Code

OIDC: Sessions#15030

Code

Draft

markylaing wants to merge 47 commits intocanonical:maincanonical/lxd:mainfrom markylaing:sessionsmarkylaing/lxd:sessionsCopy head branch name to clipboard

+1,757-1,104

Commits

Commits on Feb 19, 2025

• api: Add secret_lifetime API extension.

  Show description for 82b3b31
  markylaing

  committed
  82b3b31

  Copy full SHA for 82b3b31

• lxd/cluster/config: Add secret lifetime config keys.

  Show description for bbbadd1
  markylaing

  committed
  bbbadd1

  Copy full SHA for bbbadd1

• doc: Update metadata

  Show description for 1d5409a
  markylaing

  committed
  1d5409a

  Copy full SHA for 1d5409a

• lxd/db/cluster/secret: Add secret package.

  Show description for 1488f9a
  markylaing

  committed
  1488f9a

  Copy full SHA for 1488f9a

• lxd/config: Ignore volatile.secret.* keys in config map.

  Show description for 190e1b1
  markylaing

  committed
  190e1b1

  Copy full SHA for 190e1b1

• lxd/cluster/config: Add method to get key and salt lifetimes.

  Show description for 4e1766f
  markylaing

  committed
  4e1766f

  Copy full SHA for 4e1766f

• lxd: Add getClusterSecret function to Daemon.

  Show description for ff45af4
  markylaing

  committed
  ff45af4

  Copy full SHA for ff45af4

• lxd: Unset (*Daemon).clusterSecretInternal on cluster join.

  Show description for ff5b87e
  markylaing

  committed
  ff5b87e

  Copy full SHA for ff5b87e

• lxd: Invalidate the key/salt when their lifetime is changed.

  Show description for 6555775
  markylaing

  committed
  6555775

  Copy full SHA for 6555775

• lxd/auth/oidc: Update Verifier to use cluster-wide secret.

  Show description for d970ddf
  markylaing

  committed
  d970ddf

  Copy full SHA for d970ddf

• lxd/auth/oidc: Optionally pass host and context to NewVerifier.

  Show description for 79be02d
  markylaing

  committed
  79be02d

  Copy full SHA for 79be02d

• lxd: Update calls to NewVerifier.

  Show description for 8d628ad
  markylaing

  committed
  8d628ad

  Copy full SHA for 8d628ad

• lxd/auth/oidc: Allow usage of older relying parties for /oidc/callback.

  Show description for d632561
  markylaing

  committed
  d632561

  Copy full SHA for d632561

• test/suites: Test enforcement of issuer URL being compatible with discovery.

  Show description for 5d72a2b
  markylaing

  committed
  5d72a2b

  Copy full SHA for 5d72a2b

• api: Add oidc_sessions API extension.

  Show description for 4c7628a
  markylaing

  committed
  4c7628a

  Copy full SHA for 4c7628a

• gomod: Add dependencies.

  Show description for 1c5e998
  markylaing

  committed
  1c5e998

  Copy full SHA for 1c5e998

• lxd/auth/oidc: Add refresh token and session ID to authentication result.

  Show description for d712351
  markylaing

  committed
  d712351

  Copy full SHA for d712351

• lxd/auth/oidc: Add SessionHandler type.

  Show description for 2071226
  markylaing

  committed
  2071226

  Copy full SHA for 2071226

• lxd/db/cluster: Add methods for getting identity info.

  Show description for 911c55e
  markylaing

  committed
  911c55e

  Copy full SHA for 911c55e

• lxd/db/oidc: Add SessionHandler implementation.

  Show description for db85d2d
  markylaing

  committed
  db85d2d

  Copy full SHA for db85d2d

Commits on Feb 20, 2025

• lxd/cluster/config: Add oidc.session.lifetime config key.

  Show description for ab869a5
  markylaing

  committed
  ab869a5

  Copy full SHA for ab869a5

• doc: Update metadata.

  Show description for eea8b64
  markylaing

  committed
  eea8b64

  Copy full SHA for eea8b64

• lxd/auth/oidc: Update NewVerifier with session lifetime/handler and cluster cert fingerprint.

  Show description for 01e63aa
  markylaing

  committed
  01e63aa

  Copy full SHA for 01e63aa

• lxd: Update OIDC config and NewVerifier calls.

  Show description for ec0b4b6
  markylaing

  committed
  ec0b4b6

  Copy full SHA for ec0b4b6

• lxd/auth/oidc: Move cookie and encryption handling to other files.

  Show description for 911b058
  markylaing

  committed
  911b058

  Copy full SHA for 911b058

• lxd/auth/oidc: Update authorization code flow to set session cookie.

  Show description for bcdef2c
  markylaing

  committed
  bcdef2c

  Copy full SHA for bcdef2c

• lxd/auth/oidc: Update IsRequest to check session cookie.

  Show description for dfb6459
  markylaing

  committed
  dfb6459

  Copy full SHA for dfb6459

• lxd/auth/oidc: Update OIDC Verifier to use sessions.

  Show description for 3c5a422
  markylaing

  committed
  3c5a422

  Copy full SHA for 3c5a422

• lxd/identity: Strip the identity cache back to only contain certificates.

  Show description for c7a1d15
  markylaing

  committed
  c7a1d15

  Copy full SHA for c7a1d15

• lxd: Change updateIdentityCache to only add certificates.

  Show description for 6709ed1
  markylaing

  committed
  6709ed1

  Copy full SHA for 6709ed1

• lxd: Update calls to identity cache.

  Show description for abbd34e
  markylaing

  committed
  abbd34e

  Copy full SHA for abbd34e

• lxd: Update tests using the identity cache.

  Show description for f79f3ff
  markylaing

  committed
  f79f3ff

  Copy full SHA for f79f3ff

• lxd/auth/drivers: Remove identity cache from authorizers.

  Show description for a6bd085
  markylaing

  committed
  a6bd085

  Copy full SHA for a6bd085

• lxd/auth: Remove identity cache from auth utils.

  Show description for 078228a
  markylaing

  committed
  078228a

  Copy full SHA for 078228a

• lxd/request: Remove IdP groups context key and add identity info and certificate keys.

  Show description for 2339c22
  markylaing

  committed
  2339c22

  Copy full SHA for 2339c22

• lxd/cluster: Don't send IdP groups header.

  Show description for a4b37bc
  markylaing

  committed
  a4b37bc

  Copy full SHA for a4b37bc

• lxd: Only update identity cache when a certificate changes.

  Show description for 5f77555
  markylaing

  committed
  5f77555

  Copy full SHA for 5f77555

• lxd: Updates from auth util changes.

  Show description for 357e9a3
  markylaing

  committed
  357e9a3

  Copy full SHA for 357e9a3

• lxd: Don't add identity cache to authorizer instantiations.

  Show description for 6eb0f39
  markylaing

  committed
  6eb0f39

  Copy full SHA for 6eb0f39

• lxd: Don't add IdP groups to request context.

  Show description for 1e66ec6
  markylaing

  committed
  1e66ec6

  Copy full SHA for 1e66ec6

• lxd: Update Authenticate method and remove handle OIDC result method.

  Show description for ba0cc5a
  markylaing

  committed
  ba0cc5a

  Copy full SHA for ba0cc5a

• client: Don't always sent the OIDC access token.

  Show description for c15f09d
  markylaing

  committed
  c15f09d

  Copy full SHA for c15f09d

• client: Update the do method for the OIDC client.

  Show description for e478526
  markylaing

  committed
  e478526

  Copy full SHA for e478526

• lxc/config: Add cookie handling to config.

  Show description for 21cbcb0
  markylaing

  committed
  21cbcb0

  Copy full SHA for 21cbcb0

• lxc: Save cookies on exit, delete cookies on remote remove.

  Show description for 9b9e9c8
  markylaing

  committed
  9b9e9c8

  Copy full SHA for 9b9e9c8

• lxc: Ignore lint error (staticcheck).

  Show description for 4864c5c
  markylaing

  committed
  4864c5c

  Copy full SHA for 4864c5c

• test/godeps: Update deps for lxc config.

  Show description for 3c8deab
  markylaing

  committed
  3c8deab

  Copy full SHA for 3c8deab