There is a newer version of the record available.

Published September 14, 2022 | Version v0.6.0
Software Open

oidc-mytoken/server: mytoken-server 0.6.0

  • 1. @KIT-SCC
  • 2. @deepsourcelabs

Description

mytoken 0.6.0 API
  • Dropped subtoken_capabilities, since the benefit was minimal, but made things more complex
    • Removed subtoken_capabilities from all API requests and responses
    • Removed subtoken_capabilities from the mytoken
Enhancements
  • Added introduction text in the web interface
  • Session mytoken in web interface no longer uses subtoken_capabilities due to the drop, moved subtoken capabilities to the session mytoken as capabilities; added rotation on AT requests, added auto revocation
Bugfixes
  • Fixed a bug where mytokens with the revoke_any_token capabilities could revoke mytokens of other users if they can get possesion of the revocation_id
  • Fixed problems in the web interface with restrictions / issuer selection when not logged in.
Dependencies
  • Bump github.com/coreos/go-oidc/v3 from 3.2.0 to 3.4.0
  • Bump github.com/gofiber/template from 1.6.30 to 1.7.1
  • Bump github.com/gofiber/fiber/v2 from 2.36.0 to 2.37.1
  • Bump github.com/valyala/fasthttp from 1.39.0 to 1.40.0
  • Bump github.com/gliderlabs/ssh from 0.3.4 to 0.3.5
  • Bump github.com/gofiber/helmet/v2 from 2.2.15 to 2.2.16

Files

oidc-mytoken/server-v0.6.0.zip

Files (2.1 MB)

Name Size Download all
md5:fae2326b15f42700d119801769c54de0
2.1 MB Preview Download

Additional details

Related works