go-oidfed 0.2.0
A lot of new features have been added and most of the spec should be implemented.
We also implemented a federation entity that can be used to build trust anchors, intermediates, and trust mark issuers.
The examples contain an example RP as well as configurable federation entity.
Here is an overview of what is supported:
- Issuing OpenID Configuration
- Trust Chain Building
- Trust Chain Verification
- Use Constraints
- Applying Metadata Policies
- Support for Custom Metadata Policy Operators
- Filter Trust Chains
- Configure Trust Anchors
- Set Authority Hints
- Use a resolve endpoint for resolving
- Resolve Endpoint
- IA Fetch Endpoint
- IA Listing Endpoint
- Trust Mark Endpoint
- Trust Marked Entities Endpoint
- Trust Mark Status Endpoint
- Trust Mark Owner Delegation
- Trust Mark JWT Verification including Delegation
- JWT Type Verification
- Automatic Client Registration
- Authorization Code Flow with Automatic Client Registration using oidc key from jwks
- Automatic enrollment of Entities using configurable checks
- Request Enrollment
- Automatic issuance of Trustmarks using configurable checks
- Request to become entitled for a Trust Mark
- Automatically refresh trust marks in Entity Configuration