Skip to content

OIDC, IDPs and Secrets 2.0 #982

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Draft
wants to merge 59 commits into
base: main
Choose a base branch
from
Draft

OIDC, IDPs and Secrets 2.0 #982

wants to merge 59 commits into from

Conversation

michaelquigley
Copy link
Collaborator

@michaelquigley michaelquigley commented Jun 16, 2025 •
edited
Loading

An entirely new approach for OIDC-based IDP integration, along with necessary new infrastructure for storing and distributing secrets to zrok frontends.

See #968.

@michaelquigley michaelquigley self-assigned this Jun 16, 2025
@michaelquigley michaelquigley added spike Requires R&D; figure it out feature New feature description epic Top-level marquee features labels Jun 16, 2025
@michaelquigley michaelquigley added this to the v1.next milestone Jun 16, 2025
@vercel Vercel
Copy link

vercel bot commented Jun 16, 2025 •
edited
Loading

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
zrok ✅ Ready (Inspect) Visit Preview 💬 Add feedback Jul 18, 2025 5:59pm

@michaelquigley
stuff basic auth into the secrets store (#983)
19d391e
@michaelquigley
cli secrets client rough-in (#983)
9f89126
@michaelquigley
secrets retrieval lint, controller-side (#983)
332400d
@michaelquigley
new secrets access configuration for publicProxy (#987)
a993dda
@michaelquigley
start of the secrets cache (based on sturdyc) (#987)
4c5f3e7
@michaelquigley
super rough secrets client access for basic auth (#987)
c0ca4b0
@michaelquigley
working through issues (#987)
776cf2c
@michaelquigley
missing enum
eb5f56c
@michaelquigley
missing enum (stub)
83eaedd
@michaelquigley
refactoring structure for clarity/simplicity in publicProxy (#987)
28881e1
@michaelquigley
realign legacy oauth support for tesing (#987)
8be5540
@michaelquigley
new 'oidcConfig' in openapi (#968)
dee8f68
@michaelquigley
improved oidc configuration; use '/.well-known/openid-configuration' …
d0cbd0b 
…for bootstrapping (#968)
@michaelquigley
no soft delete for secrets; clean up secrets when share is removed (#983
8c17480 
)
@michaelquigley
making controller's shareHandler more modular in preparation for new …
7b1d98f 
…functionality (#968)
@michaelquigley
better middleware management; return 429 when over limit (#968)
784417b
@michaelquigley
naming lint; preparing for model extension (#968)
3c637d9
@michaelquigley
better 429 messages for both share/enable when over limit
1767596
@michaelquigley
changelog; limit messages
61eb290
@michaelquigley
initial OIDC metadata retrieval and configuration validation (#991)
716003f
@michaelquigley
rally oidc configuration logic in 'shareOidc' (#991)
0f81d7a
@michaelquigley
shareOidc.secrets, ->store, grpc-> (#991)
904e1ff
@michaelquigley
Merge branch 'main' into flexible_idps
a91d620
@michaelquigley
regenerated stubs after merging spec
db3a52f
@michaelquigley
Merge branch 'main' into flexible_idps
453e6d3
@michaelquigley
Merge branch 'main' into flexible_idps
5c9fb49
@michaelquigley
wire secrets from request into secrets store (#991)
bf7c8b9
@michaelquigley
Merge branch 'main' into flexible_idps
6b6ac3b
@michaelquigley
Merge branch 'main' into flexible_idps
067b2d7
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees

@michaelquigley michaelquigley

Labels
epic Top-level marquee features feature New feature description spike Requires R&D; figure it out
Projects
None yet
Milestone
v1.next
Development

Successfully merging this pull request may close these issues.
1 participant
@michaelquigley