There is a newer version of the record available.

Published August 3, 2021 | Version v0.3.0
Software Open

oidc-mytoken/server: mytoken-server 0.3.0

Creators

  • 1. @KIT-SCC
  • 2. @deepsourcelabs

Description

Features
  • Changes to the mytoken
    • Added a version to the mytoken token
    • Added token type 'mytoken'
    • Now using a hash value as the subject
  • Added Dockerfiles; mytoken can easily run with swarm
  • Added OIDC-compatibility for requesting ATs
    • ATs can be requested using the mytoken as the refresh token in a OIDC refresh flow
  • Deployment Configuration
    • Added option to set maximum lifetime of mytokens
    • Added option to disable restriction keys
    • Made request limits configurable
  • Changed setup db to new db migration tool
  • Added support for token rotation, incl. optional auto revocation
  • Added option to set maximum token length when requesting a mytoken
Webinterface
  • Added option to create mytoken in the web interface
  • Reworked consent screen
  • Added possibility to set scopes and audiences when requesting an AT
  • Improvements
Enhancements
  • Using better cryptographic functions
  • Set cookie as secure if issuer uses https, indepent of a potential proxy
  • Improved packaging
  • Improved code base
  • Improved error tracebility
Bugfixes
  • Fixed bugs in the webinterface
  • Fixed other bugs
OIDC
  • Add PKCE support
Dependencies
  • Bumped several dependencies

Files

oidc-mytoken/server-v0.3.0.zip

Files (294.0 kB)

Name Size Download all
md5:6591681be95409c3ea3a2a78f5da8454
294.0 kB Preview Download

Additional details

Related works

Is supplement to
https://github.com/oidc-mytoken/server/tree/v0.3.0 (URL)