Commit Graph

120 Commits

Author SHA1 Message Date
Max Lambrecht 377225ac7b Update workload.proto with the lastest version from the SPIFFE repo.
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2021-05-27 15:55:07 -03:00
Max Lambrecht 467b1873cd Update netty-transport-native-kqueue dependecy to 4.1.63
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2021-04-12 15:48:00 -03:00
Max Lambrecht ede1878fd5 Addressing PR comments
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2021-03-15 09:59:15 -03:00
Max Lambrecht baa447b058 Add FetchX509Bundles method to Workload API client
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2021-03-08 18:44:21 -03:00
Max Lambrecht 0ee9ae28fa
Validate JWT 'typ' header. (#62)
* Validate JWT 'typ' header.

Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2021-02-08 16:05:36 -03:00
Max Lambrecht de82ebf916 Minor exception messages improvements.
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2021-02-05 10:37:44 -03:00
Max Lambrecht f8970af7f4 Validate 'alg' header when parsing JWT-SVIDs from tokens.
Some minor refactors and improvements.

Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2021-02-04 16:30:41 -03:00
Max Lambrecht 3049810a35 Remove private/public key match verification.
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2021-02-02 21:06:55 -03:00
Max Lambrecht bd6ca04270 Addressing PR comments.
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2021-01-06 10:02:46 -03:00
Max Lambrecht 9757e62ad3 Add missing SPIFFE ID and Trust Domain maximum length validations.
Fix parse SPIFFE ID to preserve path case.
Refactoring tests.

Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2021-01-05 12:46:41 -03:00
Max Lambrecht aff23a7d79 Use google osdetector plugin instead of internal gradle class.
Upgrade gradle wrapper to 6.7.1

Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-11-24 10:57:37 -03:00
Max Lambrecht 20d0efead2
Merge pull request #47 from srwaggon/patch-2
Update README.md
2020-11-14 10:16:21 -03:00
Samuel Waggoner 1ff550ac43
Update README.md
Update example to match current code contract
2020-11-13 16:05:39 -08:00
Samuel Waggoner c3d118da45
Update README.md
Amend parent class in example
2020-11-13 16:01:53 -08:00
Max Lambrecht 2f295c86ab
Merge pull request #43 from maxlambrecht/docs-improvements
Minor improvements in READMEs and javadocs.
2020-10-27 18:23:07 -03:00
Max Lambrecht dbd44a4db4 Minor improvements in READMEs and javadocs.
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-10-27 10:52:22 -03:00
Max Lambrecht 3cfa6a8ccd Updating gRPC and protobuf dependencies.
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-10-27 09:34:08 -03:00
Max Lambrecht 5a8d9d9056 Bump version to 0.6.2
Improve how the SpiffeTrustManager is configured to either validate SPIFFE IDs or acceptAny.
Validate the SslContextOptions.
Add visibility to some validation errors by logging warnings.
Improve log of the X509Source update.
Improve Spiffe Provider README.

Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-08-25 13:08:52 -03:00
Max Lambrecht d64db92d1f Bump version to 0.6.1
Upgrade gprc-java dependency to 1.31.1
Upgrade other dependencies.
Fix jwt-svid audience validation.

Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-08-20 13:40:47 -03:00
Max Lambrecht 09149487a0 Tasks for signing and publishing artifacts to maven repository.
Add to README instruction to add the maven and gradle dependencies.
Minor additions to gradle build configs.

Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-08-04 14:39:35 -03:00
Max Lambrecht 2fcaf752d7 Introduce JwtSource interface and refactor JWT Source implementation.
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-07-16 16:28:54 -03:00
Max Lambrecht e9df15e44b Refactoring to improve testability.
Add X509Source interface.
Add tests to cover provider module.

Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-07-16 15:08:09 -03:00
Max Lambrecht 0c542c198c Refactors and tests in java-spiffe-helper.
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-07-14 15:50:53 -03:00
Max Lambrecht 3549c666a0 Improving test coverage of core module. Some refactors to improve code quality and testability.
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-07-14 12:22:46 -03:00
Max Lambrecht f47e48f684 Minor amendments.
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-07-09 09:12:24 -03:00
Max Lambrecht d310d7bbee Adding fetchJwtSvid method not requiring subject as parameter.
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-07-06 16:21:06 -03:00
Max Lambrecht db4e78616e Minor improve to exception message.
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-07-06 10:47:27 -03:00
Max Lambrecht e994ede993 Add MacOS support.
Amendments in javadocs.
Other minor changes.

Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-07-04 09:57:49 -03:00
Max Lambrecht fee4cc1b91 Add reference to JWT third library.
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-07-02 15:42:47 -03:00
Max Lambrecht 35e85cee99 Minor refactors and documentation clarifying the watch methods in WorkloadApiClient.
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-07-02 11:39:02 -03:00
Max Lambrecht 58b36687b9 Refactor: extract WorkloadApiClient interface. Improving code and testing.
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-07-01 13:29:41 -03:00
Max Lambrecht 9e592c1d36 Adding validation in ExponentialBackoffPolicy to prevent overflows
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-07-01 09:51:21 -03:00
Max Lambrecht 7b61cb8c47 Addressing PR comments:
- refactors to replace strings by enums
- improve code readability
- add and clarify documentation
- improve and fix logic in spiffe id parsing
- rename classes

Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-06-30 14:19:07 -03:00
Max Lambrecht 167efbac89 Fixing typos
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-06-29 13:41:08 -03:00
Max Lambrecht cabcb56134 Add volatile to closed flags
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-06-29 12:06:33 -03:00
Max Lambrecht 14fbae8fa2 Refactoring WorkloadApiClient to reduce complexity.
Addressing code style issues.

Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-06-26 15:34:25 -03:00
Max Lambrecht 7268c54a28 Fixing checkstyle issues.
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-06-26 14:55:54 -03:00
Max Lambrecht 3e81bee7ff Fixing checkstyle issues.
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-06-26 13:23:53 -03:00
Max Lambrecht 81584a90fb Refactoring and completing javadocs.
Rename property to improve clarity.

Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-06-24 15:14:16 -03:00
Max Lambrecht 7d11db4944 Addressing PR comments:
- refactor methods for creating JwtSource and X509Source instances
- completing and clarifying javadocs

Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-06-24 14:09:19 -03:00
Max Lambrecht 0005bd5a1c Addressing PR comments:
- rename enum to improve clarity
- add missing validations to socket address parsing
- add test scenarios for address parsing
- improve Address javadoc to use the language of the SPIFFE spec
- some minor refactors

Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-06-24 11:43:53 -03:00
Max Lambrecht 96d660ad3a Refactor string literals by enum.
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-06-23 19:12:29 -03:00
Max Lambrecht 48aa4e6308 Removing SpiffeId and TrustDomain limit validations.
Improving javadocs.
Removing unused code.

Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-06-23 15:00:59 -03:00
Max Lambrecht c5f85756fc Making JWT and X509 SVID entities unmodifiable.
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-06-23 12:57:26 -03:00
Max Lambrecht cbca3a1ec2 Refactor extracting methods to improve readability.
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-06-23 12:46:11 -03:00
Max Lambrecht 5221f838eb Amendments in javadocs and README.
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-06-23 11:28:51 -03:00
Max Lambrecht ca5511eb91 Addressing PR comments:
- refactor acceptedSpiffeIds from List to Set
- refactor tests
- renaming methods to improve clarity
- amendments in javadocs

Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-06-23 11:26:00 -03:00
Max Lambrecht dbfb09f0f8 Refactor private key algorithm parameter. Create enum.
Other minor changes.

Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-06-23 09:25:59 -03:00
Max Lambrecht 4e1d0fb8c8 Fix trust domain host validation.
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-06-22 16:28:52 -03:00
Max Lambrecht 7d3adfe7cf Rename enum and add comment.
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-06-22 16:18:59 -03:00