wso2/cellery-security issues and pull requests

#107 - Bump synapse.version from 2.1.7-wso2v10 to 3.0.1

Pull Request - State: closed - Opened by dependabot[bot] almost 4 years ago - 1 comment
Labels: Resolution/Won’t Fix, dependencies

#106 - Bump junit from 4.12 to 4.13.1

Pull Request - State: closed - Opened by dependabot[bot] almost 4 years ago - 1 comment
Labels: Resolution/Won’t Fix, dependencies

#105 - Example on how to use envoy-oidc-filter directly with envoy

Issue - State: closed - Opened by ujwalbukka over 4 years ago - 1 comment
Labels: Resolution/Won’t Fix

#104 - Fix generating STS token with invalid audience

Pull Request - State: closed - Opened by madushajg almost 5 years ago

#103 - Support namespaces in STS

Pull Request - State: closed - Opened by hasinthaindrajee almost 5 years ago

#102 - Make envoy-oidc-filter compatible with cellery namespaces

Pull Request - State: closed - Opened by madushajg almost 5 years ago

#101 - Modify docs according to github repo changes

Pull Request - State: closed - Opened by madushajg almost 5 years ago

#100 - Bump nimbus-jose-jwt from 7.0 to 7.9

Pull Request - State: closed - Opened by dependabot[bot] almost 5 years ago - 1 comment
Labels: Resolution/Won’t Fix, dependencies

#99 - Add STS namespace for issuer

Pull Request - State: closed - Opened by tharindulak almost 5 years ago

#98 - Modify go build targets in Makefile

Pull Request - State: closed - Opened by azinneera almost 5 years ago

#97 - Enable git actions for push

Pull Request - State: closed - Opened by azinneera almost 5 years ago

#96 - Attach locally issued tokens when APIs are unprotected in envoy GW

Pull Request - State: closed - Opened by hasinthaindrajee about 5 years ago

#95 - Make token optional for composites.

Pull Request - State: closed - Opened by hasinthaindrajee about 5 years ago

#94 - Engage dedicated service for gateway when Envoy running in gateway mode.

Pull Request - State: closed - Opened by hasinthaindrajee about 5 years ago

#93 - Not expecting audience for composite sts.

Pull Request - State: closed - Opened by hasinthaindrajee about 5 years ago

#92 - Implement Composite Cell Security

Pull Request - State: closed - Opened by hasinthaindrajee about 5 years ago

#91 - introduce a header for instance id

Pull Request - State: closed - Opened by isurulucky about 5 years ago

#90 - Fix issue of not getting user claims in JWT passed by GW

Pull Request - State: closed - Opened by hasinthaindrajee about 5 years ago - 1 comment

#89 - Update envoy ext.auth filter to v2

Pull Request - State: closed - Opened by Mirage20 about 5 years ago

#88 - Add gateway.cellery-system as a trusted hostname

Pull Request - State: closed - Opened by Mirage20 over 5 years ago

#87 - Remove jwks endpoint from sts and Add knative activator authn

Pull Request - State: closed - Opened by Mirage20 over 5 years ago

#86 - Remove internal orbit bundle for gogoproto-java and fetch from wso2/orbit repository

Pull Request - State: closed - Opened by Shairam over 5 years ago

#85 - Improve unit test coverage.

Pull Request - State: closed - Opened by hasinthaindrajee over 5 years ago

#84 - Change the docker image image tag

Pull Request - State: closed - Opened by tharindulak over 5 years ago

#83 - Add unit tests for CellStsUtils.

Pull Request - State: closed - Opened by hasinthaindrajee over 5 years ago

#82 - Add initial set of unit tests.

Pull Request - State: closed - Opened by hasinthaindrajee over 5 years ago

#81 - Avoid reading non certificate files. (files mounted by kubernetes)

Pull Request - State: closed - Opened by hasinthaindrajee over 5 years ago

#80 - Changed the context path of JWKS implementation

Pull Request - State: closed - Opened by ghost over 5 years ago

#79 - Remove jwks context from go jwks server

Pull Request - State: closed - Opened by ghost over 5 years ago

#78 - depend on cell instance name + --gateway to decide gw deployment

Pull Request - State: closed - Opened by hasinthaindrajee over 5 years ago

#77 - Adding Minor changes to jwks implemetation

Pull Request - State: closed - Opened by tharindulak over 5 years ago

#76 - Use default trust manager which validates hostname

Pull Request - State: closed - Opened by hasinthaindrajee over 5 years ago

#75 - Adding changes to JWKS implemetation

Pull Request - State: closed - Opened by tharindulak over 5 years ago

#74 - Add hostname verifier to verify localhost and Cellery related hosts.

Pull Request - State: closed - Opened by hasinthaindrajee over 5 years ago

#73 - Add a trust manager which will trust certificates issued by the Cellery System

Issue - State: closed - Opened by hasinthaindrajee over 5 years ago - 1 comment
Labels: enhancement, Type/New Feature, Priority/High, 0.3.0

#72 - Remove hard coded trust certs path.

Pull Request - State: closed - Opened by hasinthaindrajee over 5 years ago

#71 - Implement trust manager which trusts trust-bundle issued by cellery

Pull Request - State: closed - Opened by hasinthaindrajee over 5 years ago

#70 - Fix failure to identify calls from gateway pod due to long length name

Pull Request - State: closed - Opened by hasinthaindrajee over 5 years ago

#69 - Improve docker build push targets in Makefile

Pull Request - State: closed - Opened by azinneera over 5 years ago

#68 - Revamp readme diagrams

Pull Request - State: closed - Opened by Minoli over 5 years ago

#67 - Disable docker plugin to avoid release build failure

Pull Request - State: closed - Opened by azinneera over 5 years ago

#66 - Remove adding users from SQL

Pull Request - State: closed - Opened by hasinthaindrajee over 5 years ago

#65 - Add IDP post initializer to add dummy users.

Pull Request - State: closed - Opened by hasinthaindrajee over 5 years ago

#64 - JWKS implementation

Pull Request - State: closed - Opened by tharindulak over 5 years ago - 2 comments

#63 - Add dummy users to IDP before starting up.

Pull Request - State: closed - Opened by hasinthaindrajee over 5 years ago

#62 - Update discoveryUrl to providerUrl

Pull Request - State: closed - Opened by Mirage20 over 5 years ago

#61 - add base url to redirect urls in DCR call

Pull Request - State: closed - Opened by isurulucky over 5 years ago

#60 - New GRPC service to serve Gateway STS traffic

Pull Request - State: closed - Opened by hasinthaindrajee over 5 years ago

#59 - Make cookie HTTP only.

Pull Request - State: closed - Opened by hasinthaindrajee over 5 years ago

#58 - Add HTTP only for the cookies written by oidc filter.

Issue - State: closed - Opened by hasinthaindrajee over 5 years ago

#57 - Validate cookie for non secured paths if a valid cookie is present and convey jwt to STS

Issue - State: closed - Opened by hasinthaindrajee over 5 years ago - 1 comment
Labels: 0.2.0

#56 - Validate cookie for unsecured paths if the cookie is present.

Pull Request - State: closed - Opened by hasinthaindrajee over 5 years ago

#55 - New GRPC service to serve Gateway STS traffic

Pull Request - State: closed - Opened by hasinthaindrajee over 5 years ago - 1 comment

#54 - support explicit secured paths in oidc filter

Pull Request - State: closed - Opened by isurulucky over 5 years ago

#53 - Implement Cell STS JWKS servers as sperate processes which can serve with SSL

Issue - State: closed - Opened by hasinthaindrajee over 5 years ago - 3 comments
Labels: enhancement

#52 - Implement a separate GRPC server for Gateway Interception.

Issue - State: closed - Opened by hasinthaindrajee over 5 years ago
Labels: Type/New Feature

#51 - Add logout url for envoy oidc filter

Pull Request - State: closed - Opened by Mirage20 over 5 years ago

#50 - Minor Refactoring and adding sample key and a cert

Pull Request - State: closed - Opened by hasinthaindrajee over 5 years ago

#49 - Update docker repo

Pull Request - State: closed - Opened by azinneera over 5 years ago

#48 - remove unwanted print stmt.

Pull Request - State: closed - Opened by isurulucky over 5 years ago

#47 - read DCR url from the well known address

Pull Request - State: closed - Opened by isurulucky over 5 years ago

#46 - print one line instead of multiple for n-secured paths

Pull Request - State: closed - Opened by isurulucky over 5 years ago

#45 - Support non secured paths in web cells

Pull Request - State: closed - Opened by isurulucky over 5 years ago

#44 - Add support for non secured paths in web cells

Pull Request - State: closed - Opened by isurulucky over 5 years ago

#43 - Minor refactoring and improve logging

Pull Request - State: closed - Opened by hasinthaindrajee over 5 years ago

#42 - Add missing ca certs to the envoy-oidc-filter docker image

Pull Request - State: closed - Opened by Mirage20 over 5 years ago

#41 - Upgrade parent version of lightweight IS. Burn config changes to image

Pull Request - State: closed - Opened by hasinthaindrajee over 5 years ago

#40 - Config changes burn into lightweight IS

Issue - State: closed - Opened by hasinthaindrajee over 5 years ago
Labels: 0.2.0

#39 - Enable spotify docker plugin

Pull Request - State: closed - Opened by azinneera over 5 years ago

#38 - Add x-cellery-auth-subject forwarding header to upstream calls

Pull Request - State: closed - Opened by Mirage20 over 5 years ago

#37 - Add jwt subject claim support

Pull Request - State: closed - Opened by Mirage20 over 5 years ago

#36 - Add base64 encoding to kid jwt header

Pull Request - State: closed - Opened by Mirage20 over 5 years ago

#35 - Fix unwanted error imports

Pull Request - State: closed - Opened by Mirage20 over 5 years ago

#34 - Read controller mounted keys and validate tokens send by workloads

Pull Request - State: closed - Opened by hasinthaindrajee over 5 years ago

#33 - Validate workload issued tokens in Web Cells.

Issue - State: closed - Opened by hasinthaindrajee over 5 years ago
Labels: enhancement, Priority/Highest, 0.2.0

#32 - Add upstream JWT generation for the oidc envoy filter

Pull Request - State: closed - Opened by Mirage20 over 5 years ago

#31 - implement DCR for webcell gateway 🎉

Pull Request - State: closed - Opened by isurulucky over 5 years ago

#30 - Allow open APIs to access without access tokens.

Pull Request - State: closed - Opened by hasinthaindrajee over 5 years ago

#29 - Implement KeyResolver from file system so that certificates and keys which are distributed from Controller can be used within STS

Issue - State: closed - Opened by hasinthaindrajee over 5 years ago
Labels: enhancement, 0.2.0

GitHub / wso2/cellery-security issues and pull requests