mirror/dex - dex - xhrpb gitea

Commit Graph

Author	SHA1	Message	Date
Aljoscha Bollmann	83697b06a6	fix(server): respond with forbidden if failed to authenticate (#4200 ) Signed-off-by: Aljoscha Bollmann <aljoscha.bollmann@proton.me>	3 weeks ago
Giovanni Vella	25591eeaf4	Add support to PKCE in OIDC connector (#3777 ) Signed-off-by: johnvan7 <giovanni.vella98@gmail.com> Signed-off-by: Giovanni Vella <giovanni.vella98@gmail.com>	3 weeks ago
Sean Liao	dcf7b18510	OAuth 2.0 Token Exchange (#2806 ) Signed-off-by: Sean Liao <sean+git@liao.dev> Co-authored-by: Maksim Nabokikh <max.nabokih@gmail.com>	3 years ago
Daniel Lipovetsky	07d7913049	chore: Upgrade golangci-lint to v1.50.1 from v1.46.0 (#2790 )	3 years ago
Nandor Kracser	c1b421fa04	add preffered_username to idToken Signed-off-by: Nandor Kracser <bonifaido@gmail.com>	6 years ago
mkontani	6ae76662de	fix ssoURL	7 years ago
joannano	88d1e2b041	keystone: test cases, refactoring and cleanup	7 years ago
knangia	0774a89066	keystone: squashed changes from knangia/dex	7 years ago
Stephan Renatus	b09a13458f	password connectors: allow overriding the username attribute (password prompt) This allows users of the LDAP connector to give users of Dex' login prompt an idea of what they should enter for a username. Before, irregardless of how the LDAP connector was set up, the prompt was Username [_________________] Password [_________________] Now, this is configurable, and can be used to say "MyCorp SSO Login" if that's what it is. If it's not configured, it will default to "Username". For the passwordDB connector (local users), it is set to "Email Address", since this is what it uses. Signed-off-by: Stephan Renatus <srenatus@chef.io>	8 years ago
Eric Chiang	50b223a9db	*: validate InResponseTo SAML response field and make issuer optional	9 years ago
Eric Chiang	777eeafabc	*: update go-oidc and use standard library's context package	9 years ago
Eric Chiang	31dfb54b6f	connector: add a SAML connector	9 years ago
Eric Chiang	952e0f81f5	connector: add RefreshConnector interface	9 years ago
Eric Chiang	a3235d022a	*: verify "state" field before passing request to callback connectors Let the server handle the state token instead of the connector. As a result it can throw out bad requests earlier. It can also use that token to determine which connector was used to generate the request allowing all connectors to share the same callback URL. Callbacks now all look like: https://dex.example.com/callback Instead of: https://dex.example.com/callback/(connector id) Even when multiple connectors are being used.	10 years ago
Eric Chiang	f4c5722e42	*: connectors use a different identity object than storage	10 years ago
Eric Chiang	cab271f304	initial commit	10 years ago

14 Commits (master)