quay/jwtproxy issues and pull requests

#126 - Feature: Verify JWT by JWK discovered by well known OpenId Connect Discovery endpoint

Issue - State: open - Opened by wassy92x about 2 years ago

#125 - Crypto Go ：we are a research group to help developers build secure applications.

Issue - State: open - Opened by 1047261438 about 2 years ago

#124 - Initialize repo with go mod init

Pull Request - State: closed - Opened by harishsurf about 3 years ago

#123 - Docker Repository on Quay: Repository not found

Issue - State: open - Opened by rtau-cca almost 4 years ago

#121 - Support for HMAC single-key signing

Issue - State: open - Opened by xanderflood almost 5 years ago

#120 - change git repo coreos to quay

Pull Request - State: closed - Opened by thomasmckay almost 5 years ago

#119 - NonceStorage: Optional JTI Validation

Pull Request - State: open - Opened by mikelduke over 5 years ago - 1 comment

#118 - git: update ignore for jwtproxy binary

Pull Request - State: closed - Opened by mikelduke over 5 years ago

#117 - vendor: fix case of sirupsen/logrus

Pull Request - State: closed - Opened by mikelduke over 5 years ago

#116 - vendor: fix case of sirupsen/logrus

Pull Request - State: closed - Opened by mikelduke over 5 years ago - 2 comments

#115 - make socket 0777 permissions

Pull Request - State: closed - Opened by thomasmckay over 5 years ago - 2 comments

#114 - docker build fails missing "sirupsen/logrus"

Issue - State: closed - Opened by thomasmckay over 5 years ago - 2 comments

#113 - Fix Sweet32 in dependencies

Pull Request - State: closed - Opened by jzelinskie over 5 years ago - 2 comments

#112 - fix typo in keyregistry documentation

Pull Request - State: closed - Opened by alexgelman over 6 years ago

#111 - Create optional no-op nonce validator

Pull Request - State: closed - Opened by mshaposhnik over 6 years ago

#110 - Used dep package manager, migrated to new namespace eclipse-che-staging

Pull Request - State: closed - Opened by skabashnyuk over 6 years ago

#109 - automated PR: update CoC

Pull Request - State: closed - Opened by ericchiang almost 7 years ago

#108 - Help configuring jwtproxy

Issue - State: closed - Opened by zemanel about 7 years ago

#107 - Error - "Failed to create JWT signer: no private key provider specified"

Issue - State: closed - Opened by arjunm183 over 7 years ago - 1 comment

#106 - Make unexpected errors in JWT proxy more descriptive

Pull Request - State: closed - Opened by josephschorr over 7 years ago

#105 - *: add bill of materials

Pull Request - State: closed - Opened by jzelinskie over 7 years ago

#104 - vendor: update, strip, fix goproxy

Pull Request - State: closed - Opened by Quentin-M over 7 years ago

#103 - jti replay protection should be optional

Issue - State: open - Opened by philhug almost 8 years ago - 2 comments

#102 - add support for basic auth

Pull Request - State: closed - Opened by philhug almost 8 years ago

#101 - Add jwks support

Pull Request - State: open - Opened by philhug almost 8 years ago - 3 comments

#100 - Return 401 Unauthorized, when jwt is invalid

Pull Request - State: open - Opened by ghost almost 8 years ago

#99 - Couple changes around the Dockerfile

Pull Request - State: closed - Opened by jzelinskie about 8 years ago

#98 - fixed broken link to README

Pull Request - State: closed - Opened by zapient over 8 years ago

#97 - Add websocket support

Pull Request - State: closed - Opened by ecordell over 8 years ago - 4 comments

#96 - Generate canonical kid

Pull Request - State: closed - Opened by ecordell over 8 years ago - 3 comments

#95 - Expose InsecureSkipVerify in the signer config

Pull Request - State: closed - Opened by Quentin-M over 8 years ago - 1 comment

#94 - Fix broken link to goreman repository

Pull Request - State: closed - Opened by denderello over 8 years ago - 1 comment

#93 - Add a kubernetes example

Pull Request - State: closed - Opened by Quentin-M over 8 years ago - 3 comments

#92 - Add simple usage example

Pull Request - State: closed - Opened by Quentin-M over 8 years ago - 1 comment

#91 - keyserver: reference implementation wanted

Issue - State: open - Opened by philips over 8 years ago - 2 comments
Labels: help wanted, priority/P1

#90 - Allow multiple verifier proxies, for basic authZ

Pull Request - State: closed - Opened by jakedt over 8 years ago - 2 comments
Labels: area/usability, kind/design

#89 - Exit on key validation fail

Pull Request - State: closed - Opened by ecordell over 8 years ago - 1 comment

#88 - Extend the key registry spec for expired keys

Pull Request - State: closed - Opened by jakedt over 8 years ago - 1 comment

#87 - Handle unapproved keys at shutdown and rotate

Pull Request - State: closed - Opened by jakedt over 8 years ago - 1 comment

#86 - Always use TLS MITM for CONNECT if possible.

Pull Request - State: closed - Opened by Quentin-M over 8 years ago - 5 comments

#85 - JWK serialization

Pull Request - State: closed - Opened by ecordell over 8 years ago - 1 comment

#84 - Write JWK format when caching keys to disk

Issue - State: closed - Opened by ecordell over 8 years ago - 1 comment
Labels: area/developer tooling, area/usability, kind/cleanup

#83 - Exit on key validation fail

Pull Request - State: closed - Opened by ecordell over 8 years ago - 4 comments

#82 - Race condition when loading private key from file

Issue - State: closed - Opened by ecordell over 8 years ago - 1 comment
Labels: kind/bug, component/config

#81 - Log error when verifying stored private key

Pull Request - State: closed - Opened by ecordell over 8 years ago

#80 - Clean up socket on shutdown

Issue - State: open - Opened by ecordell over 8 years ago - 1 comment
Labels: kind/cleanup

#79 - Log failed requests

Issue - State: open - Opened by ecordell over 8 years ago
Labels: area/usability

#78 - Allow configuring & running multiple verifiers

Issue - State: closed - Opened by Quentin-M over 8 years ago - 1 comment
Labels: area/usability, kind/enhancement, component/config

#77 - key_server config key is under "private_key" but deals with public keys

Issue - State: open - Opened by jzelinskie over 8 years ago
Labels: area/usability, component/config

#76 - jti should only be stored after signature validation

Issue - State: open - Opened by Quentin-M over 8 years ago
Labels: kind/bug

#75 - Configurable error message

Issue - State: open - Opened by ecordell over 8 years ago
Labels: kind/cleanup, kind/enhancement

#74 - Change project location

Pull Request - State: closed - Opened by jakedt over 8 years ago - 1 comment

#73 - Add documentation about the key registry protocol

Pull Request - State: closed - Opened by jakedt over 8 years ago - 1 comment

#72 - Add tests for JWT Sign/Verify

Pull Request - State: closed - Opened by Quentin-M over 8 years ago - 1 comment

#71 - Revoke key when the server shuts down

Issue - State: closed - Opened by jakedt over 8 years ago - 1 comment

#70 - Allow multiple forward proxies to cache keys locally

Pull Request - State: closed - Opened by jakedt over 8 years ago - 3 comments

#69 - Save the generated private keys to disk to survive process termination

Pull Request - State: closed - Opened by jakedt over 8 years ago - 1 comment

#68 - Vendor gregjones/httpcache

Pull Request - State: closed - Opened by ecordell over 8 years ago - 1 comment

#67 - Add a Dockerfile

Pull Request - State: closed - Opened by Quentin-M over 8 years ago - 2 comments

#66 - Switch the lookaside cache for an http cache on keyregistry

Pull Request - State: closed - Opened by jakedt over 8 years ago - 3 comments

#65 - rename this repo

Issue - State: closed - Opened by philips over 8 years ago

#64 - README: provide a kubernetes pod example

Issue - State: closed - Opened by philips over 8 years ago
Labels: area/developer tooling, kind/documentation, priority/P1

#63 - README: provide a quay.io container

Issue - State: closed - Opened by philips over 8 years ago

#62 - Allow upstream to be an unix socket

Pull Request - State: closed - Opened by Quentin-M over 8 years ago - 3 comments

#61 - Fix "kid" bug introduced by 6d07e41

Pull Request - State: closed - Opened by Quentin-M over 8 years ago

#60 - Add UNIX socket support to proxy

Pull Request - State: closed - Opened by Quentin-M over 8 years ago - 4 comments

#59 - Fill in the registry protocol documentation

Issue - State: closed - Opened by jakedt over 8 years ago

#58 - Extract starting functions outside of cmd/jwtproxy

Pull Request - State: closed - Opened by Quentin-M over 8 years ago - 2 comments

#57 - Reverse proxy unix socket support

Issue - State: closed - Opened by jakedt over 8 years ago - 1 comment

#56 - Passthrough mode if verifier not configured?

Issue - State: closed - Opened by jakedt over 8 years ago - 1 comment

#55 - Ability to require client side certificates for SSL termination

Issue - State: open - Opened by jakedt over 8 years ago
Labels: area/usability, kind/enhancement

#54 - Switch public key lookaside cache to real http client cache

Issue - State: closed - Opened by jakedt over 8 years ago

#53 - provide trivial example

Issue - State: closed - Opened by philips over 8 years ago
Labels: area/developer tooling, kind/documentation, priority/P0

#52 - A fixed 1s poll period on key publication may be too aggressive

Issue - State: open - Opened by jakedt over 8 years ago
Labels: kind/design

#51 - Remove the duplicate kid from the claims, already in headers

Pull Request - State: closed - Opened by jakedt over 8 years ago - 1 comment

#50 - Add claims verification plugins and a static claims verifier impl

Pull Request - State: closed - Opened by jakedt over 8 years ago - 1 comment

#49 - We should move the run and terminate logic outside of main.go

Issue - State: closed - Opened by jakedt over 8 years ago

#48 - Need the ability to validate a static set of claims

Issue - State: closed - Opened by jakedt over 8 years ago

#47 - Graceful shutdown using goroutines and channels

Pull Request - State: closed - Opened by jakedt over 8 years ago - 1 comment

#46 - Add a meaningful user agent to keyregistry actions

Pull Request - State: closed - Opened by jakedt over 8 years ago - 1 comment

#45 - Fail the whole proxy process if one of the configured proxies can't bind

Issue - State: closed - Opened by jakedt over 8 years ago

#44 - Double close of channel if the proxy server can't start up

Issue - State: closed - Opened by jakedt over 8 years ago

#43 - Fix graceful shutdown

Issue - State: closed - Opened by jakedt over 8 years ago

#42 - Add a user agent for the jwtproxy that isn't just Go http client.

Issue - State: closed - Opened by jakedt over 8 years ago

#41 - Vendorallthethings

Pull Request - State: closed - Opened by jakedt over 8 years ago - 1 comment

#40 - rotation_policy claim

Issue - State: closed - Opened by jzelinskie over 8 years ago - 1 comment

#39 - Use a completel separate constructor for the keyregistry client and manager

Pull Request - State: closed - Opened by jakedt over 8 years ago - 1 comment

#38 - Cache warning shouldn't be written for reader key registry

Issue - State: closed - Opened by Quentin-M over 8 years ago

#37 - Add ability to only start either verifier or signer.

Pull Request - State: closed - Opened by Quentin-M over 8 years ago - 4 comments

#36 - Add Stop hooks everywhere

Pull Request - State: closed - Opened by Quentin-M over 8 years ago - 1 comment

#35 - Stash autogenerated keys on the filesystem.

Issue - State: closed - Opened by jakedt over 8 years ago

#33 - Update Godeps (fix go-oidc JWT marshaling)

Pull Request - State: closed - Opened by Quentin-M over 8 years ago - 3 comments

#32 - Polish up all of the vendoring

Issue - State: closed - Opened by jakedt over 8 years ago

#31 - Put the signer kid claim in the signed payload for key registration

Issue - State: closed - Opened by jakedt over 8 years ago - 1 comment

#30 - Generate and trust

Pull Request - State: closed - Opened by Quentin-M over 8 years ago - 1 comment

GitHub / quay/jwtproxy issues and pull requests