c73fdf79ff
Remove log statement
2025-05-29 09:02:29 +02:00
1d942027a9
Add system test for variable expansion
2025-05-29 09:02:29 +02:00
0023ba2a01
Add var expansion to vhost and resource access
2025-05-29 09:02:29 +02:00
ecacf0f19c
Clean up
2025-02-11 16:12:15 +01:00
3041d6c253
Support in code the old keycloak format
...
That was not keycloak format it was an
extension to the oauth spec introuduced
a few years ago. To get a token from
keycloak using this format, a.k.a.
requesting party token, one has to specify
a different claim type called
urn:ietf:params:oauth:grant-type:uma-ticket
2025-02-11 16:12:15 +01:00
1179d3a3ec
Support keycloak custom format via configuration
2025-02-11 16:12:15 +01:00
968eefa1bb
Bump (c) line year
...
There are no functional changes to this massive diff.
2025-01-01 17:54:10 -05:00
719b5564c9
Cosmetics
2024-11-28 15:55:13 -05:00
301b79c470
Type spec improvements in rabbit_auth_backend_oauth2
2024-11-28 15:51:47 -05:00
3718fe3289
Prevent change of username on token refresh
2024-11-27 10:41:28 +01:00
f1ee5b551a
Update rabbit_oauth2_schema.erl
...
(cherry picked from commit ed5f29cec8
2024-11-18 12:46:46 -05:00
0d51ee9ec0
rabbitmq-auth-backend-oauth2: correctly map additional_scopes_key
...
(cherry picked from commit 0d799a50eb
2024-11-18 12:46:40 -05:00
9893a2bd48
Merge pull request #12399 from rabbitmq/deprecate-oauth2-settings
...
Deprecate two OAuth2 settings: auth_oauth2.jwks_url and management.metadata_url
2024-10-09 11:46:58 -04:00
ee8d5f7fb0
Deprecate jwks_url but it is still supported
...
jwks_uri takes precedence when both are set
2024-10-09 11:01:09 -04:00
ebc3dea971
Minor formatting improvement
2024-10-09 10:57:38 -04:00
b966ab7b72
Configure scope_aliases also per resource_server
2024-10-09 10:57:38 -04:00
3e81cfa89d
Handle wrong scope_aliases configuration
2024-10-09 10:57:38 -04:00
48670a0ecf
Support two modes of configuring
...
scope_aliases using cuttlefish
2024-10-09 10:57:38 -04:00
a30c829ec5
Test translation function of scope_aliases
2024-10-09 10:57:38 -04:00
dcb52638ab
Minor refactoring
2024-10-09 10:57:38 -04:00
5841e37804
Fix schema translation for
...
scope_aliases
2024-10-09 10:57:38 -04:00
cd46b406df
Modify schema to include scope_aliases
...
WIP Add translation function
2024-10-09 10:57:38 -04:00
d25e0f8e88
Refactoring
...
- Use rabbit_oauth2 prefix for modules which do not have it
- Ensure most lines stick to 80 column
2024-10-08 08:17:48 +02:00
f56324e72c
Remove wrong file
2024-10-08 08:17:48 +02:00
966d5d49b1
Fix fucntion signature
2024-10-08 08:17:48 +02:00
6e74d8b60e
Always use list() type for urls
2024-10-08 08:17:48 +02:00
6d0e195957
Fix schema issues
...
And fix selenium script to run
rabbitrmq locally
2024-10-08 08:17:48 +02:00
b2532e0c1d
Modify management schema
...
to be able to set extra parameters
for authorize and token endpoints
2024-10-08 08:17:48 +02:00
eb2fbc6d9b
Improve format
2024-10-08 08:17:48 +02:00
b339714bf8
Test invalid token parameter config
2024-10-08 08:17:48 +02:00
0d4fb55cda
Remove unnecessary statement
2024-10-08 08:17:48 +02:00
5044e297d4
Add token endpoint params to schema
2024-10-08 08:17:48 +02:00
7792b70c13
Fix dialyzer errors
2024-10-08 08:17:48 +02:00
12b8c0db58
Fix all test in unit_SUITE
2024-10-08 08:17:48 +02:00
b9217aee48
Fix test cases and refactor rar and keycloak
...
functionality into their own modules
2024-10-08 08:17:48 +02:00
54ac148daf
Fix issue and test
...
WIP rename all token_validation
to normalize_token_scope
2024-10-08 08:17:48 +02:00
0f5f76677f
More test fixes + clean up + refactor
2024-10-08 08:17:48 +02:00
9ecca5ae7a
Fix test system test cases
...
And move constants to oauth2.hrl
2024-10-08 08:17:48 +02:00
c4e852116b
Fix test cases
2024-10-08 08:17:48 +02:00
8339015f80
WIP Use resource_server() type
...
check_token still needs some work
2024-10-08 08:17:48 +02:00
42a1a47b7d
Fix test cases
2024-10-08 08:17:47 +02:00
5c2b90bece
fix some test cases
2024-10-08 08:17:47 +02:00
66d9323148
Simplify module names
2024-10-08 08:17:47 +02:00
34f5d107d2
WIP fix more test cases
2024-10-08 08:17:47 +02:00
158fa3b6b1
WIP fix some test cases
...
Pending to add more scenarios whch
combine +2 resources with and without
verify_aud and with and without audience
in token
2024-10-08 08:17:47 +02:00
aecb86d56d
WIP Fix test cases
2024-10-08 08:17:47 +02:00
4576aaa32e
Refactor assertion function
2024-10-08 08:17:47 +02:00
91e46668b0
WIP Continue refactoring + clean up
2024-10-08 08:17:47 +02:00
9984eef2d1
WIP Fix compilation errors
2024-10-08 08:17:47 +02:00
7064969ca5
WIP More refactoring
...
split rabbit_oauth2_config into
- rabbit_oauth2_resource_server
- rabbit_oauth2_oauth_provider
and their respective test modules
Signing keys is an oauth provider
concern hence it stays with the
oauth_provider module.
2024-10-08 08:17:47 +02:00
Marcial Rosales
Michael Klishin
Hathoute Hamza
Hathoute
Michael Klishin
Marcial Rosales