10 Commits

Author	SHA1	Message	Date
Nick Meves	a3eef1709a	Improve default CreateSessionStateFromBearerToken tests	2020-06-19 11:48:23 -07:00
Nick Meves	c2c1caa404	Set User = Subject in ExtraJWTBearer sessions	2020-06-19 11:48:23 -07:00
Nick Meves	788d8ecc1b	Verify main v extra JWT bearers differently ... When using the configured provider JWT Verifier, it makes sense to use the provider `CreateSessionStateFromBearerToken` method. For any extra JWT Issuers, they should use a generic default verifier.	2020-06-19 11:47:36 -07:00
Scott Guymer	3aeca4368c	ACR values should not be automatically added when blank (#598) ... * ACR values should not be automatically added when blank * Added changelog	2020-06-02 18:17:27 +01:00
Joel Speed	f7b28cb1d3	Improvements to Session State code (#536) ... * Drop SessionStateJSON wrapper * Use EncrpytInto/DecryptInto to reduce sessionstate Co-authored-by: Henry Jenkins <henry@henryjenkins.name>	2020-05-30 08:53:38 +01:00
Mitsuo Heijo	e642daef4e	Support context in providers (#519) ... Co-authored-by: Henry Jenkins <henry@henryjenkins.name>	2020-05-10 13:34:59 +01:00
Joel Speed	802754caad	Migrate to oauth2-proxy/oauth2-proxy	2020-03-29 15:40:10 +01:00
Joel Speed	2ab8a7d95d	Move SessionState to its own package	2019-05-18 13:09:56 +02:00
Tanvir Alam	8a77cfcac3	Swap out bmizerany/assert package that is deprecated in favor of stretchr/testify/assert	2017-10-23 12:24:17 -04:00
Jehiah Czebotar	d49c3e167f	SessionState refactoring; improve token renewal and cookie refresh ... * New SessionState to consolidate email, access token and refresh token * split ServeHttp into individual methods * log on session renewal * log on access token refresh * refactor cookie encription/decription and session state serialization	2015-07-02 23:09:11 -04:00