iam
iam copied to clipboard
INDIGO Identity and Access Management Service
Following the IAM-ATLAS Halloween incident, we concluded that at least for the LHC experiments it would seem best **_not_** to store **_access_** tokens in the DB and just **_log_** the...
When an admin adds a new System Scope, if it is unrestricted it should appear in the well-known endpoint. Right now just default scopes were published.
## Problem description In more detail, the property `client-registration.allow-for=ADMINISTRATORS` allows only administrators to create clients. An administrator can create a client and then assign a normal user as owner. In...
Bumps [com.jayway.jsonpath:json-path](https://github.com/jayway/JsonPath) from 2.2.0 to 2.9.0. Release notes Sourced from com.jayway.jsonpath:json-path's releases. json-path-2.9.0 What's Changed Fix for CVE-2023-51074. update dependencies by @SingingBush in json-path/JsonPath#965 JPMS: define Automatic-Module-Name as json.path by...
Assuming the duration/lifetime of an access-token is: * `exp - nbf` In order to reduce confusion, one should be able to configure IAM to give exchanged and refreshed access-tokens the...
Currently in VOMS-Admin users can upload their own DNs manually. This is often used for robot certificates today as we assume all users already have their certificate in the browser....
Add a docker compose to show an example of a replica deployment of VOMS-AA. This extends #720.
Starting from this PR #674
Bumps [com.nimbusds:nimbus-jose-jwt](https://bitbucket.org/connect2id/nimbus-jose-jwt) from 9.21 to 9.37.2. Changelog Sourced from com.nimbusds:nimbus-jose-jwt's changelog. version 1.0 (2012-03-01) First version based on the OpenInfoCard JWT, JWS and JWE code base. version 1.1 (2012-03-06) Introduces...