{"payload":{"feedbackUrl":"https://github.com/orgs/community/discussions/53140","repo":{"id":692189356,"defaultBranch":"main","name":"macaroon","ownerLogin":"superfly","currentUserCanPush":false,"isFork":false,"isEmpty":false,"createdAt":"2023-09-15T19:05:40.000Z","ownerAvatar":"https://avatars.githubusercontent.com/u/22525303?v=4","public":true,"private":false,"isOrgOwned":true},"refInfo":{"name":"","listCacheKey":"v0:1715287310.0","currentOid":""},"activityList":{"items":[{"before":"e33f8cf62f8592f31d668a3bd31aa20dc9858ff6","after":"7fd079e5cfe39a7062ad0dcaa263e828994a7166","ref":"refs/heads/i32-rs","pushedAt":"2024-05-09T20:43:09.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"btoews","name":"Ben Toews","path":"/btoews","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1144197?s=80&v=4"},"commit":{"message":"resset: allow any integer type ID","shortMessageHtmlLink":"resset: allow any integer type ID"}},{"before":null,"after":"e33f8cf62f8592f31d668a3bd31aa20dc9858ff6","ref":"refs/heads/i32-rs","pushedAt":"2024-05-09T20:41:50.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"btoews","name":"Ben Toews","path":"/btoews","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1144197?s=80&v=4"},"commit":{"message":"resset: allow any integer type ID","shortMessageHtmlLink":"resset: allow any integer type ID"}},{"before":"d640a69989e6196f2c663b09cfaf4a8d11c6e236","after":null,"ref":"refs/tags/v.0.2.13","pushedAt":"2024-04-17T18:18:35.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"timflyio","name":"Tim","path":"/timflyio","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/165851289?s=80&v=4"}},{"before":"210de90b2a52ca404144f6658834526d205392b8","after":null,"ref":"refs/heads/tim/command-caveat","pushedAt":"2024-04-17T18:15:33.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"timflyio","name":"Tim","path":"/timflyio","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/165851289?s=80&v=4"}},{"before":"c100a28e108c914104204ac024e770cc7d915b5e","after":"d640a69989e6196f2c663b09cfaf4a8d11c6e236","ref":"refs/heads/main","pushedAt":"2024-04-17T18:14:00.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"timflyio","name":"Tim","path":"/timflyio","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/165851289?s=80&v=4"},"commit":{"message":"Add caveats to restrict command execution. (#21)\n\n- Add Commands caveat to restrict commands to a list of command vectors which must prefix match or match exactly.\r\n - Allow it to work with IfPresent.\r\n- Update Mutations to work with IfPresent.\r\n- Add tests for Commands caveat, including with IfPresent.","shortMessageHtmlLink":"Add caveats to restrict command execution. (#21)"}},{"before":"9b9cd211abbe43fa3d1ce1dc2c3087a3122c0857","after":"210de90b2a52ca404144f6658834526d205392b8","ref":"refs/heads/tim/command-caveat","pushedAt":"2024-04-16T21:52:17.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"timflyio","name":"Tim","path":"/timflyio","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/165851289?s=80&v=4"},"commit":{"message":"address ben's comments.","shortMessageHtmlLink":"address ben's comments."}},{"before":"89bc0d46478eda3be2aa32cf0041405a996b432d","after":"9b9cd211abbe43fa3d1ce1dc2c3087a3122c0857","ref":"refs/heads/tim/command-caveat","pushedAt":"2024-04-16T19:38:19.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"timflyio","name":"Tim","path":"/timflyio","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/165851289?s=80&v=4"},"commit":{"message":"Make commands caveat more general.\n\nUnify Commands and CommandsArgs caveats with a more general defnition for Commands that allows exact argument matching, or prefix matching. This naturally supports rejecting all commands and allowing all commands using zero-values for Commands and Command respectively.","shortMessageHtmlLink":"Make commands caveat more general."}},{"before":"50caeea240049a25c2895fbece73faa6721742f5","after":"89bc0d46478eda3be2aa32cf0041405a996b432d","ref":"refs/heads/tim/command-caveat","pushedAt":"2024-04-16T04:51:08.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"timflyio","name":"Tim","path":"/timflyio","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/165851289?s=80&v=4"},"commit":{"message":"add test for if-present on command caveat","shortMessageHtmlLink":"add test for if-present on command caveat"}},{"before":null,"after":"50caeea240049a25c2895fbece73faa6721742f5","ref":"refs/heads/tim/command-caveat","pushedAt":"2024-04-15T23:00:11.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"timflyio","name":"Tim","path":"/timflyio","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/165851289?s=80&v=4"},"commit":{"message":"Add caveats to restrict command execution.\n\n- Add Commands and CommandsArgs caveats\n - Commands restricts the program name only.\n - CommandsArgs also restricts the command arguments.\n - Both are allowed within IfPresent.\n- Update Mutations to work with IfPresent.","shortMessageHtmlLink":"Add caveats to restrict command execution."}},{"before":"7052788a7d9e400d74b1e6a1fbe8f23c1b19a5c0","after":"c100a28e108c914104204ac024e770cc7d915b5e","ref":"refs/heads/main","pushedAt":"2024-03-11T15:12:32.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"btoews","name":"Ben Toews","path":"/btoews","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1144197?s=80&v=4"},"commit":{"message":"better error messages for flyio access interfaces","shortMessageHtmlLink":"better error messages for flyio access interfaces"}},{"before":"5436289152b02384542c6847fc70dd2825af8736","after":"7052788a7d9e400d74b1e6a1fbe8f23c1b19a5c0","ref":"refs/heads/main","pushedAt":"2024-02-22T18:26:00.000Z","pushType":"pr_merge","commitsCount":8,"pusher":{"login":"btoews","name":"Ben Toews","path":"/btoews","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1144197?s=80&v=4"},"commit":{"message":"Merge pull request #17 from superfly/misc\n\nMisc","shortMessageHtmlLink":"Merge pull request #17 from superfly/misc"}},{"before":"3f9939925e52f2dca686b281481bbad1503c7418","after":"5436289152b02384542c6847fc70dd2825af8736","ref":"refs/heads/main","pushedAt":"2024-02-16T15:49:14.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"btoews","name":"Ben Toews","path":"/btoews","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1144197?s=80&v=4"},"commit":{"message":"examples of making fly.io tokens","shortMessageHtmlLink":"examples of making fly.io tokens"}},{"before":"ae080f562d41eb3db5fbca324de76cc246db2a64","after":"3918b4e038dc4b7c923e8edcdd74507d4edb21b2","ref":"refs/heads/misc","pushedAt":"2024-02-02T21:41:12.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"btoews","name":"Ben Toews","path":"/btoews","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1144197?s=80&v=4"},"commit":{"message":"flyio: account for Access impl that doesn't require org id","shortMessageHtmlLink":"flyio: account for Access impl that doesn't require org id"}},{"before":"8d494b3c82a68f4b832f75f66ae7fdb8d4c8931a","after":"ae080f562d41eb3db5fbca324de76cc246db2a64","ref":"refs/heads/misc","pushedAt":"2024-02-01T17:01:36.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"btoews","name":"Ben Toews","path":"/btoews","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1144197?s=80&v=4"},"commit":{"message":"implement Caveat for resset.Action\n\nthis allows restricting access without specifying a resource","shortMessageHtmlLink":"implement Caveat for resset.Action"}},{"before":"498b4c2e40052f53e9002dc0d95e92c5633d424b","after":"8d494b3c82a68f4b832f75f66ae7fdb8d4c8931a","ref":"refs/heads/misc","pushedAt":"2024-02-01T16:59:54.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"btoews","name":"Ben Toews","path":"/btoews","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1144197?s=80&v=4"},"commit":{"message":"implement Caveat for resset.Action\n\nthis allows restricting access without specifying a resource","shortMessageHtmlLink":"implement Caveat for resset.Action"}},{"before":"e761a263964aa892142a5a2b65ffbd6047a65cb7","after":"3f9939925e52f2dca686b281481bbad1503c7418","ref":"refs/heads/main","pushedAt":"2024-01-31T18:22:17.000Z","pushType":"pr_merge","commitsCount":2,"pusher":{"login":"btoews","name":"Ben Toews","path":"/btoews","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1144197?s=80&v=4"},"commit":{"message":"Merge pull request #18 from Wingysam/patch-1\n\nCorrect \"an interesting to read\"","shortMessageHtmlLink":"Merge pull request #18 from Wingysam/patch-1"}},{"before":"03e1a06687890e04bcd0b83b85ae2e02eadbb067","after":"498b4c2e40052f53e9002dc0d95e92c5633d424b","ref":"refs/heads/misc","pushedAt":"2024-01-31T15:45:59.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"btoews","name":"Ben Toews","path":"/btoews","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1144197?s=80&v=4"},"commit":{"message":"implement Caveat for resset.Action\n\nthis allows restricting access without specifying a resource","shortMessageHtmlLink":"implement Caveat for resset.Action"}},{"before":"c51be8e31bb10cf171b58aabb75d300134ea60cf","after":"03e1a06687890e04bcd0b83b85ae2e02eadbb067","ref":"refs/heads/misc","pushedAt":"2024-01-30T21:59:16.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"btoews","name":"Ben Toews","path":"/btoews","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1144197?s=80&v=4"},"commit":{"message":"reserve some caveat type numbers","shortMessageHtmlLink":"reserve some caveat type numbers"}},{"before":null,"after":"c51be8e31bb10cf171b58aabb75d300134ea60cf","ref":"refs/heads/misc","pushedAt":"2024-01-30T16:22:34.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"btoews","name":"Ben Toews","path":"/btoews","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1144197?s=80&v=4"},"commit":{"message":"allow other Access implementations to work with flyio caveats","shortMessageHtmlLink":"allow other Access implementations to work with flyio caveats"}},{"before":"445ad608cc02a803d3d8ed0bd9ce91f5a0c7217f","after":"47e052031c8fe1e07fabc12a374f5d823f6d6c39","ref":"refs/heads/lax-decoding","pushedAt":"2024-01-29T18:02:03.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"btoews","name":"Ben Toews","path":"/btoews","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1144197?s=80&v=4"},"commit":{"message":"don't assume canonical encoding of macaroons/caveats\n\nWhat is this, SAML? Re-encoding for signature validation opens the door\nfor vulnerabilities. It also is a pain to make sure that implementations\nin other languages encode macaroons/caveats identically to Go.","shortMessageHtmlLink":"don't assume canonical encoding of macaroons/caveats"}},{"before":null,"after":"445ad608cc02a803d3d8ed0bd9ce91f5a0c7217f","ref":"refs/heads/lax-decoding","pushedAt":"2024-01-29T17:58:30.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"btoews","name":"Ben Toews","path":"/btoews","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1144197?s=80&v=4"},"commit":{"message":"don't assume canonical encoding of macaroons/caveats\n\nWhat is this, SAML? Re-encoding for signature validation opens the door\nfor vulnerabilities. It also is a pain to make sure that implementations\nin other languages encode macaroons/caveats identically to Go.","shortMessageHtmlLink":"don't assume canonical encoding of macaroons/caveats"}},{"before":"b0ac63c423f6419735fa749d89e20384291333c4","after":"e761a263964aa892142a5a2b65ffbd6047a65cb7","ref":"refs/heads/main","pushedAt":"2024-01-23T22:28:40.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"btoews","name":"Ben Toews","path":"/btoews","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1144197?s=80&v=4"},"commit":{"message":"allow -count to be passed to `go test`","shortMessageHtmlLink":"allow -count to be passed to go test"}},{"before":"64758abf42bb39f620b50971cd5ea2f5f8767ec4","after":null,"ref":"refs/heads/multi-sso","pushedAt":"2024-01-23T22:20:20.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"btoews","name":"Ben Toews","path":"/btoews","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1144197?s=80&v=4"}},{"before":"b578efc07b13bbe60cde55d88dad2b0916796f16","after":"b0ac63c423f6419735fa749d89e20384291333c4","ref":"refs/heads/main","pushedAt":"2024-01-23T22:20:16.000Z","pushType":"pr_merge","commitsCount":3,"pusher":{"login":"btoews","name":"Ben Toews","path":"/btoews","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1144197?s=80&v=4"},"commit":{"message":"Merge pull request #15 from superfly/multi-sso\n\nallow auth.DischargeRequest to contain multiple identities","shortMessageHtmlLink":"Merge pull request #15 from superfly/multi-sso"}},{"before":"43932edd51170ae6267a4d23162d009dfd98f737","after":"64758abf42bb39f620b50971cd5ea2f5f8767ec4","ref":"refs/heads/multi-sso","pushedAt":"2024-01-23T22:15:29.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"btoews","name":"Ben Toews","path":"/btoews","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1144197?s=80&v=4"},"commit":{"message":"don't parallelize discharges if we have a cookie jar","shortMessageHtmlLink":"don't parallelize discharges if we have a cookie jar"}},{"before":null,"after":"43932edd51170ae6267a4d23162d009dfd98f737","ref":"refs/heads/multi-sso","pushedAt":"2024-01-19T20:32:53.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"btoews","name":"Ben Toews","path":"/btoews","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1144197?s=80&v=4"},"commit":{"message":"allow auth.DischargeRequest to contain multiple identities","shortMessageHtmlLink":"allow auth.DischargeRequest to contain multiple identities"}},{"before":"9f2f25151ee6201894780509084d76c56e988649","after":"b578efc07b13bbe60cde55d88dad2b0916796f16","ref":"refs/heads/main","pushedAt":"2023-12-14T21:37:05.000Z","pushType":"push","commitsCount":2,"pusher":{"login":"btoews","name":"Ben Toews","path":"/btoews","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1144197?s=80&v=4"},"commit":{"message":"add Organization caveat in test vectors","shortMessageHtmlLink":"add Organization caveat in test vectors"}},{"before":"08309eecbfdd95267c3b77d036151000ef9a4f99","after":"9f2f25151ee6201894780509084d76c56e988649","ref":"refs/heads/main","pushedAt":"2023-12-04T19:05:23.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"btoews","name":"Ben Toews","path":"/btoews","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1144197?s=80&v=4"},"commit":{"message":"hack: put more data in auth.DischargeRequest","shortMessageHtmlLink":"hack: put more data in auth.DischargeRequest"}},{"before":"afbe418abea43fc7bf7d610c17f719b4f5e1adfa","after":"08309eecbfdd95267c3b77d036151000ef9a4f99","ref":"refs/heads/main","pushedAt":"2023-12-04T18:09:59.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"btoews","name":"Ben Toews","path":"/btoews","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1144197?s=80&v=4"},"commit":{"message":"attestations for auth'ed user","shortMessageHtmlLink":"attestations for auth'ed user"}},{"before":"e7eea4e116c74def8e4af2197d67880eaa9a1af2","after":"afbe418abea43fc7bf7d610c17f719b4f5e1adfa","ref":"refs/heads/main","pushedAt":"2023-11-29T18:52:14.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"btoews","name":"Ben Toews","path":"/btoews","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1144197?s=80&v=4"},"commit":{"message":"maintain go 1.20 compatability","shortMessageHtmlLink":"maintain go 1.20 compatability"}}],"hasNextPage":true,"hasPreviousPage":false,"activityType":"all","actor":null,"timePeriod":"all","sort":"DESC","perPage":30,"cursor":"djE6ks8AAAAERf4OuQA","startCursor":null,"endCursor":null}},"title":"Activity ยท superfly/macaroon"}