Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Support OIDC Client Credential Authorization #751

Closed
Tracked by #756
rolsonquadras opened this issue Aug 3, 2022 · 0 comments · Fixed by #793
Closed
Tracked by #756

Support OIDC Client Credential Authorization #751

rolsonquadras opened this issue Aug 3, 2022 · 0 comments · Fixed by #793
Assignees
@aholovko
Labels
enhancement New feature or request
Milestone
0.1.9

Comments

@rolsonquadras
Copy link
Member

rolsonquadras commented Aug 3, 2022 •
edited
Loading

APIs should be authenticated with OIDC client credentials.

Tasks:

  • Add ORY hydra as a demo OP
  • Create Clients in hydra with scope
  • use ORY oathkeeper to introspect OAuth bearer token
  • Validate the static API token
  • Validate client_id/org_id in the header matches the owner of the issuer/verifier profile
This was referenced Aug 3, 2022
Open
Closed
@rolsonquadras rolsonquadras added this to the 0.1.9 milestone Aug 19, 2022
@rolsonquadras rolsonquadras added the enhancement New feature or request label Aug 19, 2022
aholovko added a commit to aholovko/vcs that referenced this issue Sep 14, 2022
@aholovko
feat: add support OIDC client credential authorization
dbf7d07 
Closes trustbloc#751

Signed-off-by: Andrii Holovko <[email protected]>
@aholovko aholovko mentioned this issue Sep 14, 2022
Merged
aholovko added a commit to aholovko/vcs that referenced this issue Sep 14, 2022
@aholovko
feat: add support OIDC client credential authorization
16e3467 
Closes trustbloc#751

Signed-off-by: Andrii Holovko <[email protected]>
aholovko added a commit to aholovko/vcs that referenced this issue Sep 14, 2022
@aholovko
feat: OIDC client credential authorization
b2c5dce 
Closes trustbloc#751

Signed-off-by: Andrii Holovko <[email protected]>
aholovko added a commit to aholovko/vcs that referenced this issue Sep 15, 2022
@aholovko
feat: OIDC client credential authorization
0fa6e5f 
Closes trustbloc#751

Signed-off-by: Andrii Holovko <[email protected]>
aholovko added a commit to aholovko/vcs that referenced this issue Sep 15, 2022
@aholovko
feat: OIDC client credential authorization
ef1700d 
Closes trustbloc#751

Signed-off-by: Andrii Holovko <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@aholovko aholovko

Labels
enhancement New feature or request
Projects
No open projects
TrustBloc Wallet/VCS
Status: Done
Milestone
0.1.9
Development

Successfully merging a pull request may close this issue.

feat: OIDC client credential authorization aholovko/vcs
2 participants
@aholovko @rolsonquadras