Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Reduce deployment complexity and refactor internals #185

Merged
merged 25 commits into from
May 17, 2019
Merged

Reduce deployment complexity and refactor internals #185

merged 25 commits into from
May 17, 2019

Conversation

aeneasr
Copy link
Member

@aeneasr aeneasr commented May 6, 2019

Closes #177

Todo:

  • judge api -> decision api
  • Update docs
    • Write cool docs showcasing the 3-legged processing pipeline
    • Split sections (authz, authn, mutator)
    • Document how JWKs works now. Note that HS256 will not be sent in well-known
    • Update upgrade guide
  • Write JWKs generator cli
  • Check "valid" of various pipelines
  • Figure out unique identifier for metrics package as well as isDevelopment
  • Load rules from remote/fs/env
  • Add glob matcher (?)

unstructured notes

### scope is being transformed to scp always!!

### all env vars have been renamed but you can use older ones np

### everything is disabled by default you must enable it explicitly

### id token

jwks are now no longer fetched from hydra

instead you can use `oathkeeper credentials generate [--alg <RS256>] [--bits <2048|4096>] <transformer_id_token>`

jwk-keygen --use sig --alg RS256 --bits 4096


### renamed

cookies -> cookie
headers -> header
credentials issuer -> mutator

### new

* new unauthorized authorizer

### Rule changes

Credential Issuer -> (Request) Transformer

### RSA key

* should no be imported from file/env

* should still work with hydra though

### Serve Changes

* serve api -> stays the same
* serve proxy -> expose 2 ports, one proxy on api for health check, metrics and so on

### SQL Store Deprecation

SQL -> in memory / from disk

u
Signed-off-by: aeneasr <[email protected]>
u
Signed-off-by: aeneasr <[email protected]>
u
Signed-off-by: aeneasr <[email protected]>
@aeneasr aeneasr mentioned this pull request May 8, 2019
aeneasr added 17 commits May 10, 2019 16:00
u
Signed-off-by: aeneasr <[email protected]>
u
Signed-off-by: aeneasr <[email protected]>
u
Signed-off-by: aeneasr <[email protected]>
u
Signed-off-by: aeneasr <[email protected]>
u
Signed-off-by: aeneasr <[email protected]>
u
Signed-off-by: aeneasr <[email protected]>
# Conflicts:
#	.github/ISSUE_TEMPLATE/bug_report.md
#	.github/ISSUE_TEMPLATE/feature_request.md
#	.github/ISSUE_TEMPLATE/security.md
#	.github/PULL_REQUEST_TEMPLATE.md
#	CONTRIBUTING.md
@aeneasr aeneasr merged commit 6b509ad into master May 17, 2019
@aeneasr aeneasr deleted the v0.16 branch May 17, 2019 18:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Moving forward with ORY Oathkeeper
1 participant