Brian Joerger 4690eeab10 Keep App Session secrets secret (#39853) ...

* Don't reveal app session secrets to users.

* Fix panic in WebSessionV2.WithoutSecrets.

* Use client's key for azure jwt tokens

Proxy verifies and signs jwt tokens

Ensure backwards compatibility

* Remove unused GetAppSession methods.

* Move azure jwt token resigning logic into the session transport's
rewriteRequest method with an improved Azure app check

Fix GetAppSession backward compatibility check

* Add test.

* Address lint comments.

* Address parseBearerToken comment.

* apply suggestion about indentation.

2024-03-29 23:31:31 +00:00

..

auth.go

Move TokenLenBytes to defaults package (#37254)

2024-01-25 18:30:43 +00:00

handler_test.go

Keep App Session secrets secret (#39853)

2024-03-29 23:31:31 +00:00

handler.go

Replace constants from trace with equivalents defined in teleport (#39307)

2024-03-14 13:04:29 +00:00

logout.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

match_test.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

match.go

Use pkg slices from the standard library (#35905)

2023-12-19 23:06:53 +00:00

middleware.go

Fix app redirection loop on browser's incognito mode and 3rd party cookie block (#30321)

2024-01-12 22:39:38 +00:00

redirect.go

Fix app redirection loop on browser's incognito mode and 3rd party cookie block (#30321)

2024-01-12 22:39:38 +00:00

session.go

Keep App Session secrets secret (#39853)

2024-03-29 23:31:31 +00:00

transport_test.go

Keep App Session secrets secret (#39853)

2024-03-29 23:31:31 +00:00

transport.go

Keep App Session secrets secret (#39853)

2024-03-29 23:31:31 +00:00