feat: update the protocol by including team & handle in the client dp…

…op token, verifying the handle in the dpop challenge
wireapp · Nov 22, 2023 · ee2a2e0 · ee2a2e0
1 parent c5ababc
commit ee2a2e0
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 1 deletion.
diff --git a/acme/challenge.go b/acme/challenge.go
@@ -512,6 +512,8 @@ func wireDPOP01Validate(ctx context.Context, ch *Challenge, db DB, jwk *jose.JSO
 		"verify-access",
 		"--client-id",
 		challengeValues.ClientID,
+		"--handle",
+		challengeValues.Handle,
 		"--challenge",
 		ch.Token,
 		"--leeway",

diff --git a/docker/Dockerfile.step-ca b/docker/Dockerfile.step-ca
@@ -12,7 +12,7 @@ RUN make V=1 bin/step-ca
 FROM rust:alpine AS rustbuilder
 
 RUN apk add --no-cache git musl-dev perl
-RUN git clone https://github.com/wireapp/rusty-jwt-tools.git /src
+RUN git clone --branch feat/dpop-handle-teams https://github.com/wireapp/rusty-jwt-tools.git /src
 
 RUN cd /src && \
     cargo build --release --verbose