registry/internal/api/handlers/v0/auth
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Sai Asish Y 811046c4ce
auth/oidc: support slice-typed extra claims via overlap match (#1238)
Closes #988. Direct `actualValue != expectedValue` fails when the token
claim is an array (groups, roles, scp, aud). Switch to a slice-aware
any-of overlap so OIDC list claims are validated correctly.
2026-05-04 06:24:34 -04:00
..
common.go security: fix open redirect and add small hardening (#1227) 2026-04-29 19:14:00 -04:00
common_test.go security: fix open redirect and add small hardening (#1227) 2026-04-29 19:14:00 -04:00
dns.go fix(auth): better DNS verification errors and wrong-selector hint (#1202) 2026-04-25 11:22:06 -04:00
dns_test.go security: fix open redirect and add small hardening (#1227) 2026-04-29 19:14:00 -04:00
github_at.go Replace / with - for operation IDs (#660) 2025-10-14 15:26:43 +03:00
github_at_test.go Deduplicate server JSON structs between publisher and registry (#318) 2025-08-28 14:58:15 +01:00
github_oidc.go auth: bind GitHub OIDC token exchange to a per-deployment audience (#1229) 2026-04-29 20:27:26 -04:00
github_oidc_test.go auth: bind GitHub OIDC token exchange to a per-deployment audience (#1229) 2026-04-29 20:27:26 -04:00
http.go security: fix open redirect and add small hardening (#1227) 2026-04-29 19:14:00 -04:00
http_internal_test.go security: fix open redirect and add small hardening (#1227) 2026-04-29 19:14:00 -04:00
http_test.go security: fix open redirect and add small hardening (#1227) 2026-04-29 19:14:00 -04:00
main.go Introduce v0.1 version of the API (#658) 2025-10-14 11:04:48 +03:00
none.go Replace / with - for operation IDs (#660) 2025-10-14 15:26:43 +03:00
none_test.go Changes on the server.json format and the API (#562) 2025-09-29 23:30:35 +03:00
oidc.go auth/oidc: support slice-typed extra claims via overlap match (#1238) 2026-05-04 06:24:34 -04:00
oidc_test.go Stop pinning Go to patch versions, use stable in CI (#1137) 2026-04-09 11:57:21 -04:00