keymaster
keymaster copied to clipboard
Short term certificate based identity system (ssh/x509 ca + openidc)
1. The okta 2fa cope did not return an error message when no valid autneticators where available 2. When both mfa AND token failed the client did not termiate on...
I've run into a few use-cases where it would be handy to be able to trigger the bootstrap workflow without deleting the current keys or where it would be handy...
This will allow distributing the CA certificate to machines for trust and not worry about the certificate trusting servers. The certificate should probably have only the `ExtKeyUsageClientAuth` bit set
Some back-end primary authentication services (i.e. Okta) can provide a profile image for a user. It would be cool if Keymaster could grab this information and pass it along to...
We have a service using the [oidc golib package](https://github.com/Cloud-Foundations/golib/blob/master/pkg/auth/oidc/impl.go) and keymaster for auth and would like to make AJAX requests to the service from a client-side JS app. Currently, if...
It appears that Keymaster is using the deprecated U2F plugin in Chrome. This will not work after Feb 2022. I get this warning with Chrome 96.  Currently u2f-api.js uses...