Skip to content
This repository has been archived by the owner on Apr 26, 2024. It is now read-only.

Support OIDC backchannel logouts #11414

Merged
merged 20 commits into from
Oct 31, 2022
Merged

Support OIDC backchannel logouts #11414

merged 20 commits into from
Oct 31, 2022

Commits on Oct 26, 2022

  1. Support back-channel logouts from OIDC providers 

    Signed-off-by: Quentin Gliech <[email protected]>
    @sandhose
    sandhose committed Oct 26, 2022
    Configuration menu
    Copy the full SHA
    49fe26e View commit details
    Browse the repository at this point in the history

  2. Apply suggestions from code review 

    Co-authored-by: Patrick Cloke <[email protected]>
    @sandhose @clokep
    sandhose and clokep committed Oct 26, 2022
    Configuration menu
    Copy the full SHA
    a0bb53d View commit details
    Browse the repository at this point in the history

  3. Validate exp and nbf claims in logout tokens if present 

    Signed-off-by: Quentin Gliech <[email protected]>
    @sandhose
    sandhose committed Oct 26, 2022
    Configuration menu
    Copy the full SHA
    a5d74fa View commit details
    Browse the repository at this point in the history

  4. Docstrings on issuer/client_id properties 

    Signed-off-by: Quentin Gliech <[email protected]>
    @sandhose
    sandhose committed Oct 26, 2022
    Configuration menu
    Copy the full SHA
    51f3cd8 View commit details
    Browse the repository at this point in the history

  5. Misc changes 

    Mainly adds a warning if the user_mapping_provider is not using the
`sub` claim as subject

Signed-off-by: Quentin Gliech <[email protected]>
    @sandhose
    sandhose committed Oct 26, 2022
    Configuration menu
    Copy the full SHA
    1fd3658 View commit details
    Browse the repository at this point in the history

  6. Check the sub claim when receiving a logout token

    @sandhose
    sandhose committed Oct 26, 2022
    Configuration menu
    Copy the full SHA
    17580ae View commit details
    Browse the repository at this point in the history

  7. Revoke in-flight logins

    @sandhose
    sandhose committed Oct 26, 2022
    Configuration menu
    Copy the full SHA
    42df126 View commit details
    Browse the repository at this point in the history

  8. Fix unit tests on old version of Twisted 

    There was an issue before Twisted 20.3.0, where request.args would not
be filled if the `Content-Length` header was missing. I fixed some unit
tests by adding this header in `make_request`.
    @sandhose
    sandhose committed Oct 26, 2022
    Configuration menu
    Copy the full SHA
    55076e1 View commit details
    Browse the repository at this point in the history

  9. Docs

    @sandhose
    sandhose committed Oct 26, 2022
    Configuration menu
    Copy the full SHA
    eb7537a View commit details
    Browse the repository at this point in the history

Commits on Oct 28, 2022

  1. Apply suggestions from code review 

    Co-authored-by: Patrick Cloke <[email protected]>
    @sandhose @clokep
    sandhose and clokep authored Oct 28, 2022
    Configuration menu
    Copy the full SHA
    d19bc83 View commit details
    Browse the repository at this point in the history

  2. Docs

    @sandhose
    sandhose committed Oct 28, 2022
    Configuration menu
    Copy the full SHA
    0f22917 View commit details
    Browse the repository at this point in the history

  3. Apply suggestions from code review 

    Co-authored-by: Patrick Cloke <[email protected]>
    @sandhose @clokep
    sandhose and clokep authored Oct 28, 2022
    Configuration menu
    Copy the full SHA
    99f58d0 View commit details
    Browse the repository at this point in the history

Commits on Oct 31, 2022

  1. Refactor OIDC backchannel logout test config

    @sandhose
    sandhose committed Oct 31, 2022
    Configuration menu
    Copy the full SHA
    48777f3 View commit details
    Browse the repository at this point in the history

  2. Move the is_access_token_valid method to the RestHelper

    @sandhose
    sandhose committed Oct 31, 2022
    Configuration menu
    Copy the full SHA
    e3c2db6 View commit details
    Browse the repository at this point in the history

  3. Clarification around logout token verification

    @sandhose
    sandhose committed Oct 31, 2022
    Configuration menu
    Copy the full SHA
    9cc5d40 View commit details
    Browse the repository at this point in the history

  4. Clarify the string split while manually parsing the JWT

    @sandhose
    sandhose committed Oct 31, 2022
    Configuration menu
    Copy the full SHA
    c0b4986 View commit details
    Browse the repository at this point in the history

  5. Move the IDP session revocation logic to the SSO handler

    @sandhose
    sandhose committed Oct 31, 2022
    Configuration menu
    Copy the full SHA
    6deef8d View commit details
    Browse the repository at this point in the history

  6. Use the issuer from the metadata, not the config when verifying logou… 

    …t tokens
    @sandhose
    sandhose committed Oct 31, 2022
    Configuration menu
    Copy the full SHA
    e0748f6 View commit details
    Browse the repository at this point in the history

  7. Merge branch 'develop' into sandhose/oidc-logout

    @sandhose
    sandhose authored Oct 31, 2022
    Configuration menu
    Copy the full SHA
    626d778 View commit details
    Browse the repository at this point in the history

  8. Fix remaining issues raised in code review

    @sandhose
    sandhose committed Oct 31, 2022
    Configuration menu
    Copy the full SHA
    8d32796 View commit details
    Browse the repository at this point in the history