mirror/dex - dex - xhrpb gitea

Commit Graph

Author	SHA1	Message	Date
Maksim Nabokikh	fc0e2e9383	feat: Add default robots.txt (#2834 ) Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	3 years ago
Maksim Nabokikh	7016a82589	fix: return 401 if password is invalid (#2796 ) Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	3 years ago
Daniel Lipovetsky	07d7913049	chore: Upgrade golangci-lint to v1.50.1 from v1.46.0 (#2790 )	3 years ago
m.nabokikh	bdfb10137a	Add the comment about groups request notification Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	4 years ago
copperyp	5854dd192d	using path.Join replace filepath.Join Signed-off-by: copperyp <copperyp@gmail.com>	4 years ago
copperyp	a1c1076137	fix web static file path slash error for win platform Signed-off-by: copperyp <copperyp@gmail.com>	4 years ago
Bob Callaway	2e0041f95f	ensure template does not double-escape URL Signed-off-by: Bob Callaway <bob.callaway@gmail.com>	5 years ago
m.nabokikh	21a01ee811	Add sprig v3 functions to web templates Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	5 years ago
Alastair Houghton	0284a4c3c9	fix: back link on password page needs to be explicit. The back link on the password page was using Javascript to tell the browser to navigate back, which won't work if the user has entered a set of incorrect log-in details. Fix this by using an explicit URL instead. Fixes #1851 Signed-off-by: Alastair Houghton <alastair@alastairs-place.net>	5 years ago
Mark Sagi-Kazar	d1e8b085e2	feat: use embedded assets by default Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>	5 years ago
Rui Yang	2f28fc7451	default to ./web when Dir and WebFS are not set	5 years ago
Rui Yang	4e569024fd	use go 1.16 new package io/fs Unify the interface for reading web statics. Now it could read an OS directory or get the content on live One could use //go:embed static var webFiles embed.FS anywhere and config dex server to take the file system by setting WebConfig{WebFS: webFiles} Signed-off-by: Rui Yang <ruiya@vmware.com> Co-authored-by: Aidan Oldershaw <aoldershaw@pivotal.io>	5 years ago
Rui Yang	7b50cbf0ac	use pkger for embedding static contents Co-authored-by: Vikram Yadav <vyadav@pivotal.io> Signed-off-by: Rui Yang <ruiya@vmware.com>	5 years ago
Rui Yang	1eab25f89f	use web host url for asset hosting	5 years ago
Rui Yang	10e9054811	Use http.FileSystem for web assets	5 years ago
m.nabokikh	1e88cca59a	Make dark theme even darker, add fallback for legacy themes Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	5 years ago
m.nabokikh	bcaddd4354	feat: Change default themes to light/dark Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	5 years ago
m.nabokikh	1d83e4749d	Add gocritic Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	5 years ago
m.nabokikh	4d63e9cd68	fix: Bump golangci-lint version and fix some linter's problems Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	5 years ago
justin-slowik	1404477326	Updates based on dexidp pr Signed-off-by: justin-slowik <justin.slowik@thermofisher.com>	6 years ago
Justin Slowik	9c699b1028	Server integration test for Device Flow (#3 ) Extracted test cases from OAuth2Code flow tests to reuse in device flow deviceHandler unit tests to test specific device endpoints Include client secret as an optional parameter for standards compliance Signed-off-by: justin-slowik <justin.slowik@thermofisher.com>	6 years ago
Justin Slowik	9bbdc721d5	Device flow token code exchange (#2 ) * Added /device/token handler with associated business logic and storage tests. Perform user code exchange, flag the device code as complete. Moved device handler code into its own file for cleanliness. Cleanup * Removed PKCE code * Rate limiting for /device/token endpoint based on ietf standards * Configurable Device expiry Signed-off-by: justin-slowik <justin.slowik@thermofisher.com>	6 years ago
m.nabokikh	70505b258d	Fix templates with asset paths that point to external URL Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	6 years ago
m.nabokikh	058e72ef50	Pick icons on login screen by connector type instead of ID Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	6 years ago
Mark Sagi-Kazar	050d5af937	Fix ineffassign	6 years ago
Mark Sagi-Kazar	f141f2133b	Fix whitespace	6 years ago
Mark Sagi-Kazar	8c3dc0ca66	Remove unused code (fixed: unused, structcheck, deadcode linters)	6 years ago
Yannis Zarkadas	27944d4f8f	templates: add new relativeURL function Signed-off-by: Yannis Zarkadas <yanniszark@arrikto.com>	7 years ago
Marc-André Dufresne	d458e882aa	Allow arbitrary data to be passed to templates	7 years ago
Eric Buth	da45adcb6e	email scope only allows access to a user's email address	8 years ago
Kazumasa Kohtaka	9948228e5b	Set a proper status code before sending an error status page	8 years ago
Stephan Renatus	41f663f70c	show "back" link for password connectors This way, the user who has selected, say, "Log in with Email" can make up their mind, and select a different connector instead. However, if there's only one connector set up, none of this makes sense -- and the link will thus not be displayed. Signed-off-by: Stephan Renatus <srenatus@chef.io>	8 years ago
Stephan Renatus	b09a13458f	password connectors: allow overriding the username attribute (password prompt) This allows users of the LDAP connector to give users of Dex' login prompt an idea of what they should enter for a username. Before, irregardless of how the LDAP connector was set up, the prompt was Username [_________________] Password [_________________] Now, this is configurable, and can be used to say "MyCorp SSO Login" if that's what it is. If it's not configured, it will default to "Username". For the passwordDB connector (local users), it is set to "Email Address", since this is what it uses. Signed-off-by: Stephan Renatus <srenatus@chef.io>	8 years ago
Eric Chiang	72a431dd4b	{web,server}: use html/template and reduce use of auth request ID Switch from using "text/template" to "html/template", which provides basic XSS preventions. We haven't identified any particular place where unsanitized user data is rendered to the frontend. This is just a preventative step. At the same time, make more templates take pure URL instead of forming an URL themselves using an "authReqID" argument. This will help us stop using the auth req ID in certain places, preventing garbage collection from killing login flows that wait too long at the login screen. Also increase the login session window (time between initial redirect and the user logging in) from 30 minutes to 24 hours, and display a more helpful error message when the session expires. How to test: 1. Spin up dex and example with examples/config-dev.yaml. 2. Login through both the password prompt and the direct redirect. 3. Edit examples/config-dev.yaml removing the "connectors" section. 4. Ensure you can still login with a password. (email/password is "admin@example.com" and "password")	9 years ago
rithu john	75aa1c67ce	server: add error HTML templates with error description.	9 years ago
Eric Chiang	fe196864c0	*: fix comment typos found with github.com/client9/misspell	9 years ago
rithu john	9949a1313c	server: modify error messages to use logrus.	9 years ago
Eric Chiang	391dc51c13	*: add theme based frontend configuration This PR reworks the web layout so static files can be provided and a "themes" directory to allow a certain degree of control over logos, styles, etc. This PR does NOT add general support for frontend customization, only enough to allow us to start exploring theming internally. The dex binary also must now be run from the root directory since templates are no longer "compiled into" the binary. The docker image has been updated with frontend assets.	9 years ago
Eric Chiang	7c2289e0de	*: rename internally used "state" form value to "req" "state" means something specific to OAuth2 and SAML so we don't want to confuse developers who are working on this. Also don't use "session" which could easily be confused with HTTP cookies.	10 years ago
Eric Chiang	7084a801d7	*: port oob template	10 years ago
Eric Chiang	04912c04e3	server: generate string literals instead of escaped strings When compiling the default templates into the source code, use string literals instead of escaped strings to reduce merge conflicts.	10 years ago
Eric Chiang	608d8ba984	*: switch dex to the ported templates	10 years ago
Eric Chiang	bfe560ee21	rename	10 years ago
Eric Chiang	3110f45c3d	*: lots of renaming	10 years ago
Eric Chiang	cab271f304	initial commit	10 years ago

50 Commits (master)