seaweedfs

Github-Mirror/seaweedfs

0 Fork 0

mirror of https://github.com/seaweedfs/seaweedfs.git synced 2026-10-25 14:30:43 +01:00

Files

T

History

Chris LuandDevin 8844d9823f iam/oidc: wrap the jti replay cache in its own type (#12017 )

* iam/oidc: wrap the jti replay cache in its own type

The replay-protection state lived as ten fields and nine methods spread
across OIDCProvider. jtiReplayCache now owns the store, count, bound,
sweep scheduling, and cleanup worker; the provider keeps a single jti
field and delegates configure, consume, stop, adopt, and merge.

* iam/oidc: lazily allocate the jti replay cache

A zero-value OIDCProvider left jti nil, so Initialize, single-use
validation, Shutdown, and the replay-state handoffs panicked on a nil
cache. Allocate the cache through a sync.Once-guarded getter instead.

Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>

---------

Co-authored-by: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>

2026-10-24 07:03:42 -07:00

integration

iam/oidc: reject reused jti claims with a bounded replay cache (#11936 )

2026-10-23 00:46:14 -07:00

ldap

Add AssumeRole and AssumeRoleWithLDAPIdentity STS actions (#8003 )

2026-01-12 10:45:24 -08:00

oidc

iam/oidc: wrap the jti replay cache in its own type (#12017 )

2026-10-24 07:03:42 -07:00

policy

iam: scope CreateServiceAccount's ParentUser by policy resource (#11736 )