Tim Buckley 7b4ec8476b Port circleci join method to new join service (#61130) ...

* Port `circleci` join method to new join service

This ports the `circleci` join method to the new join service. The
`circleci` package has been moved to `lib/join` with minimal changes,
and a small compatibility shim has been added to reuse the same
verification logic between the legacy and new entrypoints.

See also: [RFD 27e](https://github.com/gravitational/teleport.e/blob/master/rfd/0027e-auth-assigned-uuids.md)

* Fix imports

* Whitelist circleci in the new joinclient

* SSRF-harden issuerURL and remove unnecessary clock

* Remove unnecessary circleci validator wrapper funciton

* Move redefined errMockInvalid to spacelift for now

* Fix issuerURL plumbing for tests

The change to remove template strings to harden against SSRF broke
tests that depended on this functionality. This reintroduces a
non-templated issuerURL, and leaves it to callers to call
`IssuerURL()`.

* Don't export issuerURL

2025-11-18 02:42:24 +00:00

..

circleci.go

Port circleci join method to new join service (#61130)

2025-11-18 02:42:24 +00:00

token_source_test.go

Port circleci join method to new join service (#61130)

2025-11-18 02:42:24 +00:00

token_source.go

Port circleci join method to new join service (#61130)

2025-11-18 02:42:24 +00:00

token_validator_test.go

Port circleci join method to new join service (#61130)

2025-11-18 02:42:24 +00:00

token_validator.go

Port circleci join method to new join service (#61130)

2025-11-18 02:42:24 +00:00