Search results

Wrap console session tokens and access tokens in <code>secrect::SecretString</code> or similar

authnAuthenticationAuthentication

customerFor any bug reports or feature requests tied to customer requestsFor any bug reports or feature requests tied to customer requests

enhancementNew feature or request.New feature or request.

good first issueIssues that are good for learning the codebaseIssues that are good for learning the codebase

securityRelated to security.Related to security.

Status: Open.

Enhancement

#8018 In oxidecomputer/omicron;

· inickles opened on Apr 21, 2025

Prevent SAML replay attacks by tracking used assertion IDs.

authnAuthenticationAuthentication

securityRelated to security.Related to security.

Status: Open.

#7820 In oxidecomputer/omicron;

· inickles opened on Mar 18, 2025

Allow operator to set expiration period for sessions and API tokens

authnAuthenticationAuthentication

customerFor any bug reports or feature requests tied to customer requestsFor any bug reports or feature requests tied to customer requests

securityRelated to security.Related to security.

Status: Open.

Enhancement

#7475 In oxidecomputer/omicron;

· wfchandler opened on Feb 4, 2025

 ·  

16

OMDB should participate in authz

authnAuthenticationAuthentication

developmentBugs, paper cuts, feature requests, or other thoughts on making omicron development betterBugs, paper cuts, feature requests, or other thoughts on making omicron development better

good first issueIssues that are good for learning the codebaseIssues that are good for learning the codebase

Status: Open.

#6600 In oxidecomputer/omicron;

· hawkw opened on Sep 18, 2024

Add authz checks on non-external DataStore methods

authnAuthenticationAuthentication

databaseRelated to database accessRelated to database access

Status: Open.

#6528 In oxidecomputer/omicron;

· jgallagher opened on Sep 5, 2024

 ·  

MVP

Service account support

authnAuthenticationAuthentication

customerFor any bug reports or feature requests tied to customer requestsFor any bug reports or feature requests tied to customer requests

Status: Open.

Enhancement

#5861 In oxidecomputer/omicron;

· askfongjojo opened on Jun 5, 2024

Operator API for disabling/removing device tokens

authnAuthenticationAuthentication

customerFor any bug reports or feature requests tied to customer requestsFor any bug reports or feature requests tied to customer requests

Status: Open.

Enhancement

#3892 In oxidecomputer/omicron;

· askfongjojo opened on Aug 17, 2023

 ·  

15

authn should validate that the user belongs to this endpoint's Silo

authnAuthenticationAuthentication

securityRelated to security.Related to security.

Status: Open.

#3529 In oxidecomputer/omicron;

· davepacheco opened on Jul 7, 2023

 ·  

MVP+1

implement OAuth refresh tokens

authnAuthenticationAuthentication

idp

securityRelated to security.Related to security.

Status: Open.

#2306 In oxidecomputer/omicron;

· davepacheco opened on Feb 2, 2023

 ·  

MVP

request log entries should include more authn, authz info

authnAuthenticationAuthentication

securityRelated to security.Related to security.

Status: Open.

#1377 In oxidecomputer/omicron;

· davepacheco opened on Jul 7, 2022