go-oidfed 0.3.0

This release mainly updates the lib to the latest spec.

This includes some changes to the metadata policies. The test vectors on https://connect2id.com/blog/metadata-policy-test-vectors-openid-federation are passing with the updated implementation.

Custom metadata policy operator would need to be updated.

Some smaller changes include:

• Updating dependencies
• Allow logo_uri config option for the example TA and RP
• Allow client_name config option for the example RP
• Allow self-issued trust marks in the trust mark refresher.

go-oidfed 0.2.1

Increases the go-set dependency version to fix builds on some architectures

go-oidfed 0.2.0

A lot of new features have been added and most of the spec should be implemented.

We also implemented a federation entity that can be used to build trust anchors, intermediates, and trust mark issuers.
The examples contain an example RP as well as configurable federation entity.

Here is an overview of what is supported:

• Issuing OpenID Configuration
• Trust Chain Building
• Trust Chain Verification
• Use Constraints
• Applying Metadata Policies
• Support for Custom Metadata Policy Operators
• Filter Trust Chains
• Configure Trust Anchors
• Set Authority Hints
• Use a resolve endpoint for resolving
• Resolve Endpoint
• IA Fetch Endpoint
• IA Listing Endpoint
• Trust Mark Endpoint
• Trust Marked Entities Endpoint
• Trust Mark Status Endpoint
• Trust Mark Owner Delegation
• Trust Mark JWT Verification including Delegation
• JWT Type Verification
• Automatic Client Registration
• Authorization Code Flow with Automatic Client Registration using oidc key from jwks
• Automatic enrollment of Entities using configurable checks
• Request Enrollment
• Automatic issuance of Trustmarks using configurable checks
• Request to become entitled for a Trust Mark
• Automatically refresh trust marks in Entity Configuration

go-oidcfed 0.1.0

This is the first release of go-oidcfed, a (WIP) implementation of OpenID Connect Federation in the go language with the goal to enable go applications to make use of OIDC federations.

The implementation mainly focuses on the Relying Party side, but can also be utilized for other entity types. The examples directory contains example implementations for a Relying Party and an Intermediate Authority / Trust Anchor. Those serve as examples, they are by no means production ready, but can serve as a good starting point on how the oidcfed library can be used to implement such entities.

The library is not considered stable and some features might be missing. We encourage everybody to give feedback on things that are missing, not working, or weird, also suggestions for improvements and of course we are open for pull requests.