Repository navigation
iam-iac - #147
Draft
general-kroll-4-life wants to merge 6 commits into
Draft
iam-iac#147general-kroll-4-life wants to merge 6 commits into
general-kroll-4-life wants to merge 6 commits into
Conversation
Summary: - Support for simple access management. - PReview support for uplifted IAC. - Added robot test `JWT CLI Authenticates And Uses Directory Groups`. - Added robot test `JWT Supports Every Configured Signing Algorithm`. - Added robot test `JWT HTTPS Isolates Callers And Refreshes Membership`. - Added robot test `JWT Shell Uses The Local Credential`. - Added robot test `JWT MCP Stdio Uses The Local Credential`. - Added robot test `Static Bearer CLI Verifies A Provisioned Digest`. - Added robot test `Static Bearer HTTPS Isolates Callers And Refreshes Membership`. - Added robot test `Static Bearer Shell Uses The Local Credential`. - Added robot test `Static Bearer MCP Stdio Uses The Local Credential`. - Added robot test `MTLS HTTPS Verifies Client Certificates And SAN Identity`. - Added robot test `MTLS HTTPS Supports A Unique DNS SAN Identity`. - Added robot test `Local OS CLI Uses The Effective User And Directory Groups`. - Added robot test `Local OS Shell Uses The Effective User`. - Added robot test `Local OS MCP Stdio Uses The Effective User`. - Added robot test `Local OS Cannot Authenticate Remote HTTP Callers`. - Added robot test `Access Configuration Accepts A Strict Path Envelope`. - Added robot test `Reader Policy Denies Effects And Protects Directory Tables`. - Added robot test `Directory Revocation And Malformed Attributes Fail Closed`. - Added robot test `Protected IAC Applies Updates Prunes And Confines State`. - Added robot test `Disabled Caller Access Preserves Legacy Queries`. - Added robot test `JWT Rejects Missing Token`. - Added robot test `JWT Rejects Invalid Signature`. - Added robot test `JWT Rejects Wrong Issuer`. - Added robot test `JWT Rejects Wrong Audience`. - Added robot test `JWT Rejects Missing Expiry`. - Added robot test `JWT Rejects Expired Token`. - Added robot test `JWT Rejects Future Not Before`. - Added robot test `JWT Rejects Future Issued At`. - Added robot test `JWT Rejects Unknown Key ID`. - Added robot test `JWT Rejects Unknown Identity`. - Added robot test `Documented JWT Walkthrough Works`. - Added robot test `Documented Static Bearer Walkthrough Works`. - Added robot test `Documented MTLS Walkthrough Works`. - Added robot test `Documented Local OS Walkthrough Works`.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary:
robottestCaller Access Uses Configured RDBMS Directory And Denies Unauthorized Effects.Description
Type of change
Issues referenced.
Evidence
Checklist:
Variations
Tech Debt