025-02-27 23:25:09
dea9650
Fix items in the README.md
mo khan
2025-02-27 23:19:41