55 Commits

Author	SHA1	Message	Date
Harshavardhana	d4265f9a13	Simplify OPA to use rootCAs custom transport (#6843) ... Also close the connections properly to use the connection pooling properly for HTTP clients.	2018-11-22 08:31:05 +05:30
Harshavardhana	a40610d331	Re-populate public key if JWT fails to parse (#6786) ... This is done such that if WSO2 was re-configured with new TLS certs, and newer tokens are signed with a newer public key. Once populated parse the JWT again	2018-11-08 17:01:20 -08:00
Harshavardhana	fde8c38638	Add default canned policies (#6690)	2018-10-24 17:14:27 -07:00
Harshavardhana	3ef3fefd54	Add ListUsers API to list all configured users in IAM (#6619)	2018-10-13 12:48:43 +05:30
Harshavardhana	54ae364def	Introduce STS client grants API and OPA policy integration (#6168) ... This PR introduces two new features - AWS STS compatible STS API named AssumeRoleWithClientGrants ``` POST /?Action=AssumeRoleWithClientGrants&Token=<jwt> ``` This API endpoint returns temporary access credentials, access tokens signature types supported by this API - RSA keys - ECDSA keys Fetches the required public key from the JWKS endpoints, provides them as rsa or ecdsa public keys. - External policy engine support, in this case OPA policy engine - Credentials are stored on disks	2018-10-09 14:00:01 -07:00