Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

SAML authentication backend #1017

Merged
merged 13 commits into from
Oct 28, 2016
Merged

SAML authentication backend #1017

merged 13 commits into from
Oct 28, 2016

Commits on Oct 20, 2016

  1. Add go-xmlsec dependency

    @ejholmes
    ejholmes committed Oct 20, 2016
    Configuration menu
    Copy the full SHA
    36d8896 View commit details
    Browse the repository at this point in the history

Commits on Oct 25, 2016

  1. Add remind101/empire/pkg/jwt

    @ejholmes
    ejholmes committed Oct 25, 2016
    Configuration menu
    Copy the full SHA
    db539af View commit details
    Browse the repository at this point in the history

  2. Implement pkg/saml

    @ejholmes
    ejholmes committed Oct 25, 2016
    Configuration menu
    Copy the full SHA
    3871b12 View commit details
    Browse the repository at this point in the history

  3. Add SAML support

    @ejholmes
    ejholmes committed Oct 25, 2016
    Configuration menu
    Copy the full SHA
    74cb83d View commit details
    Browse the repository at this point in the history

  4. Make configuration of authentication backed more explicit.

    @ejholmes
    ejholmes committed Oct 25, 2016
    Configuration menu
    Copy the full SHA
    3924ed5 View commit details
    Browse the repository at this point in the history

  5. Add SessionNotOnOrAfter to AuthnStatement.

    @ejholmes
    ejholmes committed Oct 25, 2016
    Configuration menu
    Copy the full SHA
    171636c View commit details
    Browse the repository at this point in the history

  6. Add support for expiring auth tokens. 

    This adds support for expiring auth tokens, and improves security around
`emp login`:

1. You can only obtain an access token from `emp login` if you're
providing username/password. This prevents the possibility of creating
an long lived access token from a token that would expire.
2. `emp login` is disabled when SAML authentication is used.
    @ejholmes
    ejholmes committed Oct 25, 2016
    Configuration menu
    Copy the full SHA
    0c69b26 View commit details
    Browse the repository at this point in the history

  7. Support service provider initiated login.

    @ejholmes
    ejholmes committed Oct 25, 2016
    Configuration menu
    Copy the full SHA
    9c74105 View commit details
    Browse the repository at this point in the history

  8. Docs on configuring the SAML authentication backend.

    @ejholmes
    ejholmes committed Oct 25, 2016
    Configuration menu
    Copy the full SHA
    8e88496 View commit details
    Browse the repository at this point in the history

  9. Update CHANGELOG

    @ejholmes
    ejholmes committed Oct 25, 2016
    Configuration menu
    Copy the full SHA
    f019b87 View commit details
    Browse the repository at this point in the history

Commits on Oct 26, 2016

  1. Integration test full SAML service provider initiated login.

    @ejholmes
    ejholmes committed Oct 26, 2016
    Configuration menu
    Copy the full SHA
    1c639eb View commit details
    Browse the repository at this point in the history

Commits on Oct 27, 2016

  1. Fix uriContentOrValue when maybeURI is not a URI.

    @ejholmes
    ejholmes committed Oct 27, 2016
    Configuration menu
    Copy the full SHA
    c652589 View commit details
    Browse the repository at this point in the history

  2. Update dev instructions to install libxmlsec

    @ejholmes
    ejholmes committed Oct 27, 2016
    Configuration menu
    Copy the full SHA
    e33096a View commit details
    Browse the repository at this point in the history