Maksim Nabokikh
cf17fc68c8
test: update HandleCallback after merging OIDC PKCE ( #4572 )
...
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
3 weeks ago
Aljoscha Bollmann
83697b06a6
fix(server): respond with forbidden if failed to authenticate ( #4200 )
...
Signed-off-by: Aljoscha Bollmann <aljoscha.bollmann@proton.me>
3 weeks ago
Giovanni Vella
25591eeaf4
Add support to PKCE in OIDC connector ( #3777 )
...
Signed-off-by: johnvan7 <giovanni.vella98@gmail.com>
Signed-off-by: Giovanni Vella <giovanni.vella98@gmail.com>
3 weeks ago
Sean Liao
0b6a78397e
use slog for structured logging ( #3502 )
...
Signed-off-by: Sean Liao <sean+git@liao.dev>
2 years ago
Márk Sági-Kazár
b772ed55ba
feat(connector/microsoft): support custom api and graph URLs ( #3084 )
...
Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>
2 years ago
Daniel Lipovetsky
07d7913049
chore: Upgrade golangci-lint to v1.50.1 from v1.46.0 ( #2790 )
3 years ago
Bob Callaway
e1a407830d
add config to explicitly set scopes for microsoft connector ( #2582 )
...
Signed-off-by: Bob Callaway <bcallaway@google.com>
4 years ago
Joe Knight
27c25d00be
Add domainHint parameter to Microsoft Connector ( #2586 )
...
Signed-off-by: Joe Knight <josephtknight@users.noreply.github.com>
4 years ago
Erica Taylor
ba47aaba86
microsoft: Support setting the prompt type
...
Signed-off-by: Erica Taylor <ricky@wellplayed.games>
5 years ago
Maik Brauer
c55f17ea64
Adapted recommendation from Maintainer for PR #1888
...
Signed-off-by: Maik Brauer <maik.brauer@vodafone.com>
5 years ago
Maik Brauer
4d246bc9dc
Adapted recommendation from Maintainer for PR #1888
...
Signed-off-by: Maik Brauer <maik.brauer@vodafone.com>
5 years ago
Maik Brauer
eb9ef3b0ec
Added the possibility to acticate lowercase for UPN-Strings
...
Signed-off-by: Maik Brauer <maik.brauer@vodafone.com>
5 years ago
Josh Soref
791ad900cb
spelling: reuse
...
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
5 years ago
Carl Henrik Lunde
6104295d5e
microsoft: Add basic tests
...
Implemented similar to connector/github/github_test.go
6 years ago
Carl Henrik Lunde
5db29eb087
microsoft: Make interface testable
...
Enable testing by allowing overriding the API host name in tests
6 years ago
Maxime Desrosiers
458585008b
microsoft: option for group UUIDs instead of name and group whitelist
7 years ago
Stephan Renatus
51f50fcad8
connectors: refactor filter code into a helper package
...
I hope I didn't miss any :D
Signed-off-by: Stephan Renatus <srenatus@chef.io>
7 years ago
jimmythedog
b189d07d53
dexidp#1440 Add offline_access scope, if required
...
Without this scope, a refresh token will not be returned from Microsoft
7 years ago
Mark Sagi-Kazar
be581fa7ff
Add logger interface and stop relying on Logrus directly
7 years ago
Stephan Renatus
b9f6594bf0
*: github.com/coreos/dex -> github.com/dexidp/dex
...
Signed-off-by: Stephan Renatus <srenatus@chef.io>
8 years ago
Pavel Borzenkov
47df6ea2ff
connector/microsoft: add support for groups
...
Microsoft connector now provides support for 'groups' claim in case
'tenant' is configured in Dex config for the connector. It's possible to
deny user authentication if the user is not a member of at least one
configured groups.
Signed-off-by: Pavel Borzenkov <pavel.borzenkov@gmail.com>
8 years ago
Pavel Borzenkov
6193bf5566
connector: implement Microsoft connector
...
connector/microsoft implements authorization strategy via Microsoft's
OAuth2 endpoint + Graph API. It allows to choose what kind of tenants
are allowed to authenticate in Dex via Microsoft:
* common - both personal and business/school accounts
* organizations - only business/school accounts
* consumers - only personal accounts
* <tenant uuid> - only account of specific tenant
Signed-off-by: Pavel Borzenkov <pavel.borzenkov@gmail.com>
8 years ago