Commit Graph
8 Commits
Author SHA1 Message Date
Elim Tsiagbey 9e30a68a61 feat(oidc): OIDC Prompt Support (#519)
* feat(oidc): OIDC Prompt Support

Boundary OIDC method does not currently support passing in prompts during authentication. This change adds the capability of passing OIDC prompts. Prompts are optional OIDC parameters that determine the behaviour of the authentication server: https://openid.net/specs/openid-connect-core-1_0.html#AuthRequest

Add new optional `prompts` option to `boundary_auth_method_oidc` resource. `prompts` option are optional OIDC parameters that determine the behavior of the authentication server.
2023-12-13 16:05:01 -05:00
Elim Tsiagbey 83826aa866 fix: default auth method with recovery kms (#406)
* add test coverage for authenticating with recovery kms mechanism & oidc primary auth method

* Skip fetching default auth method when recovery_kms_hcl is set or the client token isn't null
2023-05-12 10:56:58 -04:00
Michael Milton 01d322b933 fix: Allow users to set OIDC maxAge value to 0 to require immediate reauth (#364)
* fix: Allow users to set OIDC maxAge value to 0 to require immediate reauth

Previously, setting 0 as a value for maxAge in an OIDC resource block would not update Boundary, as it was getting treated as a nil value in the provider.
This fix addresses that issue, ensuring that both setting the value to 0 will require immediate reauthorisation, as well as removing the maxAge paramater defaulting the reauth time length to the TTL of the chose OIDC provider

* Update doc strings, fix imports, and run go generate

* add changes to CHANGELOG
2023-03-22 14:52:27 -04:00
Jim dcd10c1949 feature: add LDAP auth-method, accounts and managed groups support (#325)
* chore: point to boundary ldap bits

* refactor (test): common auth method test funcs

* chore (deps): add gldap for test ldap directory

* feature: add LDAP auth-method, accounts and managed groups support
2023-03-15 14:30:06 -04:00
hashicorp-copywrite[bot] f9819533db [COMPLIANCE] Add Copyright and License Headers (#312)
Co-authored-by: hashicorp-copywrite[bot] <110428419+hashicorp-copywrite[bot]@users.noreply.github.com>
2023-01-03 17:19:20 -05:00
Jeff Malnick 1c1e593eab feat: add claim scopes attribute 2021-05-25 13:14:02 -07:00
Jeff Malnick 8bfac9f6fa feat: add account claim maps for OIDC auth method resource 2021-05-24 10:03:55 -07:00
Jeff Malnick 3d42195a26 Add OIDC auth method and account resource (#105)
add OIDC auth method and account resources
2021-05-05 08:33:15 -07:00