Ralf Haferkamp
4f1aca6d90
feat(webfinger): use webfinger properties instead new relations
...
This works the previous commits so that clients can add an addtional
'platform' query parameter to the webfinger request that can be used
to query the oidc client id and list of scopes that the clients need
to use when connecting to the IDP.
This also removes the non-standard issuer relatation introduced in a
previous commit as we can just introduce new relations in the
http://openid.net name space.
For IDP like Authentik that create a separate issuer url per Client
(Application in Authentik's terms) it is suggested to just configure
as single Client and use that id for all platforms (i.e. setting
'WEBFINGER_ANDROID_OIDC_CLIENT_ID', 'WEBFINGER_DESKTOP_OIDC_CLIENT_ID',
'WEBFINGER_IOS_OIDC_CLIENT_ID' and 'WEBFINGER_WEB_OIDC_CLIENT_ID' to
same value.
Related: #2088
Related: https://github.com/opencloud-eu/desktop/issues/246
2026-02-17 10:41:35 +01:00
Ralf Haferkamp
24aaeb46ba
chore(webfinger): Simplify weird Query parameter extraction loop
2026-02-17 10:41:35 +01:00
Christian Richter
0372869b8b
refactor remaining code from urfave/cli
...
Signed-off-by: Christian Richter <c.richter@opencloud.eu >
2025-12-15 16:40:27 +01:00
Jörn Friedrich Dreyer
b07b5a1149
use plain pkg module
...
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de >
2025-01-13 16:42:19 +01:00
Jörn Friedrich Dreyer
8e028f17e9
change module name
...
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de >
2025-01-13 09:58:18 +01:00
Thomas Müller
ac951eaaae
chore: code cleanup service/webfinger
2024-04-26 11:11:10 +02:00
Thomas Müller
bdbba929d0
feat: add CSP and other security related headers in the oCIS proxy service ( #8777 )
...
* feat: add CSP and other security related headers in the oCIS proxy service
* fix: consolidate security related headers - drop middleware.Secure
* fix: use github.com/DeepDiver1975/secure
* fix: acceptance tests
* feat: support env var replacements in csp.yaml
2024-04-26 09:10:35 +02:00
Daniel Swärd
49fc22d532
Add missing tracing references to multiple services. ( #7110 )
2023-08-23 15:17:17 +02:00
Christian Richter
4a347e8c13
Fix nil pointer exception in webfinger
...
Co-authoredjby: Jörn Dreyer <jdreyer@owncloud.com >
Signed-off-by: Christian Richter <crichter@owncloud.com >
2023-04-21 16:16:26 +02:00
Jörn Friedrich Dreyer
2c98d3246c
minimal webfinger ( #5373 )
...
* initial webfinger stub
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de >
* add webfinger to proxy, return current host
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de >
* some cleanup
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de >
* allow passing multiple rel params
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de >
* introduce interfaces
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de >
* parse oidc auth token
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de >
* add templating, drop chain, use map of relation providers
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de >
* fix ocis url yaml
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de >
* fix typos
Co-authored-by: Dominik Schmidt <dschmidt@owncloud.com >
* switch to userinfo claims
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de >
* readme cleanup
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de >
* add TODO.md with ideas
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de >
* replace subject on authenticated request responses
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de >
* Apply suggestions from code review
Co-authored-by: Martin <github@diemattels.at >
* markdown lint
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de >
* return a 401 when bearer token expired, some more docs
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de >
* Apply suggestions from code review
Co-authored-by: Martin <github@diemattels.at >
* fix docs
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de >
* clarify env var
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de >
* extract handler func
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de >
* use correct service in reflex.conf
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de >
* test relations
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de >
* Update services/webfinger/pkg/config/config.go
---------
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de >
Co-authored-by: Dominik Schmidt <dschmidt@owncloud.com >
Co-authored-by: Martin <github@diemattels.at >
2023-02-13 11:05:20 +01:00
