mirror/dex - dex - xhrpb gitea

Commit Graph

Author	SHA1	Message	Date
Mark Sagi-Kazar	316da70545	refactor: use new health checker Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>	5 years ago
Mark Sagi-Kazar	d77147f7cf	refactor: fix router variable name Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>	5 years ago
Mark Sagi-Kazar	024f69b2c7	feat: add health check to telemetry server Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>	5 years ago
m.nabokikh	06c8ab5aa7	Fixes of naming and code style Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	5 years ago
m.nabokikh	91de99d57e	feat: Add refresh token expiration and rotation settings Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	5 years ago
Maksim Nabokikh	6664b5702d	Apply suggestions from code review Co-authored-by: Márk Sági-Kazár <sagikazarmark@users.noreply.github.com> Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	5 years ago
Maksim Nabokikh	65a8bf2af3	feat: graceful shutdown fixes Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	5 years ago
m.nabokikh	f82c217e12	feat: graceful shutdown Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	5 years ago
Mark Sagi-Kazar	6742008fc2	refactor: version command Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>	5 years ago
Mark Sagi-Kazar	c55d84b5d2	feat: add flags for bind address config options Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>	5 years ago
Mark Sagi-Kazar	cdefd1f788	refactor: serve command Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>	5 years ago
Martin Heide	4cb5577e11	Allow to disable os.ExpandEnv for storage + connector configs by env variable DEX_EXPAND_ENV = false Signed-off-by: Martin Heide <martin.heide@faro.com>	5 years ago
Mark Sagi-Kazar	349832b380	Run fixer Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>	5 years ago
m.nabokikh	1d83e4749d	Add gocritic Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	5 years ago
Mark Sagi-Kazar	6dadc26ca2	Move the example app to th examples folder Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>	6 years ago
justin-slowik	1ea2892b79	fix merge error in config.go Signed-off-by: justin-slowik <justin.slowik@thermofisher.com>	6 years ago
Justin Slowik	9bbdc721d5	Device flow token code exchange (#2 ) * Added /device/token handler with associated business logic and storage tests. Perform user code exchange, flag the device code as complete. Moved device handler code into its own file for cleanliness. Cleanup * Removed PKCE code * Rate limiting for /device/token endpoint based on ietf standards * Configurable Device expiry Signed-off-by: justin-slowik <justin.slowik@thermofisher.com>	6 years ago
krishnadurai	6698f1f80a	Corrects imports after merge Signed-off-by: justin-slowik <justin.slowik@thermofisher.com>	6 years ago
krishnadurai	776aa9dd53	Option to add staticPasswords from environment variables Signed-off-by: justin-slowik <justin.slowik@thermofisher.com>	6 years ago
Mark Sagi-Kazar	e84682d7b9	Add v2 api module	6 years ago
Tomasz Kleczek	c830d49884	allow no secret for static public clients For statically-configured public clients it should be allowed for both Secret and SecretEnv fields to be empty.	6 years ago
Yann Soubeyrand	99c3ec6820	Add ability to set ID and Secret from environment variables for static clients Having ID and Secret in clear inside configuration files for static clients is not ideal. This commit allows setting these from environment variables. Signed-off-by: Yann Soubeyrand <yann.soubeyrand@gmx.fr>	6 years ago
Zach Brown	13be146d2a	Add support for password grant #926	6 years ago
krishnadurai	321790870f	Fixes lint	6 years ago
krishnadurai	2d5619e4e8	Corrects imports after merge	6 years ago
Mark Sagi-Kazar	f141f2133b	Fix whitespace	6 years ago
Mark Sagi-Kazar	9bd5ae5197	Fix goimports	6 years ago
Mark Sagi-Kazar	142c96c210	Fix stylecheck	6 years ago
krishnadurai	1fd5dd7b0e	Change env var prefix to DEX and add to ci.yaml	6 years ago
krishnadurai	af9c2880a6	Corrects validation logic for static password check	6 years ago
krishnadurai	91cbd466a5	Option to add staticPasswords from environment variables	6 years ago
Steven Danna	46f48b33a1	Use a more conservative set of CipherSuites The default cipher suites used by Go include a number of ciphers that have known weaknesses. In addition to leaving users open to these weaknesses, the inclusion of these weaker ciphers causes problems with various automated scanning tools. This PR disables the CBC-mode, RC4, and 3DES ciphers included in the Go standard library by passing an explicit cipher suite list. The ciphers included here are more line with those recommended by Mozilla for "Intermediate" compatibility. [0] Performance Implications The Go standard library does capability-based cipher ordering, preferring AES ciphers if the underlying hardware has AES specific instructions. [1] Since all of the relevant code is internal modules, to do the same thing ourselves would require duplicating that code. Here, I've placed AES based ciphers first. Compatibility Implications This does reduce the number of clients who will be able to communicate with dex. [0] https://ssl-config.mozilla.org/#server=nginx&server-version=1.17.0&config=intermediate&hsts=false&ocsp=false [1] `a8c2e5c6ad/src/crypto/tls/common.go (L1091)` Signed-off-by: Steven Danna <steve@chef.io>	7 years ago
Michael Venezia	b65966d744	cmd/dex: adding reflection to grpc api, enabled through configuration	7 years ago
Marc-André Dufresne	0dbb642f2c	Add option to always display connector selection even if there's only one	7 years ago
Marc-André Dufresne	d458e882aa	Allow arbitrary data to be passed to templates	7 years ago
Stephan Renatus	ea7fd6d470	cmd/dex: adapt to prometheus API change Signed-off-by: Stephan Renatus <srenatus@chef.io>	7 years ago
Stephan Renatus	d9487e553b	*: fix some lint issues Mostly gathered these using golangci-lint's deadcode and ineffassign linters. Signed-off-by: Stephan Renatus <srenatus@chef.io>	7 years ago
Stephan Renatus	d7c7d42466	cmd/example-app: check all errors, pass claims as string to renderToken Signed-off-by: Stephan Renatus <srenatus@chef.io>	7 years ago
Stephan Renatus	c4e0587df1	cmd/example-app: expose connector_id As a piece of "living documentation" for #1481. Signed-off-by: Stephan Renatus <srenatus@chef.io>	7 years ago
Sabith K Soopy	6769a3b18e	Errors should not start with caps - https://github.com/dexidp/dex/pull/1264#discussion_r253264017 Signed-off-by: Sabith <sabithksme@gmail.com>	7 years ago
Sabith K Soopy	6ccb96ff74	Add some test to validate the configuration	7 years ago
Nandor Kracser	a572ad8fec	storage/sql: rework of the original MySQL PR	7 years ago
Pavel Borzenkov	e53bdfabb9	storage/sql: initial MySQL storage implementation It will be shared by both Postgres and MySQL configs. Signed-off-by: Pavel Borzenkov <pavel.borzenkov@gmail.com>	7 years ago
Yann Soubeyrand	c5f2871ab5	cmd/dex/serve.go: log static client name instead of ID Signed-off-by: Yann Soubeyrand <yann.soubeyrand@gmx.fr>	7 years ago
Mark Sagi-Kazar	06521ffa49	Remove the logrus logger wrapper	7 years ago
Mark Sagi-Kazar	be581fa7ff	Add logger interface and stop relying on Logrus directly	7 years ago
Haines Chan	18b6b34b67	Display access token in example app	7 years ago
Steven Danna	59f8b02d47	Set minimum TLS protocol version to TLSv1.2, set PreferServerCipherSuites Some environments are subject to strict rules about the permitted TLS protocol verion and available ciphers. Setting TLSv1.2 as the minimum version ensures we do not use weaker protocols. We've opted against making this configurable given the age of TLSv1.2 and the increasing push to deprecate TLSv1.1 and older. The PreferServerCipherSuites setting is also commonly flagged by SSL quality scanning tools. Since Go provides a relatively modern set of default ciphers by default, defaulting this to true is unlikely to make much practical difference. Signed-off-by: Steven Danna <steve@chef.io>	7 years ago
Haines Chan	b78b8aeee0	Replace "GET", "POST" to http.MethodGet and http.MethodPost	7 years ago
Maximilian Gaß	74f84ce0be	Change config test to non-default expiry settings	7 years ago

1 2 3 4

170 Commits (master)