Jim
f7aad2e0c8
add a new oidc key+ key version for encrypting oidc state payloads returned in auth URLs. ( #884 )
2021-01-26 14:37:10 -05:00
Louis Ruch
8151b30ce9
ICU-743/Domain errors internal/kms refactor ( #848 )
...
* Domain errors internal/kms refactor
* Update changelog
* Update internal/host error op
* Incorrect error returned in read_writer
2021-01-12 08:50:19 -08:00
Jeff Mitchell
84c617dc49
Run make gen after the gofumpt update
2021-01-08 10:32:02 -05:00
Michael Gaffney and Jeff Mitchell
94cb79bbdd
See how Boundary would look with gofumpt applied ( #853 )
...
* See how Boundary would look with https://github.com/mvdan/gofumpt applied
Results of running `gofumpt -w -s .`
* Update tools file and Makefile for gofumpt
Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com >
2021-01-07 10:02:32 -05:00
Louis Ruch
4e31fdb10e
Swap assert.Eqaul actual/expected ( #849 )
2021-01-05 17:34:04 -08:00
Louis Ruch
bfbb179741
ICU-738/Refactor internal/db to domain errors ( #815 )
...
* Refactor internal/db to domain errors
2020-12-21 10:07:34 -08:00
Jeff Mitchell
11b821a200
Bump deps ( #818 )
2020-12-15 14:56:41 -05:00
Jim
af6ef1b687
Refactor existing sentinel errors ( #774 )
2020-11-05 16:54:03 -05:00
Jim
96e4b1cdba
add option db.WithSkipVetForWrite(true) so the db tests don't get intercepted by app validation ( #332 )
2020-09-07 13:20:49 -04:00
Jeff Mitchell
23156afa11
Add in most of the proxy flow ( #326 )
2020-09-03 13:24:34 -04:00
Jeff Mitchell
1822c47ef5
Migrate KMS code to the new database DEKs ( #324 )
2020-09-03 13:23:46 -04:00
Jim
f29869b715
support for additional deks: oplog, session and token and new CreateKeysTx() ( #321 )
2020-09-02 14:37:19 -04:00
Jim
f3dd62d5d8
database DEKs ( #317 )
2020-09-02 07:42:03 -04:00
Jim
09112d1e96
refactor and remove kms/common pkg ( #315 )
2020-08-29 19:06:21 -04:00
Michael Gaffney
de162c5533
Replace and remove ErrNilParameter with ErrInvalidParameter ( #295 )
2020-08-25 12:18:14 -04:00
Jeff Mitchell
74544f6324
Encrypt tokens on the way out and decrypt on the way in ( #302 )
...
* Encrypt tokens on the way out and decrypt on the way in
This isn't a security feature related to tokens specifically; it's so
that we can discard cryptographically bad tokens before we ever hit the
DB. This way we can't pass through a DDoS to the database due to
fetching obviously invalid token values.
I'm using base58 to encode the resulting value as there aren't great
base62 options, and allowing base64 / and + values can hamper usability
by creating copying/highlighting breaks.
2020-08-25 00:20:50 -04:00
Jeff Mitchell
b47cca0329
Add (non-db aspects of) the recovery key workflow ( #286 )
2020-08-20 13:34:03 -04:00
Jim
9570897032
basic keys mgmt repo ( #264 )
2020-08-19 16:47:18 -04:00
Jim
Louis Ruch
Jeff Mitchell
Michael GaffneyandJeff Mitchell