ewilliams28/releases
1
0
Fork 0
mirror of https://github.com/open-policy-agent/opa.git synced 2026-08-12 19:32:48 -06:00
Code Issues Packages Projects Releases Wiki Activity
Files
a307ec4135bf771a943ffe5b984f8b85ad21614e
releases/server/identifier
T
History
Charlie Egan b36da40ab6 [server/identifier] Support SPIFFEID use in authz (#5742) 
When using OPA TLS authorization, authz policy authors will now have
access to the client certificates presented as part of the TLS
connection. This new data will be available under the key `client_certificates`.

The existing functionality where `identity` is set to the Subject RDN Sequence
is left unchanged.

When using x.509 SVIDs the SPIFFEID is presented as in the SANs of the
certificate. So this change makes that data available should users
require it. It also makes other information about the client cert
available to authz policy too.

Signed-off-by: Charlie Egan <charlie@styra.com>
2023-03-09 16:42:59 +00:00
..
testdata
[server/identifier] Support SPIFFEID use in authz (#5742)
2023-03-09 16:42:59 +00:00
certs.go
[server/identifier] Support SPIFFEID use in authz (#5742)
2023-03-09 16:42:59 +00:00
identifier.go
[server/identifier] Support SPIFFEID use in authz (#5742)
2023-03-09 16:42:59 +00:00
mock_test.go
[server/identifier] Support SPIFFEID use in authz (#5742)
2023-03-09 16:42:59 +00:00
tls_test.go
[server/identifier] Support SPIFFEID use in authz (#5742)
2023-03-09 16:42:59 +00:00
tls.go
[server/identifier] Support SPIFFEID use in authz (#5742)
2023-03-09 16:42:59 +00:00
token_test.go
[server/identifier] Support SPIFFEID use in authz (#5742)
2023-03-09 16:42:59 +00:00
token.go
[server/identifier] Support SPIFFEID use in authz (#5742)
2023-03-09 16:42:59 +00:00