mirror/dex - dex - xhrpb gitea

Commit Graph

Author	SHA1	Message	Date
Maksim Nabokikh	a70f592589	fix(deviceflow): update redirect URIs to use absolute paths for non-root URLs (#4597 ) Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>	2 weeks ago
Ivan Zvyagintsev	b0a6ee9045	fix: hide internal server error details from users Signed-off-by: Ivan Zvyagintsev <ivan.zvyagintsev@flant.com>	2 months ago
Mark Sagi-Kazar	e230d9426d	test: use new Go features in tests Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>	7 months ago
Doug Goldstein	d6237a8a6e	fix: device code should not require scope As per RFC8628 section 3.1, https://datatracker.ietf.org/doc/html/rfc8628#section-3.1 the scope is optional. Since dex always requires at least 'openid', default the value to comply with the RFC. Signed-off-by: Doug Goldstein <cardoe@cardoe.com>	9 months ago
Doug Goldstein	fbcc76f779	fix: device code pending HTTP response As per RFC8628 section 3.5, https://datatracker.ietf.org/doc/html/rfc8628#section-3.5 the authorization_pending response should extend RFC6749 section 5.2, https://datatracker.ietf.org/doc/html/rfc6749#section-5.2 which specifies that the HTTP response code should be 400, Bad Request. Signed-off-by: Doug Goldstein <cardoe@cardoe.com>	9 months ago
Ferenc Fabian	2377b0a0cd	Add context to storage's Create endpoints (#2935 ) * Initial commit Signed-off-by: PumpkinSeed <qwer.kocka@gmail.com> * Finish the syntex fixes Signed-off-by: PumpkinSeed <qwer.kocka@gmail.com> * Add fixes after running the tests Signed-off-by: PumpkinSeed <qwer.kocka@gmail.com> * Change background context to request context Signed-off-by: PumpkinSeed <qwer.kocka@gmail.com> --------- Signed-off-by: PumpkinSeed <qwer.kocka@gmail.com>	2 years ago
Josh Soref	a1a05c4a65	spelling: nonexistent Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>	3 years ago
Bob Callaway	83e2df821e	add PKCE support to device code flow (#2575 ) Signed-off-by: Bob Callaway <bobcallaway@users.noreply.github.com>	4 years ago
Shivansh Vij	65592d0b5a	Updating test cases Fixes https://github.com/dexidp/dex/issues/2537 Signed-off-by: Shivansh Vij <shivanshvij@outlook.com>	4 years ago
m.nabokikh	3d5a3befb4	fix: prevent cross-site scripting for the device flow Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	4 years ago
Eng Zer Jun	f0186ff265	refactor: move from io/ioutil to io and os package The io/ioutil package has been deprecated as of Go 1.16, see https://golang.org/doc/go1.16#ioutil. This commit replaces the existing io/ioutil functions with their new definitions in io and os packages. Signed-off-by: Eng Zer Jun <engzerjun@gmail.com>	5 years ago
m.nabokikh	1d83e4749d	Add gocritic Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	5 years ago
m.nabokikh	4d63e9cd68	fix: Bump golangci-lint version and fix some linter's problems Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	5 years ago
justin-slowik	9a7926c19b	Cleaned up Device Flow test log levels Signed-off-by: justin-slowik <justin.slowik@thermofisher.com> Remove extraneous "=" from conformance.go Co-authored-by: Joel Speed <Joel.speed@hotmail.co.uk> Additional test for TestHandleDeviceCode Signed-off-by: justin-slowik <justin.slowik@thermofisher.com>	6 years ago
justin-slowik	334ecf0482	Fixes based on PR comments. Signed-off-by: justin-slowik <justin.slowik@thermofisher.com>	6 years ago
justin-slowik	9882ea453f	better support for /device/callback redirect uris with public clients. Signed-off-by: justin-slowik <justin.slowik@thermofisher.com>	6 years ago
Justin Slowik	9c699b1028	Server integration test for Device Flow (#3 ) Extracted test cases from OAuth2Code flow tests to reuse in device flow deviceHandler unit tests to test specific device endpoints Include client secret as an optional parameter for standards compliance Signed-off-by: justin-slowik <justin.slowik@thermofisher.com>	6 years ago

19 Commits (master)