summaryrefslogtreecommitdiff
path: root/app
AgeCommit message (Expand)Author
2025-05-28chore: remove logging of sensitive fieldsmo khan
2025-05-28refactor: always provide a user in the request contextmo khan
2025-05-28refactor: delete jwt verification codemo khan
2025-05-28refactor: parse headers injected by envoymo khan
2025-05-28refactor: extract type to parse user from http.Requestmo khan
2025-05-28refactor: extract RequestParser typemo khan
2025-05-26fix: do not clear id_token cookie on errormo khan
2025-05-26refactor: parse id token from custom x-jwt-payload headermo khan
2025-05-24chore: log the sub claim from the envoy headermo khan
2025-05-24chore: log x-request-id in sparkle and authzdmo khan
2025-05-24fix: register oidc provider oncemo khan
2025-05-24fix: disable require permission middlewaremo khan
2025-05-24feat: connect rpc client to inversion of control containermo khan
2025-05-24refactor: decorate handler with access check middlewaremo khan
2025-05-24feat: create middleware to check if user has permissionmo khan
2025-05-23feat: parse the body of the id tokenmo khan
2025-05-23feat: add external authorization service (authzd) with JWT authenticationmo khan
2025-05-15chore: allow envoy to handle health checksmo khan
2025-05-15feat: remove oauth config and client secret from sparklemo khan
2025-05-15refactor: decouple from oauth configmo khan
2025-05-15refactor: rename TestServer to OIDCServermo khan
2025-05-15refactor: allow cookie parser to accept cookie namemo khan
2025-05-15refactor: remove unused environment variablesmo khan
2025-05-15refactor: move NewOIDCProvider to web packagemo khan
2025-05-15refactor: inline usage of RawToken typemo khan
2025-05-15refactor: remove more types from oidc packagemo khan
2025-05-15refactor: remove oidc.OpenID structmo khan
2025-05-15refactor: provide oauth config to oidc.Newmo khan
2025-05-15chore: register oauth2 config in inversion of control containermo khan
2025-05-15refactor: inline usage of validate id tokenmo khan
2025-05-15refactor: delete code that is now handled by envoymo khan
2025-05-14refactor: remove unnecessary params from ctormo khan
2025-05-14feat: provider a fallback provider that defaults to hard-coded pathsmo khan
2025-05-14test: exit if discovery endpoint is not reachablemo khan
2025-05-11fix: redirect to dashboard when already logged in at callback urlmo khan
2025-05-11refactor: inline unncessary methodmo khan
2025-05-11refactor: use same cookie names as envoy pluginmo khan
2025-05-11feat: add endpoint to reflect JWT bodymo khan
2025-05-11test: test envoy and sparkle via testcontainersmo khan
2025-05-08refactor: move html render to data transfer objectmo khan
2025-05-08feat: test out a redirect page in stagingmo khan
2025-05-08feat: use a cookie prefix to lock down the session cookiemo khan
2025-05-08chore: add link to 404 issuemo khan
2025-05-08chore: write cookie validity to logmo khan
2025-05-08feat: clear the oauth state cookie after usagemo khan
2025-05-08chore: log the generated cookiemo khan
2025-05-07refactor: use Mapper typemo khan
2025-05-07feat: check if cookie is validmo khan
2025-05-07fix: do not clear set-cookie headermo khan
2025-05-07fix: remove the csrf cookie after usagemo khan