-
Notifications
You must be signed in to change notification settings - Fork 5.7k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
fix: add CLI client IDs to default OIDC allowed audiences (#12170) #12179
Conversation
Signed-off-by: Yann Soubeyrand <[email protected]>
…2170) Signed-off-by: Michael Crenshaw <[email protected]>
Signed-off-by: Michael Crenshaw <[email protected]>
Signed-off-by: Michael Crenshaw <[email protected]>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
Signed-off-by: Michael Crenshaw <[email protected]>
Codecov ReportBase: 47.41% // Head: 47.43% // Increases project coverage by
Additional details and impacted files@@ Coverage Diff @@
## master #12179 +/- ##
==========================================
+ Coverage 47.41% 47.43% +0.02%
==========================================
Files 246 246
Lines 41815 41824 +9
==========================================
+ Hits 19825 19838 +13
+ Misses 19994 19990 -4
Partials 1996 1996
Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here. ☔ View full report at Codecov. |
Cherry-picked onto release-2.6 for 2.6.0-rc6, release-2.5 for 2.5.9, release-2.4 for 2.4.21, and release-2.3 for 2.3.15. |
…12179) * fix(settings): add CLI client ID in default OAuth2 allowed audiences Signed-off-by: Yann Soubeyrand <[email protected]> * fix: add CLI client IDs to default OIDC allowed audiences (#12170) Signed-off-by: Michael Crenshaw <[email protected]> * docs Signed-off-by: Michael Crenshaw <[email protected]> * test Signed-off-by: Michael Crenshaw <[email protected]> * handle expired token properly Signed-off-by: Michael Crenshaw <[email protected]> --------- Signed-off-by: Yann Soubeyrand <[email protected]> Signed-off-by: Michael Crenshaw <[email protected]> Co-authored-by: Yann Soubeyrand <[email protected]>
…12179) * fix(settings): add CLI client ID in default OAuth2 allowed audiences Signed-off-by: Yann Soubeyrand <[email protected]> * fix: add CLI client IDs to default OIDC allowed audiences (#12170) Signed-off-by: Michael Crenshaw <[email protected]> * docs Signed-off-by: Michael Crenshaw <[email protected]> * test Signed-off-by: Michael Crenshaw <[email protected]> * handle expired token properly Signed-off-by: Michael Crenshaw <[email protected]> --------- Signed-off-by: Yann Soubeyrand <[email protected]> Signed-off-by: Michael Crenshaw <[email protected]> Co-authored-by: Yann Soubeyrand <[email protected]>
…12179) * fix(settings): add CLI client ID in default OAuth2 allowed audiences Signed-off-by: Yann Soubeyrand <[email protected]> * fix: add CLI client IDs to default OIDC allowed audiences (#12170) Signed-off-by: Michael Crenshaw <[email protected]> * docs Signed-off-by: Michael Crenshaw <[email protected]> * test Signed-off-by: Michael Crenshaw <[email protected]> * handle expired token properly Signed-off-by: Michael Crenshaw <[email protected]> --------- Signed-off-by: Yann Soubeyrand <[email protected]> Signed-off-by: Michael Crenshaw <[email protected]> Co-authored-by: Yann Soubeyrand <[email protected]>
…12179) * fix(settings): add CLI client ID in default OAuth2 allowed audiences Signed-off-by: Yann Soubeyrand <[email protected]> * fix: add CLI client IDs to default OIDC allowed audiences (#12170) Signed-off-by: Michael Crenshaw <[email protected]> * docs Signed-off-by: Michael Crenshaw <[email protected]> * test Signed-off-by: Michael Crenshaw <[email protected]> * handle expired token properly Signed-off-by: Michael Crenshaw <[email protected]> --------- Signed-off-by: Yann Soubeyrand <[email protected]> Signed-off-by: Michael Crenshaw <[email protected]> Co-authored-by: Yann Soubeyrand <[email protected]>
…2170) (argoproj#12179) * fix(settings): add CLI client ID in default OAuth2 allowed audiences Signed-off-by: Yann Soubeyrand <[email protected]> * fix: add CLI client IDs to default OIDC allowed audiences (argoproj#12170) Signed-off-by: Michael Crenshaw <[email protected]> * docs Signed-off-by: Michael Crenshaw <[email protected]> * test Signed-off-by: Michael Crenshaw <[email protected]> * handle expired token properly Signed-off-by: Michael Crenshaw <[email protected]> --------- Signed-off-by: Yann Soubeyrand <[email protected]> Signed-off-by: Michael Crenshaw <[email protected]> Co-authored-by: Yann Soubeyrand <[email protected]> Signed-off-by: emirot <[email protected]>
…2170) (argoproj#12179) * fix(settings): add CLI client ID in default OAuth2 allowed audiences Signed-off-by: Yann Soubeyrand <[email protected]> * fix: add CLI client IDs to default OIDC allowed audiences (argoproj#12170) Signed-off-by: Michael Crenshaw <[email protected]> * docs Signed-off-by: Michael Crenshaw <[email protected]> * test Signed-off-by: Michael Crenshaw <[email protected]> * handle expired token properly Signed-off-by: Michael Crenshaw <[email protected]> --------- Signed-off-by: Yann Soubeyrand <[email protected]> Signed-off-by: Michael Crenshaw <[email protected]> Co-authored-by: Yann Soubeyrand <[email protected]>
* fix: verify audience claim Co-Authored-By: Vladimir Pouzanov <[email protected]> Signed-off-by: CI <[email protected]> * fix unit tests Signed-off-by: Michael Crenshaw <[email protected]> * handle single aud claim marshaled as a string Signed-off-by: Michael Crenshaw <[email protected]> * fix dependencies * fix: add CLI client IDs to default OIDC allowed audiences (argoproj#12170) (argoproj#12179) * fix(settings): add CLI client ID in default OAuth2 allowed audiences Signed-off-by: Yann Soubeyrand <[email protected]> * fix: add CLI client IDs to default OIDC allowed audiences (argoproj#12170) Signed-off-by: Michael Crenshaw <[email protected]> * docs Signed-off-by: Michael Crenshaw <[email protected]> * test Signed-off-by: Michael Crenshaw <[email protected]> * handle expired token properly Signed-off-by: Michael Crenshaw <[email protected]> --------- Signed-off-by: Yann Soubeyrand <[email protected]> Signed-off-by: Michael Crenshaw <[email protected]> Co-authored-by: Yann Soubeyrand <[email protected]> * fix dependencies * update version * update version * update version * fix linter * fix linter --------- Signed-off-by: CI <[email protected]> Signed-off-by: Michael Crenshaw <[email protected]> Signed-off-by: Yann Soubeyrand <[email protected]> Co-authored-by: CI <[email protected]> Co-authored-by: Vladimir Pouzanov <[email protected]> Co-authored-by: pashakostohrys <[email protected]> Co-authored-by: Yann Soubeyrand <[email protected]>
…2170) (argoproj#12179) * fix(settings): add CLI client ID in default OAuth2 allowed audiences Signed-off-by: Yann Soubeyrand <[email protected]> * fix: add CLI client IDs to default OIDC allowed audiences (argoproj#12170) Signed-off-by: Michael Crenshaw <[email protected]> * docs Signed-off-by: Michael Crenshaw <[email protected]> * test Signed-off-by: Michael Crenshaw <[email protected]> * handle expired token properly Signed-off-by: Michael Crenshaw <[email protected]> --------- Signed-off-by: Yann Soubeyrand <[email protected]> Signed-off-by: Michael Crenshaw <[email protected]> Co-authored-by: Yann Soubeyrand <[email protected]> Signed-off-by: schakrad <[email protected]>
Fixes #12170