mirror/dex - dex - xhrpb gitea

Commit Graph

Author	SHA1	Message	Date
Eric Chiang	6cb38604d9	storage/kubernetes: log INFO level if TPR already exists, not ERROR	9 years ago
Eric Chiang	0481fccd76	storage/sql: add missing WHERE statement to refresh token update	9 years ago
Eric Chiang	777eeafabc	*: update go-oidc and use standard library's context package	9 years ago
Eric Chiang	38c77e0f33	storage/kubernetes: enable HTTP/2 support	9 years ago
Eric Chiang	a7b8e52b92	storage/kubernetes: fix conflict error detection in TRP creation PR #815 fixed the Kubernetes storage implementation by correctly returning storage.ErrAlreadyExists on POST conflicts. This caused a regression in TPR creation (#822) when some, but not all, of the resources already existed. E.g. for users upgrading from old versions of dex. Fixes #822	9 years ago
Eric Chiang	1da2ae279c	storage/kubernetes: fix hash initialization bug	9 years ago
Eric Chiang	4be029c6c1	storage/kubernetes: fix kubernetes storage conformance test failures	9 years ago
rithu john	3df1db1864	storage: Surface "already exists" errors.	9 years ago
rithu john	d928ac0677	storage: Add OfflineSession object to backend storage.	9 years ago
Eric Chiang	1eda382789	server: add at_hash claim support The "at_hash" claim, which provides hash verification for the "access_token," is a required claim for implicit and hybrid flow requests. Previously we did not include it (against spec). This PR implements the "at_hash" logic and adds the claim to all responses. As a cleanup, it also moves some JOSE signing logic out of the storage package and into the server package. For details see: https://openid.net/specs/openid-connect-core-1_0.html#ImplicitIDToken	9 years ago
Eric Chiang	312ca7491e	storage: add extra fields to refresh token and update method	9 years ago
rithu john	2c03693972	storage: Add ConnectorData to storage RefreshToken.	9 years ago
Eric Chiang	fd20b213bb	storage: fix postgres timezone handling Dex's Postgres client currently uses the `timestamp` datatype for storing times. This lops of timezones with no conversion, causing times to lose locality information. We could convert all times to UTC before storing them, but this is a backward incompatible change for upgrades, since the new version of dex would still be reading times from the database with no locality. Because of this intrinsic issue that current Postgres users don't save any timezone data, we chose to treat any existing installation as corrupted and change the datatype used for times to `timestamptz`. This is a breaking change, but it seems hard to offer an alternative that's both correct and backward compatible. Additionally, an internal flag has been added to SQL flavors, `supportsTimezones`. This allows us to handle SQLite3, which doesn't support timezones, while still storing timezones in other flavors. Flavors that don't support timezones are explicitly converted to UTC.	9 years ago
Eric Chiang	fe196864c0	*: fix comment typos found with github.com/client9/misspell	9 years ago
rithu john	9949a1313c	server: modify error messages to use logrus.	9 years ago
rithu john	2e22a948cf	cmd/dex: add logging config and serve logger for different modules.	9 years ago
Eric Chiang	879e018f74	storage/kubernetes: remove unused method	9 years ago
rithu john	ee9738d663	api: adding a gRPC call for listing passwords.	9 years ago
rithu john	19c22807a7	api: adding ListPasswords() method to the storage interface.	9 years ago
Eric Chiang	aa7f304bc1	: switch to github.com/ghodss/yaml for more consistent YAML parsing ghodss/yaml converts from YAML to JSON before attempting to unmarshal. This allows us to: Get the correct behavor when decoding base64'd []byte slices. * Use json.RawMessage. Not have to support extravagant YAML features. * Let our structs use `json:` tags	10 years ago
rithu leena john	ed7e943406	api: add gRPC endpoints for creating, updating and deleting passwords	10 years ago
Eric Chiang	786e12b15e	storage/conformance: expand transaction test suite	10 years ago
Eric Chiang	52e2a1668c	storage/sql: use isolation level "serializable" for transactions	10 years ago
Eric Chiang	c0aa63ac97	storage: update godocs	10 years ago
Eric Chiang	d7a75c5b5d	storage/kubernetes: allow arbitrary client IDs Use a hash algorithm to match client IDs to Kubernetes object names. Because cryptographic hash algorithms produce sums larger than a Kubernetes name can fit, a non-cryptographic hash is used instead. Hash collisions are checked and result in errors.	10 years ago
Eric Chiang	4ab78d0ded	storage/kubernetes: run transactional conformance tests	10 years ago
Eric Chiang	5720ecf412	storage/conformance: add tests for transactional guarantees	10 years ago
rithu leena john	9de16f2c45	storage/kubernetes: set CurrentContext when the Kubeconfig file contains only one context	10 years ago
Eric Chiang	bc16de0b58	storage/kubernetes: don't guess the kubeconfig location and change test env Using the default KUBECONFIG environment variable to indicate that the Kubernetes tests should be run lead to cases where developers accidentally ran the tests. This has now been changed to "DEX_KUBECONFIG" and documentation hsa been added detailing how to run these tests. Additionally, no other storage reads environment variables for its normal configuration (outside of tests) so the Kubernetes storage no longer does. Overall, be less surprising.	10 years ago
Eric Chiang	138ff96c00	storage/kubernetes: don't automatically print errors on bad HTTP status codes These status codes spam the error logs for events like key rotation and third party resource creation. In these cases "bad" status codes are expected and shouldn't be automatically printed.	10 years ago
Eric Chiang	8c9c5160b6	storage/kubernetes: guess namespace from the service account token The in cluster kubernetes client currently requires using the downward API to determine its namespace. However this value can be determine by inspecting the service account token mounted into the pod. As a fallback, use this to guess the current namespace.	10 years ago
Eric Chiang	fe320c1928	storage/sql: fix typo in keys query	10 years ago
Eric Chiang	0a3aabc8ff	storage/conformace: add conformance tests for keys	10 years ago
Eric Chiang	691476b477	storage/kubernetes: manage third party resources and drop support for 1.3	10 years ago
Eric Chiang	449f34ed2a	storage/sql: print error before calling t.Fatal	10 years ago
Eric Chiang	558059ee58	storage/kubernetes: add garbage collection method	10 years ago
Eric Chiang	9ce05ecf73	storage/sql: add garbage collection method	10 years ago
Eric Chiang	c14ab3c44e	storage/memory: add garbage collection method	10 years ago
Eric Chiang	d27f5e411f	storage/conformance: add garbage collection tests	10 years ago
Eric Chiang	df6cfa0b7a	storage: add GC method to interface to standardize handling	10 years ago
Eric Chiang	2909929b17	*: add the ability to define passwords statically	10 years ago
Eric Chiang	7ff3ce85a2	*: add password resource to kubernetes storage implementation	10 years ago
Eric Chiang	ae3b5ef6e9	storage/memory: add password resource	10 years ago
Eric Chiang	8012e56446	storage/sql: add password resource	10 years ago
Eric Chiang	138f55be06	storage/conformance: add tests for password resource	10 years ago
Eric Chiang	74b44e9757	storage: add a password resource	10 years ago
Eric Chiang	ea4f3fd365	storage/sql: enable garbage collection Was an oversite of the initial SQL PR.	10 years ago
Eric Chiang	490b3494db	storage: increase the number of bytes randomly generated for IDs Because these values are used for OAuth2 codes, refresh tokens, etc, they shouldn't be guessable. Increase the number of random bytes from 64 to 128.	10 years ago
Eric Chiang	877eb3dc7b	*: add standup script to run DB tests locally and hook up travis	10 years ago
Eric Chiang	36d67574c5	storage/conformance: add more conformance tests	10 years ago

... 2 3 4 5 6

289 Commits (master)