1c464c2da1
fix potential cstring leaks
2022-04-15 09:16:02 -07:00
1343f15a07
Merge branch 'master' of http://git.int.zerotier.com/zerotier/ZeroTierOne
2022-03-29 14:28:12 -04:00
5fcaed086d
another at->idt for exp
2022-03-29 11:09:50 -07:00
130689d82b
remove extraneous debug log line
2022-03-29 11:09:14 -07:00
1efceb86fc
get exp time out of correct token
2022-03-29 11:08:59 -07:00
1d92974447
auth0 compatibility
2022-03-29 11:07:44 -07:00
de56f571c7
enable rfc3339 timestamps in oidc library for auth0
2022-03-29 11:07:30 -07:00
7efb1cf7d3
Bundle Edge WebView dependency EXE and statically link MSVC DLLs
2022-03-22 17:43:43 -04:00
73ec8cddd7
Show sso errors on the last step of the oidc process
2022-03-21 17:30:03 -04:00
aa97aabb4e
for now, only enable sso on certain platforms
...
mac, windows, linux x86/x86_64/aarch64
2022-02-01 11:07:37 -08:00
b7952d7f39
no longer need direct import of serde here either
2022-01-31 12:13:30 -08:00
c380a4e4bd
cleanup
2022-01-31 12:02:14 -08:00
9c487cbfb8
Remove jsonwebtoken package dependency
...
Replaced with rust-jwt. `jsonwebtoken` relies on the ring package which explodes on non-x86/x64 architectures
2022-01-31 11:58:51 -08:00
d719137565
temp workaround for oidc auth dropping issue
...
Add a method to "kick" the refresh thread and re-post the tokens in the case where the thread is somehow still running & controller pushes out an AUTH_REQUIRED. This situation happens in a corner case still under investigation where the controller pushes out many copies of the network config repeatedly
2022-01-20 09:44:56 -08:00
3d4d087f07
make some impl functions pub
2022-01-05 15:43:45 -08:00
953e62f103
Clean up some extraneous output in release mode
2022-01-05 11:55:47 -08:00
8ea192fcab
update dependency specs
2022-01-05 08:44:01 -08:00
50b866c5cf
clean up & pass along errors from ZeroIDC::new() method
2022-01-03 17:25:30 -08:00
cf411efd1d
a little cleanup
2022-01-03 08:36:16 -08:00
057356a725
Just some comments
2021-12-16 22:07:17 -08:00
a69e91c541
Fix hash verification on refresh
2021-12-16 19:49:15 -08:00
8fccf3136c
Enable validation of token hashes as part of the oidc process
2021-12-16 18:44:36 -08:00
2435ab70ab
remove some extra verbose logging
...
... and baby you got a full flow goin on
2021-12-16 12:37:22 -08:00
2293b0703f
Can get Central JSON bundle back to zerotier-one window
2021-12-16 11:37:58 -08:00
0ab5cce878
TIL: Its not as hard as I thought to make Rust deadlock
2021-12-15 14:37:06 -08:00
df9a7497b1
refactor out the separate AuthInfo struct
...
consolidated everything into the single IDC struct. Should help keep from rotating the pkce token as often & causing issues with the login window flapping
2021-12-15 14:16:17 -08:00
2d4fe9e6d0
Get oidc lib compiled into main binary on Windows
2021-12-08 12:14:15 -08:00
dc12bde068
add vs makefile project to build oidc rust library
2021-12-08 09:49:29 -08:00
b3fbbd3124
refresh tokens now working
...
Still investigating the best way to do a couple things, but we have something working
2021-12-07 16:29:50 -08:00
5095d73de3
moar better error handling
2021-12-03 16:32:27 -08:00
1192b1b422
refresh token run loop
...
Need central-side work to complete
2021-12-03 15:44:04 -08:00
43c528fdb6
Get expiry time out of access token & propagate
2021-12-03 11:32:29 -08:00
7a8c89be9d
Post ID token to Central
2021-12-03 09:57:39 -08:00
4ce810b421
On our way to processing tokens
2021-12-01 16:57:18 -08:00
730482e62f
encode network ID into sso state param
2021-12-01 15:02:21 -08:00
663a09b38d
oidc stuff coming across the wire properly and generating a working login URL
2021-12-01 13:01:32 -08:00
73c186b111
add network_id extra param to auth flow
2021-12-01 09:27:30 -08:00
6393a4beec
progress
2021-11-30 14:22:25 -08:00
5f548705dd
lots more refactoring
2021-11-29 14:11:29 -08:00
91e9b736dd
make service objs dependent on zeroidc
2021-11-18 10:42:12 -08:00
0875fb5fe0
have this make an rlib too for the future
2021-11-11 16:29:14 -08:00
8d39c9a861
plumbing full flow from controller -> client network
2021-11-04 15:40:08 -07:00
f8bf91426b
.
2021-11-02 16:30:09 -07:00
4cadfd736f
move ffi code into its own file
2021-11-02 15:55:26 -07:00
1c7a5439d5
expose AuthInfo struct to external code
...
also get the auth URL
2021-10-29 16:04:19 -07:00
ebc4c898ff
pass in csrf token & nonce (generated externally)
2021-10-29 15:43:39 -07:00
56cf874d99
slow progress
2021-10-29 15:31:23 -07:00
31888f5ef8
provide issuer URL, client ID and local web port to constructor
...
also construct the oidc client
2021-10-29 09:43:14 -07:00
0069b1bac3
we can start & stop a thread. so that's nice.
2021-10-28 09:29:33 -07:00
c689c0bd8c
integrate with mac build system and add skeleton
2021-10-27 17:09:01 -07:00
