harbor/src/core/filter
Daniel Jiang f0cb16cb86 Update OIDC token refresh process
1) Disassociate id token from user session

2) Some OIDC providers do not return id_token in the response of refresh
request:
https://openid.net/specs/openid-connect-core-1_0.html#RefreshTokenResponse
When validating the CLI secret it will not validate the id token,
instead it will check the expiration of the access token, and try to
refresh it.

Signed-off-by: Daniel Jiang <jiangd@vmware.com>
2019-10-17 11:26:18 +08:00
..
test add authn proxy (#7199) 2019-03-27 12:37:54 +08:00
mediatype_test.go Replacing copyright notices with "Copyright Project Harbor Authors". 2018-09-19 16:59:36 +00:00
mediatype.go Updating copyright notices 2018-10-18 16:04:36 +00:00
readonly_test.go Refactor adminserver stage 3: replace config api and change ut settings 2019-02-18 14:06:19 +08:00
readonly.go Block retag requests in read-only mode (#6457) 2018-12-06 18:35:22 +08:00
security_test.go Add groups claim to OIDC configuration 2019-09-16 15:54:14 +08:00
security.go Update OIDC token refresh process 2019-10-17 11:26:18 +08:00