Eric Chiang 778812f63b oidc auth-n plugin: enforce email_verified claim ...

This change causes the OpenID Connect authenticator to start
enforcing the 'email_verified' claim.

https://openid.net/specs/openid-connect-core-1_0.html#StandardClaims

If the OIDC authenticator uses the 'email' claim as a user's password
and the 'email_verified' holds the value false, reject that
authentication attempt.

If 'email_verified' is true or not present, continue as before.

2016-12-09 14:22:17 -08:00

..

anytoken

autogenerated

2016-10-21 17:32:32 -07:00

oidc

oidc auth-n plugin: enforce email_verified claim

2016-12-09 14:22:17 -08:00

tokenfile

auth duplicate detect, add warning message

2016-12-07 09:06:39 +08:00

tokentest

autogenerated

2016-10-21 17:32:32 -07:00

webhook

refactor: update bazel, codec, and gofmt

2016-12-03 19:10:53 -05:00