teleport

mirror of https://github.com/gravitational/teleport.git synced 2026-10-12 02:15:01 +00:00

Files

T

History

Tim Buckley 4307bd6aae Caching OIDC validator improvements (#67913 )

* Caching OIDC validator improvements

This makes a number of improvements to the caching OIDC validator to
facilitate the upcoming `generic_oidc` join method, including:
- Added the ability to specify HTTP client options to enable use of
  custom CA certs
- Added support for custom caching keys so we can create new HTTP
  clients if users change their configured custom CA cert
- Moved e/'s `OIDCRoundTripper` to OSS and uses it by default in the
  caching validator. This ensures our clients will not try to read a
  problematically large response.

* Fix lints

* Return an error instead of draining after exceeding response size

This slightly changes the round tripper to return an error instead of
trying to drain the connection. Connections are (fairly) cheap and if
the max size is exceeded we can just raise an error and kill the
connection.

* Add test for explicit error behavior

* Apply suggestions from code review

2026-06-26 02:57:09 +00:00

fakeissuer

tctl oidc helper (#58455 )

2025-09-22 20:42:45 +00:00

caching_token_validator_test.go

Caching OIDC validator improvements (#67913 )

2026-06-26 02:57:09 +00:00

caching_token_validator.go

Caching OIDC validator improvements (#67913 )

2026-06-26 02:57:09 +00:00

round_tripper_test.go

Caching OIDC validator improvements (#67913 )