Rob Kenis d0829760c6

support multiple subjects in oidc ping ...

Validate the subject in an oidc ping against a list of logged in subjects.

This resolves the issue that multiple connected FRP clients with different
OIDC clients result in a failing ping. The ping would fail because the
subject in memory would be the value of the last logged in FRPC.

This change also changes the constructor of OidcAuthVerifier to take
a TokenVerifier interface. This will not change production behavior, but makes
testing easier because we can inject a mock verifier during testing.

Resolves: #4466

2024-10-11 08:11:03 +02:00

..

legacy

support yaml/json/toml configuration format, make ini deprecated (#3599)

2023-09-06 10:18:02 +08:00

auth.go

support multiple subjects in oidc ping

2024-10-11 08:11:03 +02:00

oidc_test.go

support multiple subjects in oidc ping

2024-10-11 08:11:03 +02:00

oidc.go

support multiple subjects in oidc ping

2024-10-11 08:11:03 +02:00

pass.go

optimize some code (#3801)

2023-11-27 15:47:49 +08:00

token.go

use std slices package (#4008)

2024-02-20 12:01:41 +08:00