Commit Graph

134 Commits

Author SHA1 Message Date
dependabot[bot] 7fc2406087
Bump org.bouncycastle:bcpkix-jdk15on from 1.66 to 1.70 (#131)
Bumps [org.bouncycastle:bcpkix-jdk15on](https://github.com/bcgit/bc-java) from 1.66 to 1.70.
- [Release notes](https://github.com/bcgit/bc-java/releases)
- [Changelog](https://github.com/bcgit/bc-java/blob/master/docs/releasenotes.html)
- [Commits](https://github.com/bcgit/bc-java/commits)

---
updated-dependencies:
- dependency-name: org.bouncycastle:bcpkix-jdk15on
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-04-13 17:12:53 -05:00
dependabot[bot] 72f352fc30
Bump org.apache.commons:commons-lang3 from 3.11 to 3.12.0 (#129)
Bumps org.apache.commons:commons-lang3 from 3.11 to 3.12.0.

---
updated-dependencies:
- dependency-name: org.apache.commons:commons-lang3
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Max Lambrecht <max.lambrecht@hpe.com>
2023-04-13 16:42:10 -05:00
Max Lambrecht e5600c3f4d
Update gradle version to 8.0.2 (#104)
Update gradle version to 8.0.2

Signed-off-by: Max Lambrecht <max.lambrecht@hpe.com>
2023-04-12 13:16:22 -05:00
Guilherme Carvalho 0d0aae967f
Add SVID hints on workload api client (#114)
Add SVID hints on workload api client

Signed-off-by: Guilherme Carvalho <guilhermocc@proton.me>
2023-04-12 13:10:44 -05:00
Max Lambrecht c3dc4950e5
Fix CachedJwtSource tests (#120)
Signed-off-by: Max Lambrecht <max.lambrecht@hpe.com>
2023-04-10 15:02:27 -05:00
Max Lambrecht 3ca77c1de2
Add `CachedJwtSource` (#116)
Add CachedJwtSource

Signed-off-by: Max Lambrecht <max.lambrecht@hpe.com>
2023-04-04 13:49:32 -05:00
Max Lambrecht f9dc354ae4
Solve memory leak. (#112)
Reverting changes that introduced a memory leak. Addressing error when context was cancelled

Signed-off-by: Max Lambrecht <max.lambrecht@hpe.com>
2023-03-07 13:30:51 -06:00
Max Lambrecht 942bcc9eb4
Add default constructor to SpiffeSslSocketFactory (#109)
Add default constructor to SpiffeSslSocketFactory

Signed-off-by: Max Lambrecht <max.lambrecht@hpe.com>
2023-02-16 16:13:21 -03:00
Max Lambrecht 48991a0105
Fix close method in WorkloadApiClient (#102)
Signed-off-by: Max Lambrecht <max.lambrecht@hpe.com>
2023-01-11 15:00:07 -03:00
Thomas Richner 0085ce08f9
Aarch64 support (#101)
Add aarch64 module for OSX

Signed-off-by: Thomas Richner <thomas.richner@oviva.com>
Co-authored-by: Max Lambrecht <max.lambrecht@hpe.com>
2023-01-11 14:37:29 -03:00
Max Lambrecht a878d7d7f4
Update grpc-java dependency to 1.49.0 (#97)
Signed-off-by: Max Lambrecht <max.lambrecht@hpe.com>
2022-08-24 13:38:55 -07:00
M1a0 6cdc17eb9c
Add FetchJWTSVIDs function for workloadapi and jwtSource (#90)
Signed-off-by: Yuhan Li <liyuhan.loveyana@bytedance.com>
2022-04-27 18:21:24 -03:00
Max Lambrecht 77148473c4
Strict SPIFFE ID parsing (#74)
Strict SPIFFE ID parsing.

Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2021-09-08 14:03:24 -03:00
Max Lambrecht 7657acfafd
Add Integration tests for Workload API client. (#75)
* Add integration tests and setup script.

Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
Co-authored-by: Ryan Turner <rturner3@users.noreply.github.com>
2021-07-27 10:08:32 -07:00
Max Lambrecht 377225ac7b Update workload.proto with the lastest version from the SPIFFE repo.
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2021-05-27 15:55:07 -03:00
Max Lambrecht 467b1873cd Update netty-transport-native-kqueue dependecy to 4.1.63
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2021-04-12 15:48:00 -03:00
Max Lambrecht ede1878fd5 Addressing PR comments
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2021-03-15 09:59:15 -03:00
Max Lambrecht baa447b058 Add FetchX509Bundles method to Workload API client
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2021-03-08 18:44:21 -03:00
Max Lambrecht 0ee9ae28fa
Validate JWT 'typ' header. (#62)
* Validate JWT 'typ' header.

Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2021-02-08 16:05:36 -03:00
Max Lambrecht de82ebf916 Minor exception messages improvements.
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2021-02-05 10:37:44 -03:00
Max Lambrecht f8970af7f4 Validate 'alg' header when parsing JWT-SVIDs from tokens.
Some minor refactors and improvements.

Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2021-02-04 16:30:41 -03:00
Max Lambrecht 3049810a35 Remove private/public key match verification.
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2021-02-02 21:06:55 -03:00
Max Lambrecht bd6ca04270 Addressing PR comments.
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2021-01-06 10:02:46 -03:00
Max Lambrecht 9757e62ad3 Add missing SPIFFE ID and Trust Domain maximum length validations.
Fix parse SPIFFE ID to preserve path case.
Refactoring tests.

Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2021-01-05 12:46:41 -03:00
Max Lambrecht aff23a7d79 Use google osdetector plugin instead of internal gradle class.
Upgrade gradle wrapper to 6.7.1

Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-11-24 10:57:37 -03:00
Max Lambrecht 20d0efead2
Merge pull request #47 from srwaggon/patch-2
Update README.md
2020-11-14 10:16:21 -03:00
Samuel Waggoner 1ff550ac43
Update README.md
Update example to match current code contract
2020-11-13 16:05:39 -08:00
Samuel Waggoner c3d118da45
Update README.md
Amend parent class in example
2020-11-13 16:01:53 -08:00
Max Lambrecht 2f295c86ab
Merge pull request #43 from maxlambrecht/docs-improvements
Minor improvements in READMEs and javadocs.
2020-10-27 18:23:07 -03:00
Max Lambrecht dbd44a4db4 Minor improvements in READMEs and javadocs.
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-10-27 10:52:22 -03:00
Max Lambrecht 3cfa6a8ccd Updating gRPC and protobuf dependencies.
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-10-27 09:34:08 -03:00
Max Lambrecht 5a8d9d9056 Bump version to 0.6.2
Improve how the SpiffeTrustManager is configured to either validate SPIFFE IDs or acceptAny.
Validate the SslContextOptions.
Add visibility to some validation errors by logging warnings.
Improve log of the X509Source update.
Improve Spiffe Provider README.

Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-08-25 13:08:52 -03:00
Max Lambrecht d64db92d1f Bump version to 0.6.1
Upgrade gprc-java dependency to 1.31.1
Upgrade other dependencies.
Fix jwt-svid audience validation.

Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-08-20 13:40:47 -03:00
Max Lambrecht 09149487a0 Tasks for signing and publishing artifacts to maven repository.
Add to README instruction to add the maven and gradle dependencies.
Minor additions to gradle build configs.

Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-08-04 14:39:35 -03:00
Max Lambrecht 2fcaf752d7 Introduce JwtSource interface and refactor JWT Source implementation.
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-07-16 16:28:54 -03:00
Max Lambrecht e9df15e44b Refactoring to improve testability.
Add X509Source interface.
Add tests to cover provider module.

Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-07-16 15:08:09 -03:00
Max Lambrecht 0c542c198c Refactors and tests in java-spiffe-helper.
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-07-14 15:50:53 -03:00
Max Lambrecht 3549c666a0 Improving test coverage of core module. Some refactors to improve code quality and testability.
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-07-14 12:22:46 -03:00
Max Lambrecht f47e48f684 Minor amendments.
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-07-09 09:12:24 -03:00
Max Lambrecht d310d7bbee Adding fetchJwtSvid method not requiring subject as parameter.
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-07-06 16:21:06 -03:00
Max Lambrecht db4e78616e Minor improve to exception message.
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-07-06 10:47:27 -03:00
Max Lambrecht e994ede993 Add MacOS support.
Amendments in javadocs.
Other minor changes.

Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-07-04 09:57:49 -03:00
Max Lambrecht fee4cc1b91 Add reference to JWT third library.
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-07-02 15:42:47 -03:00
Max Lambrecht 35e85cee99 Minor refactors and documentation clarifying the watch methods in WorkloadApiClient.
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-07-02 11:39:02 -03:00
Max Lambrecht 58b36687b9 Refactor: extract WorkloadApiClient interface. Improving code and testing.
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-07-01 13:29:41 -03:00
Max Lambrecht 9e592c1d36 Adding validation in ExponentialBackoffPolicy to prevent overflows
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-07-01 09:51:21 -03:00
Max Lambrecht 7b61cb8c47 Addressing PR comments:
- refactors to replace strings by enums
- improve code readability
- add and clarify documentation
- improve and fix logic in spiffe id parsing
- rename classes

Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-06-30 14:19:07 -03:00
Max Lambrecht 167efbac89 Fixing typos
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-06-29 13:41:08 -03:00
Max Lambrecht cabcb56134 Add volatile to closed flags
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-06-29 12:06:33 -03:00
Max Lambrecht 14fbae8fa2 Refactoring WorkloadApiClient to reduce complexity.
Addressing code style issues.

Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-06-26 15:34:25 -03:00