github-cognito-openid-wrapper

github-cognito-openid-wrapper copied to clipboard

The log level is currently hard-coded in `logger.js`. An improvement would be to allow this to be configured without code changes. The approach used in https://github.com/TimothyJones/github-cognito-openid-wrapper/pull/17 is nice, where the...

TimothyJones

The GitHub API paginates responses with more than 30 items (see https://developer.github.com/v3/#pagination). This means that users who have more than 30 emails associated with their account might not have a...

TimothyJones

PR #19 added an option to log to splunk. This option doesn't currently work from lambda deployments, because: 1) The environment variables are not passed through in `template.yml` 2) I'm...

TimothyJones

Token endpoint does not verify client secret

4

The `/token` endpoint currently proxies all requests to GitHub's `/login/oauth/access_token` API. It forwards the `code` and `state` supplied by the requestor and augments the GitHub request with the `GITHUB_CLIENT_SECRET` --...

ibtehajn

HTTP 500 error from GitHub when user is not logged in and 2FA is enabled

30

> When I am not logged in github in another window (session) I get 500 (Looks like something went wrong!) page instead of Authorization / Login page. _Originally posted by...

TimothyJones

Add support for refresh tokens

6

Nice work! Whats the challenge with implementing the refresh token? I'm assuming Github provides this and its just a need to intercept the request and proxy? If there are no...

ispyinternet

Add mechanism to easily restrict access to users that meet given conditions

8

Hello, thank you very much for this great piece of work! I have a question: I want to allow access only for members of a particular GH Team. Is it...

holyjak

Fix/logging

1

Without these envs in `config.sh` the wrapper fails in web mode: ``` export GITHUB_API_URL="https://api.github.com" export GITHUB_LOGIN_URL="https://github.com" ``` I'll create a draft PR since I have a naive logger there that...

busla

Add Passing Request Parameters as JWT

1

Add support for connect core feature missing from shim ([spec](https://openid.net/specs/openid-connect-core-1_0.html#JWTRequests)).

blakehatch

Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects) from 1.15.2 to 1.15.4. Commits 6585820 Release version 1.15.4 of the npm package. 7a6567e Disallow bracketed hostnames. 05629af Prefer native URL instead of deprecated url.parse. 1cba8e8 Prefer native...

dependabot[bot]