mirror/dex - dex - xhrpb gitea

Commit Graph

Author	SHA1	Message	Date
Rui Yang	41207ba265	Combine #1691 and #1776 to unify OIDC provider claim mapping add tests for groups key mapping Signed-off-by: Rui Yang <ruiya@vmware.com>	6 years ago
Scott Lemmon	a783667c57	Add groupsClaimMapping to the OIDC connector The groupsClaimMapping setting allows one to specify which claim to pull group information from the OIDC provider. Previously it assumed group information was always in the "groups" claim, but that isn't the case for many OIDC providers (such as AWS Cognito using the "cognito:groups" claim instead) Signed-off-by: Scott Lemmon <slemmon@aurora.tech> Signed-off-by: Rui Yang <ruiya@vmware.com>	6 years ago
Cyrille Nofficial	61312e726e	Add parameter configuration to override email claim key Signed-off-by: Rui Yang <ruiya@vmware.com>	6 years ago
Rui Yang	52c39fb130	check if upstream contains preferrend username claim first Signed-off-by: Rui Yang <ryang@pivotal.io> Signed-off-by: Rui Yang <ruiya@vmware.com>	6 years ago
Rui Yang	4812079647	add tests when preferred username key is not set Signed-off-by: Rui Yang <ruiya@vmware.com>	6 years ago
Rui Yang	d9afb7e59c	default to preferred_username claim Signed-off-by: Rui Yang <ruiya@vmware.com>	6 years ago
Josh Winters	9a4e0fcd00	Make OIDC username key configurable Signed-off-by: Josh Winters <jwinters@pivotal.io> Co-authored-by: Mark Huang <mhuang@pivotal.io> Signed-off-by: Rui Yang <ruiya@vmware.com>	6 years ago
batara666	6499f5bfd3	ldap.go: drop else on returned if block	6 years ago
techknowlogick	0a9f56527e	Add Gitea connector (#1715 ) * Add Gitea connector * Add details to readme * resolve lint issue	6 years ago
Brian Candler	442d3de11d	Allow the "google" connector to work without a service account Fixes #1718	6 years ago
m.nabokikh	521aa0802f	Fix OpenShift connector rootCA option Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	6 years ago
Stephan Renatus	4a0feaf589	connector/saml: add 'FilterGroups' setting This should make AllowedGroups equivalent to an LDAP group filter: When set to true, only the groups from AllowedGroups will be included in the user's identity. Signed-off-by: Stephan Renatus <srenatus@chef.io>	6 years ago
poh chiat	d87cf1c924	create github oauthconfig with redirecturl (#1700 )	6 years ago
Martijn	0a85a97ba9	Allow preferred_username claim to be set for Crowd connector (#1684 ) * Add atlassiancrowd connector to list in readme * Add TestIdentityFromCrowdUser * Set preferred_username claim when configured * Add preferredUsernameField option to docs * Log warning when mapping invalid crowd field	6 years ago
Ken Perkins	f6476b62f2	Added Email of Keystone to Identity (#1681 ) * Added Email of Keystone to Identity After the successful login to keystone, the Email of the logged in user is fetch from keystone and provided to `identity.Email`. This is useful for upstream software that uses the Email as the primary identification. * Removed unnecessary code from getUsers * Changed creation of userResponse in keystone * Fixing linter error Co-authored-by: Christoph Glaubitz <christoph.glaubitz@innovo-cloud.de>	6 years ago
Andrew Block	76bb453ff3	Setting email for OpenShift connector	6 years ago
Chris Loukas	d33a76fa19	Make prompt configurable for oidc offline_access	6 years ago
Ivan Mikheykin	7ef1179e75	feat: connector for Atlassian Crowd	6 years ago
linzhaoming	1d3851b0c5	Update gitlab.go fix typo	6 years ago
Fabrice Rabaute	b85d7849ad	google: Retrieve all the groups for a user The list of groups is paginated (default page is 200), so when a user has more than 200 groups, only the first 200 are retrieve. This change is retrieving all the groups for a user by querying all the pages.	6 years ago
Vitaliy Dmitriev	e20a795a2a	connector/ldap: backward compatibility with single user to group mapping Signed-off-by: Vitaliy Dmitriev <vi7alya@gmail.com>	6 years ago
Carl Henrik Lunde	6104295d5e	microsoft: Add basic tests Implemented similar to connector/github/github_test.go	6 years ago
Carl Henrik Lunde	5db29eb087	microsoft: Make interface testable Enable testing by allowing overriding the API host name in tests	6 years ago
Vitaliy Dmitriev	f2e7823db9	connector/ldap: add multiple user to group mapping Add an ability to fetch user's membership from groups of a different type by specifying multiple group attribute to user attribute value matchers in the Dex config: userMatchers: - userAttr: uid groupAttr: memberUid - userAttr: DN groupAttr: member In other words the user's groups can be fetched now from ldap structure similar to the following: dn: cn=john,ou=People,dc=example,dc=org objectClass: person objectClass: inetOrgPerson sn: doe cn: john uid: johndoe mail: johndoe@example.com userpassword: bar dn: cn=qa,ou=Groups,ou=Portland,dc=example,dc=org objectClass: groupOfNames cn: qa member: cn=john,ou=People,dc=example,dc=org dn: cn=logger,ou=UnixGroups,ou=Portland,dc=example,dc=org objectClass: posixGroup gidNumber: 1000 cn: logger memberUid: johndoe Signed-off-by: Vitaliy Dmitriev <vi7alya@gmail.com>	6 years ago
m.nabokikh	383c2fe8b6	Adding oidc email scope check This helps to avoid "no email claim" error if email scope was not specified. Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	6 years ago
Andrew Block	d31f6eabd4	Corrected logic in group verification	6 years ago
Andrew Block	296659cb50	Reduced OpenShift scopes and enhanced documentation	6 years ago
Andrew Block	075ab0938e	Fixed formatting	6 years ago
Andrew Block	7e89d8ca24	Resolved newline issues	6 years ago
Andrew Block	02c8f85e4d	Resolved newline issues	6 years ago
Andrew Block	db7711d72a	Test cleanup	6 years ago
Andrew Block	5881a2cfca	Test cleanup	6 years ago
Andrew Block	48954ca716	Corrected test formatting	6 years ago
Andrew Block	92e63771ac	Added OpenShift connector	6 years ago
Lars Lehtonen	8e0ae82034	connector/oidc: replace deprecated oauth2.RegisterBrokenAuthHeaderProvider with oauth2.Endpoint.AuthStyle	6 years ago
Mark Sagi-Kazar	65c77e9db2	Fix bodyclose	6 years ago
Mark Sagi-Kazar	2f8d1f8e42	Fix unconvert	6 years ago
Mark Sagi-Kazar	f141f2133b	Fix whitespace	6 years ago
Mark Sagi-Kazar	9bd5ae5197	Fix goimports	6 years ago
Mark Sagi-Kazar	367b187cf4	Fix missspell	6 years ago
Mark Sagi-Kazar	142c96c210	Fix stylecheck	6 years ago
Mark Sagi-Kazar	8c3dc0ca66	Remove unused code (fixed: unused, structcheck, deadcode linters)	6 years ago
Mark Sagi-Kazar	d2095bb2d8	Rewrite LDAP tests to use Docker	6 years ago
Nandor Kracser	a38e215891	connector/google: support group whitelisting Signed-off-by: Nandor Kracser <bonifaido@gmail.com>	6 years ago
Joel Speed	658a2cc477	Make directory service during init	6 years ago
Joel Speed	554870cea0	Add todo for configurable groups key	6 years ago
Joel Speed	6a9bc889b5	Update comments	6 years ago
Joel Speed	c03c98b951	Check config before getting groups	6 years ago
Joel Speed	3f55e2da72	Get groups from directory api	6 years ago
Joel Speed	36370f8f2a	No need to configure issuer	6 years ago

... 2 3 4 5 6 ...

386 Commits (master)