iam
iam copied to clipboard
indigo-iam
INDIGO Identity and Access Management Service
Bumps `bouncycastle.version` from 1.58 to 1.70. Updates `org.bouncycastle:bcpkix-jdk15on` from 1.58 to 1.70 Changelog Sourced from org.bouncycastle:bcpkix-jdk15on's changelog. 2.1.1 Version Release: 1.78 Date: TBD 2.2.1 Version Release: 1.77 Date: 2023, November...
![dependabot[bot] avatar](https://avatars.githubusercontent.com/in/29110?v=4 "dependabot[bot] avatar"){kind=avatar}
When the client performs concurrent refresh token flows and the previously issued access token is deleted (i.e. the box _Clear access tokens on refresh_ for that client is checked), IAM...
Hi, For the time being, tokens are only used for pilot submission, which is a very controlled environment. To make sure we stay in this very controlled situation, and until...
IAM admins should be able to suspend clients: - that are suspicious in some way, or - that have unknown owners (cf. #595, #652), or - that are misbehaving (cf....
Right now, the IAM implementation interprets as - non-dynamically registered client, a client registered by IAM admins (for which there is a dedicated API) - a dynamically registered client, a...
CERN team needs the `jmx_prometheus_javaagent` jar to collect IAM metrics. Right now, they just create a new image from IAM such as ``` ARG IAM_BASE_IMAGE ARG IAM_BASE_TAG FROM $IAM_BASE_IMAGE:$IAM_BASE_TAG COPY...
Cleanup tasks were defined and a bit hardcoded into MitreID codebase. Those tasks can now be configured and are contained into IAM codebase. | Property name (Environment variable name) |...
Hi, I'm integrating an FTS instance with the SKA prototyping IAM instance, https://ska-iam.stfc.ac.uk/ and have encountered an issue where the issuer in the well-known config is listed as: `curl -s...
Open Policy Agent (OPA) should replace the Indigo IAM scope policy API to improve performance in terms of scalability and flexibility.
When a request for a device code to the `/devicecode` endpoint does not specify the list of scopes, then the subsequent request to the `/token` endpoint returns 500 server error...