feat(jans-auth-server): OpenID AuthZEN implementation #9596

yuriyz · 2024-09-25T15:51:00Z

Description

feat(jans-auth-server): OpenID AuthZEN implementation

Target issue

Test and Document the changes

Static code analysis has been run locally and issues have been fixed
Relevant unit and integration tests have been added/updated
Relevant documentation has been updated if any (i.e. user guides, installation and configuration guides, technical design docs etc)

Please check the below before submitting your PR. The PR will not be merged if there are no commits that start with docs: to indicate documentation changes or if the below checklist is not selected.

I confirm that there is no impact on the docs due to the code changes in this PR.

* fix(config-api): asset mgt endpoint fixes Signed-off-by: pujavs <[email protected]> * feat(config-api): asset upload mgt ehancement and fido Signed-off-by: pujavs <[email protected]> * feat(config-api): asset upload mgt ehancement and fido Signed-off-by: pujavs <[email protected]> * feat(config-api): asset upload mgt ehancement and fido Signed-off-by: pujavs <[email protected]> * fix(config-api): asset upload Signed-off-by: pujavs <[email protected]> * fix(config-api): lock review comments Signed-off-by: pujavs <[email protected]> * feat(config-api): lock code review comments Signed-off-by: pujavs <[email protected]> * feat(config-api): lock master renamed to lock server Signed-off-by: pujavs <[email protected]> * feat(config-api): lock master renamed to lock server Signed-off-by: pujavs <[email protected]> * feat(config-api): lock master renamed to lock server Signed-off-by: pujavs <[email protected]> * feat(config-api): lock master renamed to lock server Signed-off-by: pujavs <[email protected]> * feat(config-api): fido2 delete functionality Signed-off-by: pujavs <[email protected]> * fix(config-api): acr validation Signed-off-by: pujavs <[email protected]> * feat(config-api): doc(config-api): IDP schema attribute descriptions #9187 Signed-off-by: pujavs <[email protected]> * feat(config-api): sync with main Signed-off-by: pujavs <[email protected]> * feat(config-api): uploading assets via API generates 2 entries #9178 Signed-off-by: pujavs <[email protected]> * feat(config-api): asset mgt, fido and IDP changes Signed-off-by: pujavs <[email protected]> * feat(config-api): fido2 device endpoint Signed-off-by: pujavs <[email protected]> * feat(config-api): fido2 endpoint Signed-off-by: pujavs <[email protected]> * feat(config-api): fido2 endpoint Signed-off-by: pujavs <[email protected]> * feat(config-api): sync with main Signed-off-by: pujavs <[email protected]> * feat(config-api): sync with main Signed-off-by: pujavs <[email protected]> * feat(config-api): sync with main Signed-off-by: pujavs <[email protected]> * feat(config-api): resolved sonar review issues Signed-off-by: pujavs <[email protected]> * feat(config-api): sonar review comment fix Signed-off-by: pujavs <[email protected]> * feat(config-api): swagger spec Signed-off-by: pujavs <[email protected]> * feat(config-api): saml config attribute description Signed-off-by: pujavs <[email protected]> * doc(config-api): added SAML attribute description Signed-off-by: pujavs <[email protected]> * doc(config-api): added SAML attribute description Signed-off-by: pujavs <[email protected]> * feat(config-api): sync with main Signed-off-by: pujavs <[email protected]> * fix(jans-lock): code review comment fix isssue#9305 Signed-off-by: pujavs <[email protected]> * fix(jans-lock): code review comment fix isssue#9305 Signed-off-by: pujavs <[email protected]> * feat(config-api): lock review point Signed-off-by: pujavs <[email protected]> * fix(lock): code review comment Signed-off-by: pujavs <[email protected]> * fix(lock): code review comment Signed-off-by: pujavs <[email protected]> * fix(config-api): sync with main Signed-off-by: pujavs <[email protected]> * feat(config-api): lock endpoint fixes and SAML IDP NPE Signed-off-by: pujavs <[email protected]> --------- Signed-off-by: pujavs <[email protected]> Co-authored-by: YuriyZ <[email protected]>

* Initializing branch for Cedarling MVP Signed-off-by: Arnab Dutta <[email protected]> * rust demo code without connect to python * cargo improvements * fix format rule * add to gitignore files that is used in debug process * add parsing roles from token and it mapping * remove unused text in readme * added guide how to build * add python binding * python example hotfix * make Id in python example more illustrative * update to make tokens field jti optional * fix readme file * feat: store the sample policy stores in demo folder #9373 Signed-off-by: Arnab Dutta <[email protected]> * rename role mapper to token mapper * add loading policy store from file or json * show in example that we can use setter * use single quote for action in python example * update python bindings to use object Request * add readme to demo data folder * updated README.md * update cedarling_python/README.md --------- Signed-off-by: Arnab Dutta <[email protected]> Co-authored-by: Arnab Dutta <[email protected]> Co-authored-by: Mohammad Abudayyeh <[email protected]>

…on backends (#9389) * feat(jans-pycloudlib): handle required files for external configuration backends Signed-off-by: iromli <[email protected]> * feat(jans-pycloudlib): populate google credentials if using spanner persistence Signed-off-by: iromli <[email protected]> * fix(jans-pycloudlib): resolve broken dependency for google-cloud-secret-manager lib Signed-off-by: iromli <[email protected]> --------- Signed-off-by: iromli <[email protected]> Co-authored-by: Mohammad Abudayyeh <[email protected]>

…9395) user in session Signed-off-by: Yuriy Movchan <[email protected]>

Signed-off-by: Mustafa Baser <[email protected]>

…9398) * feat(jans-core): add jansFilePath to document store Signed-off-by: Yuriy Movchan <[email protected]> * feat(jans-core): set filePath and fileName from imput path * feat(config-api): asset mgt changes to store filePath in separate field Signed-off-by: pujavs <[email protected]> --------- Signed-off-by: Yuriy Movchan <[email protected]> Signed-off-by: pujavs <[email protected]> Co-authored-by: pujavs <[email protected]>

* fix: high CPU usage on opening tarp #9390 Signed-off-by: Arnab Dutta <[email protected]> * feat: resolving review comments Signed-off-by: Arnab Dutta <[email protected]> * feat: correct comments Signed-off-by: Arnab Dutta <[email protected]> --------- Signed-off-by: Arnab Dutta <[email protected]>

* chore: include missing files #9407 Signed-off-by: jgomer2001 <[email protected]> * fix: update configuration #8407 Signed-off-by: jgomer2001 <[email protected]> * chore: improve device sweeping logic #8847 Signed-off-by: jgomer2001 <[email protected]> * chore: polish plugin life-cycle handlers #9407 Signed-off-by: jgomer2001 <[email protected]> --------- Signed-off-by: jgomer2001 <[email protected]> Co-authored-by: Mohammad Abudayyeh <[email protected]>

* chore(cloud-native): sync assets into OCI images Signed-off-by: iromli <[email protected]> * feat(cloud-native): sync google credentials (if applicable) Signed-off-by: iromli <[email protected]> --------- Signed-off-by: iromli <[email protected]> Co-authored-by: Mohammad Abudayyeh <[email protected]>

Signed-off-by: Mustafa Baser <[email protected]>

…onfig-api (#9417) * fix(config-api): asset mgt endpoint fixes Signed-off-by: pujavs <[email protected]> * feat(config-api): asset upload mgt ehancement and fido Signed-off-by: pujavs <[email protected]> * feat(config-api): asset upload mgt ehancement and fido Signed-off-by: pujavs <[email protected]> * feat(config-api): asset upload mgt ehancement and fido Signed-off-by: pujavs <[email protected]> * fix(config-api): asset upload Signed-off-by: pujavs <[email protected]> * fix(config-api): lock review comments Signed-off-by: pujavs <[email protected]> * feat(config-api): lock code review comments Signed-off-by: pujavs <[email protected]> * feat(config-api): lock master renamed to lock server Signed-off-by: pujavs <[email protected]> * feat(config-api): lock master renamed to lock server Signed-off-by: pujavs <[email protected]> * feat(config-api): lock master renamed to lock server Signed-off-by: pujavs <[email protected]> * feat(config-api): lock master renamed to lock server Signed-off-by: pujavs <[email protected]> * feat(config-api): fido2 delete functionality Signed-off-by: pujavs <[email protected]> * fix(config-api): acr validation Signed-off-by: pujavs <[email protected]> * feat(config-api): doc(config-api): IDP schema attribute descriptions #9187 Signed-off-by: pujavs <[email protected]> * feat(config-api): sync with main Signed-off-by: pujavs <[email protected]> * feat(config-api): uploading assets via API generates 2 entries #9178 Signed-off-by: pujavs <[email protected]> * feat(config-api): asset mgt, fido and IDP changes Signed-off-by: pujavs <[email protected]> * feat(config-api): fido2 device endpoint Signed-off-by: pujavs <[email protected]> * feat(config-api): fido2 endpoint Signed-off-by: pujavs <[email protected]> * feat(config-api): fido2 endpoint Signed-off-by: pujavs <[email protected]> * feat(config-api): sync with main Signed-off-by: pujavs <[email protected]> * feat(config-api): sync with main Signed-off-by: pujavs <[email protected]> * feat(config-api): sync with main Signed-off-by: pujavs <[email protected]> * feat(config-api): resolved sonar review issues Signed-off-by: pujavs <[email protected]> * feat(config-api): sonar review comment fix Signed-off-by: pujavs <[email protected]> * feat(config-api): swagger spec Signed-off-by: pujavs <[email protected]> * feat(config-api): saml config attribute description Signed-off-by: pujavs <[email protected]> * doc(config-api): added SAML attribute description Signed-off-by: pujavs <[email protected]> * doc(config-api): added SAML attribute description Signed-off-by: pujavs <[email protected]> * feat(config-api): sync with main Signed-off-by: pujavs <[email protected]> * fix(jans-lock): code review comment fix isssue#9305 Signed-off-by: pujavs <[email protected]> * fix(jans-lock): code review comment fix isssue#9305 Signed-off-by: pujavs <[email protected]> * feat(config-api): lock review point Signed-off-by: pujavs <[email protected]> * fix(lock): code review comment Signed-off-by: pujavs <[email protected]> * fix(lock): code review comment Signed-off-by: pujavs <[email protected]> * fix(config-api): sync with main Signed-off-by: pujavs <[email protected]> * feat(config-api): lock endpoint fixes and SAML IDP NPE Signed-off-by: pujavs <[email protected]> * feat(config-api): asset enhancement Signed-off-by: pujavs <[email protected]> * feat(config-api): implement timer for asset mgt to fetch and deploy assets forconfig-api #9403 Signed-off-by: pujavs <[email protected]> --------- Signed-off-by: pujavs <[email protected]>

* fix(config-api): asset mgt endpoint fixes Signed-off-by: pujavs <[email protected]> * feat(config-api): asset upload mgt ehancement and fido Signed-off-by: pujavs <[email protected]> * feat(config-api): asset upload mgt ehancement and fido Signed-off-by: pujavs <[email protected]> * feat(config-api): asset upload mgt ehancement and fido Signed-off-by: pujavs <[email protected]> * fix(config-api): asset upload Signed-off-by: pujavs <[email protected]> * fix(config-api): lock review comments Signed-off-by: pujavs <[email protected]> * feat(config-api): lock code review comments Signed-off-by: pujavs <[email protected]> * feat(config-api): lock master renamed to lock server Signed-off-by: pujavs <[email protected]> * feat(config-api): lock master renamed to lock server Signed-off-by: pujavs <[email protected]> * feat(config-api): lock master renamed to lock server Signed-off-by: pujavs <[email protected]> * feat(config-api): lock master renamed to lock server Signed-off-by: pujavs <[email protected]> * feat(config-api): fido2 delete functionality Signed-off-by: pujavs <[email protected]> * fix(config-api): acr validation Signed-off-by: pujavs <[email protected]> * feat(config-api): doc(config-api): IDP schema attribute descriptions #9187 Signed-off-by: pujavs <[email protected]> * feat(config-api): sync with main Signed-off-by: pujavs <[email protected]> * feat(config-api): uploading assets via API generates 2 entries #9178 Signed-off-by: pujavs <[email protected]> * feat(config-api): asset mgt, fido and IDP changes Signed-off-by: pujavs <[email protected]> * feat(config-api): fido2 device endpoint Signed-off-by: pujavs <[email protected]> * feat(config-api): fido2 endpoint Signed-off-by: pujavs <[email protected]> * feat(config-api): fido2 endpoint Signed-off-by: pujavs <[email protected]> * feat(config-api): sync with main Signed-off-by: pujavs <[email protected]> * feat(config-api): sync with main Signed-off-by: pujavs <[email protected]> * feat(config-api): sync with main Signed-off-by: pujavs <[email protected]> * feat(config-api): resolved sonar review issues Signed-off-by: pujavs <[email protected]> * feat(config-api): sonar review comment fix Signed-off-by: pujavs <[email protected]> * feat(config-api): swagger spec Signed-off-by: pujavs <[email protected]> * feat(config-api): saml config attribute description Signed-off-by: pujavs <[email protected]> * doc(config-api): added SAML attribute description Signed-off-by: pujavs <[email protected]> * doc(config-api): added SAML attribute description Signed-off-by: pujavs <[email protected]> * feat(config-api): sync with main Signed-off-by: pujavs <[email protected]> * fix(jans-lock): code review comment fix isssue#9305 Signed-off-by: pujavs <[email protected]> * fix(jans-lock): code review comment fix isssue#9305 Signed-off-by: pujavs <[email protected]> * feat(config-api): lock review point Signed-off-by: pujavs <[email protected]> * fix(lock): code review comment Signed-off-by: pujavs <[email protected]> * fix(lock): code review comment Signed-off-by: pujavs <[email protected]> * fix(config-api): sync with main Signed-off-by: pujavs <[email protected]> * feat(config-api): lock endpoint fixes and SAML IDP NPE Signed-off-by: pujavs <[email protected]> * feat(config-api): asset enhancement Signed-off-by: pujavs <[email protected]> * feat(config-api): implement timer for asset mgt to fetch and deploy assets forconfig-api #9403 Signed-off-by: pujavs <[email protected]> * fix(config-api): scope validation issue #9426 Signed-off-by: pujavs <[email protected]> --------- Signed-off-by: pujavs <[email protected]>

Signed-off-by: Mohammad Abudayyeh <[email protected]>

* chore(jans-cedarling): rebase from main after cedarling_mvp branch deletion The cedarling_mvp branch was merged and subsequently deleted. This commit rebases the current changes from the main branch to keep the branch up to date. list of rebased commits: rust demo code without connect to python cargo improvements fix format rule add to gitignore files that is used in debug process add parsing roles from token and it mapping remove unused text in readme added guide how to build add python binding python example hotfix make Id in python example more illustrative update to make tokens field jti optional fix readme file feat: store the sample policy stores in demo folder #9373 Signed-off-by: Arnab Dutta <[email protected]> rename role mapper to token mapper add loading policy store from file or json show in example that we can use setter use single quote for action in python example update python bindings to use object Request added crate init_engine refactor authz, move some parts to init_engine added skip check clippy::enum_variant_names Signed-off-by: Oleh Bohzok <[email protected]> * chore: delete Readme.md For some reason my git client start but out. Signed-off-by: Oleh Bohzok <[email protected]> * chore(chedarling) rename PolicyStoreEntry to PolicyStore Signed-off-by: Oleh Bohzok <[email protected]> * feat(cedarling): added load PolicyStore from file and URI also updated the python binding. also renamed the enum PolicyStoreConfig::LocalJson to JsonRaw Signed-off-by: Oleh Bohzok <[email protected]> * docs(cedarling-python): added section Classes and Methods in python library Signed-off-by: Oleh Bohzok <[email protected]> * docs(cedarling): added to python binding documentation example how to init PolicyStore using methods: - from_raw_json - from_filepath - from_remote_uri Signed-off-by: Oleh Bohzok <[email protected]> * docs(cedarling): added to python binding documentation notice that for windows we no need to install maturin[patchelf] Signed-off-by: Oleh Bohzok <[email protected]> * docs(cedarling): added example how to extract the "role" claim from the userinfo token Signed-off-by: Oleh Bohzok <[email protected]> * docs(cedarling): added note that we should see `cedarling_python` listed among the available packages. Signed-off-by: Oleh Bohzok <[email protected]> * doc(cedarling): added note that user on linux maybe need to install build-essential for cedarling_python Signed-off-by: Oleh Bohzok <[email protected]> --------- Signed-off-by: Oleh Bohzok <[email protected]> Co-authored-by: Mohammad Abudayyeh <[email protected]>

Signed-off-by: Mustafa Baser <[email protected]>

* fix(jans-cli-tui): hide Messages configuration page Signed-off-by: Mustafa Baser <[email protected]> * docs(jans-cli-tui): hide messages configuration in documents Signed-off-by: Mustafa Baser <[email protected]> --------- Signed-off-by: Mustafa Baser <[email protected]>

Signed-off-by: YuriyZ <[email protected]>

* feat(jans-cli-tui): deploy Agama Lab community projects Signed-off-by: Mustafa Baser <[email protected]> * fix(jans-cli-tui): typo Signed-off-by: Mustafa Baser <[email protected]> * fix(jans-cli-tui): typo Signed-off-by: Mustafa Baser <[email protected]> * feat(jans-cli-tui): display agama project url after deployment Signed-off-by: Mustafa Baser <[email protected]> * fix(jans-cli-tui): rename agama upload project button Signed-off-by: Mustafa Baser <[email protected]> * fix(jans-cli-tui): typo Signed-off-by: Mustafa Baser <[email protected]> * fix(jans-cli-tui): typo Signed-off-by: Mustafa Baser <[email protected]> * chore(jans-cli-tui): agama display options in dialog Signed-off-by: Mustafa Baser <[email protected]> * docs(jans-cli-tui): update agama deployment docs for online deployment Signed-off-by: Mustafa Baser <[email protected]> --------- Signed-off-by: Mustafa Baser <[email protected]>

* fix(config-api): asset mgt endpoint fixes Signed-off-by: pujavs <[email protected]> * feat(config-api): asset upload mgt ehancement and fido Signed-off-by: pujavs <[email protected]> * feat(config-api): asset upload mgt ehancement and fido Signed-off-by: pujavs <[email protected]> * feat(config-api): asset upload mgt ehancement and fido Signed-off-by: pujavs <[email protected]> * fix(config-api): asset upload Signed-off-by: pujavs <[email protected]> * fix(config-api): lock review comments Signed-off-by: pujavs <[email protected]> * feat(config-api): lock code review comments Signed-off-by: pujavs <[email protected]> * feat(config-api): lock master renamed to lock server Signed-off-by: pujavs <[email protected]> * feat(config-api): lock master renamed to lock server Signed-off-by: pujavs <[email protected]> * feat(config-api): lock master renamed to lock server Signed-off-by: pujavs <[email protected]> * feat(config-api): lock master renamed to lock server Signed-off-by: pujavs <[email protected]> * feat(config-api): fido2 delete functionality Signed-off-by: pujavs <[email protected]> * fix(config-api): acr validation Signed-off-by: pujavs <[email protected]> * feat(config-api): doc(config-api): IDP schema attribute descriptions #9187 Signed-off-by: pujavs <[email protected]> * feat(config-api): sync with main Signed-off-by: pujavs <[email protected]> * feat(config-api): uploading assets via API generates 2 entries #9178 Signed-off-by: pujavs <[email protected]> * feat(config-api): asset mgt, fido and IDP changes Signed-off-by: pujavs <[email protected]> * feat(config-api): fido2 device endpoint Signed-off-by: pujavs <[email protected]> * feat(config-api): fido2 endpoint Signed-off-by: pujavs <[email protected]> * feat(config-api): fido2 endpoint Signed-off-by: pujavs <[email protected]> * feat(config-api): sync with main Signed-off-by: pujavs <[email protected]> * feat(config-api): sync with main Signed-off-by: pujavs <[email protected]> * feat(config-api): sync with main Signed-off-by: pujavs <[email protected]> * feat(config-api): resolved sonar review issues Signed-off-by: pujavs <[email protected]> * feat(config-api): sonar review comment fix Signed-off-by: pujavs <[email protected]> * feat(config-api): swagger spec Signed-off-by: pujavs <[email protected]> * feat(config-api): saml config attribute description Signed-off-by: pujavs <[email protected]> * doc(config-api): added SAML attribute description Signed-off-by: pujavs <[email protected]> * doc(config-api): added SAML attribute description Signed-off-by: pujavs <[email protected]> * feat(config-api): sync with main Signed-off-by: pujavs <[email protected]> * fix(jans-lock): code review comment fix isssue#9305 Signed-off-by: pujavs <[email protected]> * fix(jans-lock): code review comment fix isssue#9305 Signed-off-by: pujavs <[email protected]> * feat(config-api): lock review point Signed-off-by: pujavs <[email protected]> * fix(lock): code review comment Signed-off-by: pujavs <[email protected]> * fix(lock): code review comment Signed-off-by: pujavs <[email protected]> * fix(config-api): sync with main Signed-off-by: pujavs <[email protected]> * feat(config-api): lock endpoint fixes and SAML IDP NPE Signed-off-by: pujavs <[email protected]> * feat(config-api): asset enhancement Signed-off-by: pujavs <[email protected]> * feat(config-api): implement timer for asset mgt to fetch and deploy assets forconfig-api #9403 Signed-off-by: pujavs <[email protected]> * fix(config-api): scope validation issue #9426 Signed-off-by: pujavs <[email protected]> * fix(config-api): asset delete error fix Signed-off-by: pujavs <[email protected]> --------- Signed-off-by: pujavs <[email protected]>

fix: update wrong clause #9181 Signed-off-by: jgomer2001 <[email protected]>

* feat: allow specifying scopes during execution of authz url Signed-off-by: Arnab Dutta <[email protected]> * feat: allow specifying scopes during execution of authz url Signed-off-by: Arnab Dutta <[email protected]> * feat: code fix Signed-off-by: Arnab Dutta <[email protected]> --------- Signed-off-by: Arnab Dutta <[email protected]> Co-authored-by: Mohammad Abudayyeh <[email protected]>

…ry date input while register new OIDC client (#9451) fix:Next Month Arrow is Hidden in calender of client expiry date input while register new OIDC client Signed-off-by: Jatin Mehta <[email protected]> Co-authored-by: Mohammad Abudayyeh <[email protected]>

* fix(jans-linux-setup): jans ldap link server Signed-off-by: Mustafa Baser <[email protected]> * docs(jans-linux-setup): jans ldap link server Signed-off-by: Mustafa Baser <[email protected]> * fix(jans-linux-setup): ldap link server arg and var name fixes Signed-off-by: Mustafa Baser <[email protected]> --------- Signed-off-by: Mustafa Baser <[email protected]>

…crChangedException #9374 (#9458) * fix(jans-auth-server): when arc is changed to agama flow fails with AcrChangedException #9374 Signed-off-by: YuriyZ <[email protected]> * removed debug line Signed-off-by: YuriyZ <[email protected]> --------- Signed-off-by: YuriyZ <[email protected]>

* fix(jans-cli-tui): asset fileName Signed-off-by: Mustafa Baser <[email protected]> * fix(jans-cli-tui): don't ask file name when editing asset Signed-off-by: Mustafa Baser <[email protected]> * docs(jans-cli-tui): update assets docs Signed-off-by: Mustafa Baser <[email protected]> * fix(jans-cli-tui): allow re-upload asset when edtiting Signed-off-by: Mustafa Baser <[email protected]> * fix(jans-cli-tui): asset service Signed-off-by: Mustafa Baser <[email protected]> * fix(jans-cli-tui): focus if deletation error popup raises in asset Signed-off-by: Mustafa Baser <[email protected]> --------- Signed-off-by: Mustafa Baser <[email protected]>

* fix(jans-linux-setup): ruamel.yaml fixes Signed-off-by: Mustafa Baser <[email protected]> * fix(jans-cli-tui): newest ruamel.yaml compatibility Signed-off-by: Mustafa Baser <[email protected]> --------- Signed-off-by: Mustafa Baser <[email protected]>

) * docs(scim): updated user management Signed-off-by: Mobarak Hosen Shakil <[email protected]> * docs(scim): updated group management Signed-off-by: Mobarak Hosen Shakil <[email protected]> * docs(scim): removed auto created jans-chip .gradle files Signed-off-by: Mobarak Hosen Shakil <[email protected]> --------- Signed-off-by: Mobarak Hosen Shakil <[email protected]> Co-authored-by: Dhaval D <[email protected]>

* fix(jans-cli-tui): scim patch operation Signed-off-by: Mustafa Baser <[email protected]> * docs(jans-cli-tui): scim user patch Signed-off-by: Mustafa Baser <[email protected]> * fix(jans-cli-tui): sample PatchRequest for scim Signed-off-by: Mustafa Baser <[email protected]> --------- Signed-off-by: Mustafa Baser <[email protected]>

…9473) * fix(config-api): asset mgt endpoint fixes Signed-off-by: pujavs <[email protected]> * feat(config-api): asset upload mgt ehancement and fido Signed-off-by: pujavs <[email protected]> * feat(config-api): asset upload mgt ehancement and fido Signed-off-by: pujavs <[email protected]> * feat(config-api): asset upload mgt ehancement and fido Signed-off-by: pujavs <[email protected]> * fix(config-api): asset upload Signed-off-by: pujavs <[email protected]> * fix(config-api): lock review comments Signed-off-by: pujavs <[email protected]> * feat(config-api): lock code review comments Signed-off-by: pujavs <[email protected]> * feat(config-api): lock master renamed to lock server Signed-off-by: pujavs <[email protected]> * feat(config-api): lock master renamed to lock server Signed-off-by: pujavs <[email protected]> * feat(config-api): lock master renamed to lock server Signed-off-by: pujavs <[email protected]> * feat(config-api): lock master renamed to lock server Signed-off-by: pujavs <[email protected]> * feat(config-api): fido2 delete functionality Signed-off-by: pujavs <[email protected]> * fix(config-api): acr validation Signed-off-by: pujavs <[email protected]> * feat(config-api): doc(config-api): IDP schema attribute descriptions #9187 Signed-off-by: pujavs <[email protected]> * feat(config-api): sync with main Signed-off-by: pujavs <[email protected]> * feat(config-api): uploading assets via API generates 2 entries #9178 Signed-off-by: pujavs <[email protected]> * feat(config-api): asset mgt, fido and IDP changes Signed-off-by: pujavs <[email protected]> * feat(config-api): fido2 device endpoint Signed-off-by: pujavs <[email protected]> * feat(config-api): fido2 endpoint Signed-off-by: pujavs <[email protected]> * feat(config-api): fido2 endpoint Signed-off-by: pujavs <[email protected]> * feat(config-api): sync with main Signed-off-by: pujavs <[email protected]> * feat(config-api): sync with main Signed-off-by: pujavs <[email protected]> * feat(config-api): sync with main Signed-off-by: pujavs <[email protected]> * feat(config-api): resolved sonar review issues Signed-off-by: pujavs <[email protected]> * feat(config-api): sonar review comment fix Signed-off-by: pujavs <[email protected]> * feat(config-api): swagger spec Signed-off-by: pujavs <[email protected]> * feat(config-api): saml config attribute description Signed-off-by: pujavs <[email protected]> * doc(config-api): added SAML attribute description Signed-off-by: pujavs <[email protected]> * doc(config-api): added SAML attribute description Signed-off-by: pujavs <[email protected]> * feat(config-api): sync with main Signed-off-by: pujavs <[email protected]> * fix(jans-lock): code review comment fix isssue#9305 Signed-off-by: pujavs <[email protected]> * fix(jans-lock): code review comment fix isssue#9305 Signed-off-by: pujavs <[email protected]> * feat(config-api): lock review point Signed-off-by: pujavs <[email protected]> * fix(lock): code review comment Signed-off-by: pujavs <[email protected]> * fix(lock): code review comment Signed-off-by: pujavs <[email protected]> * fix(config-api): sync with main Signed-off-by: pujavs <[email protected]> * feat(config-api): lock endpoint fixes and SAML IDP NPE Signed-off-by: pujavs <[email protected]> * feat(config-api): asset enhancement Signed-off-by: pujavs <[email protected]> * feat(config-api): implement timer for asset mgt to fetch and deploy assets forconfig-api #9403 Signed-off-by: pujavs <[email protected]> * fix(config-api): scope validation issue #9426 Signed-off-by: pujavs <[email protected]> * fix(config-api): asset delete error fix Signed-off-by: pujavs <[email protected]> * feat(config-api): sysnc with main Signed-off-by: pujavs <[email protected]> * fix(config-ap): lock audit endpoint parameter declaration error#9460 Signed-off-by: pujavs <[email protected]> --------- Signed-off-by: pujavs <[email protected]>

Signed-off-by: YuriyZ <[email protected]>

sonarqubecloud · 2024-11-19T09:11:13Z

Quality Gate passed for 'agama parent'

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

sonarqubecloud · 2024-11-19T09:11:43Z

Quality Gate passed for 'jans-cli'

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

sonarqubecloud · 2024-11-19T09:20:20Z

Quality Gate passed for 'Jans-Keycloak-Link'

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

sonarqubecloud · 2024-11-19T09:21:03Z

Quality Gate passed for 'Fido2 API'

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

sonarqubecloud · 2024-11-19T09:21:08Z

Quality Gate passed for 'keycloak-integration-parent'

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

sonarqubecloud · 2024-11-19T09:25:04Z

Quality Gate passed for 'jans-pycloudlib'

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

sonarqubecloud · 2024-11-19T16:02:03Z

Quality Gate passed for 'jans-config-api-parent'

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

yuriyz · 2024-11-19T17:51:11Z

Closed in favor of #10197
We had to get rid of unsigned commits after git history clean up.

sonarqubecloud · 2024-11-19T23:21:35Z

Quality Gate passed for 'jans-core'

Issues
6 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

sonarqubecloud · 2024-11-19T23:32:20Z

Quality Gate passed for 'jans-linux-setup'

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

sonarqubecloud · 2024-11-19T23:36:03Z

Quality Gate passed for 'orm'

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

sonarqubecloud · 2024-11-19T23:37:22Z

Quality Gate passed for 'SCIM API'

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

pujavs and others added 30 commits September 5, 2024 22:39

feat(jans-auth): add warn to check if server can't set authenticated (#…

fc87b08

…9395) user in session Signed-off-by: Yuriy Movchan <[email protected]>

chore(jans-linux-setup): restart jans services in post-setup (#9400)

314f247

Signed-off-by: Mustafa Baser <[email protected]>

fix(jans-cli-tui): re-order feed and background task messages (#9418)

2a7c0da

Signed-off-by: Mustafa Baser <[email protected]>

fix(jans-linux-setup): suse setup issues (#9401)

3702661

Signed-off-by: Mustafa Baser <[email protected]>

docs: fix mysql-ops command order (#9416)

297bdc0

Signed-off-by: Mohammad Abudayyeh <[email protected]>

fix(jans-cli-tui): populate config-api widgets when page entered (#9436)

19e770a

Signed-off-by: Mustafa Baser <[email protected]>

doc(jans-auth-server): improved doc for acr aliasing #9438 (#9439)

8606bbc

Signed-off-by: YuriyZ <[email protected]>

fix: update wrong clause (#9454)

9ec8afc

fix: update wrong clause #9181 Signed-off-by: jgomer2001 <[email protected]>

yuriyz added 4 commits November 15, 2024 14:41

AuthZEN - added new /evaluation endpoint to swagger

402684c

Signed-off-by: YuriyZ <[email protected]>

AuthZEN - docs update

4258709

Signed-off-by: YuriyZ <[email protected]>

AuthZEN - added documentation for AccessEvaluation custom script

058ad77

Signed-off-by: YuriyZ <[email protected]>

AuthZEN - added full documentation

a94ed03

Signed-off-by: YuriyZ <[email protected]>

yuriyz marked this pull request as ready for review November 19, 2024 09:00

yuriyz requested a review from devrimyatar as a code owner November 19, 2024 09:00

merged main

d5748aa

Signed-off-by: YuriyZ <[email protected]>

yuriyzz approved these changes Nov 19, 2024

View reviewed changes

yurem approved these changes Nov 19, 2024

View reviewed changes

yuriyz enabled auto-merge (squash) November 19, 2024 14:42

devrimyatar approved these changes Nov 19, 2024

View reviewed changes

Merge branch 'main' into jans-auth-server-9557

e778676

moabu added 2 commits November 19, 2024 19:44

Merge branch 'main' into jans-auth-server-9557

a8ed01b

Merge branch 'main' into jans-auth-server-9557

7eab464

yuriyz closed this Nov 19, 2024

auto-merge was automatically disabled November 19, 2024 17:51
Pull request was closed

moabu deleted the jans-auth-server-9557 branch November 20, 2024 03:30

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat(jans-auth-server): OpenID AuthZEN implementation #9596

feat(jans-auth-server): OpenID AuthZEN implementation #9596

yuriyz commented Sep 25, 2024

sonarqubecloud bot commented Nov 19, 2024

sonarqubecloud bot commented Nov 19, 2024

sonarqubecloud bot commented Nov 19, 2024

sonarqubecloud bot commented Nov 19, 2024

sonarqubecloud bot commented Nov 19, 2024

sonarqubecloud bot commented Nov 19, 2024

sonarqubecloud bot commented Nov 19, 2024

yuriyz commented Nov 19, 2024

sonarqubecloud bot commented Nov 19, 2024

sonarqubecloud bot commented Nov 19, 2024

sonarqubecloud bot commented Nov 19, 2024

sonarqubecloud bot commented Nov 19, 2024

feat(jans-auth-server): OpenID AuthZEN implementation #9596

feat(jans-auth-server): OpenID AuthZEN implementation #9596

Conversation

yuriyz commented Sep 25, 2024

Description

Target issue

Test and Document the changes

sonarqubecloud bot commented Nov 19, 2024

Quality Gate passed for 'agama parent'

sonarqubecloud bot commented Nov 19, 2024

Quality Gate passed for 'jans-cli'

sonarqubecloud bot commented Nov 19, 2024

Quality Gate passed for 'Jans-Keycloak-Link'

sonarqubecloud bot commented Nov 19, 2024

Quality Gate passed for 'Fido2 API'

sonarqubecloud bot commented Nov 19, 2024

Quality Gate passed for 'keycloak-integration-parent'

sonarqubecloud bot commented Nov 19, 2024

Quality Gate passed for 'jans-pycloudlib'

sonarqubecloud bot commented Nov 19, 2024

Quality Gate passed for 'jans-config-api-parent'

yuriyz commented Nov 19, 2024

sonarqubecloud bot commented Nov 19, 2024

Quality Gate passed for 'jans-core'

sonarqubecloud bot commented Nov 19, 2024

Quality Gate passed for 'jans-linux-setup'

sonarqubecloud bot commented Nov 19, 2024

Quality Gate passed for 'orm'

sonarqubecloud bot commented Nov 19, 2024

Quality Gate passed for 'SCIM API'