Adrián López Gómez
9b8ab3bdc6
ClientCredentials flow in UserAPI
...
Fixes #528
10 years ago
Eric Chiang
ede6300a84
*: by default, have dex listen at a non-root url
10 years ago
Lucas Serven
a9dce1c11e
cmd: update flag defaults for dev mode
...
Updates flags in dex-worker for no-db mode to work with default static
files.
10 years ago
Eric Chiang
87faa5a1f7
*: depricate --email-from flag and move to email config files
10 years ago
Eric Chiang
35cab93c0a
*: add --enable-automatic-registration flag to worker
...
For remote connectors, allow users to skip registration.
10 years ago
Bobby Rullo
59dc4a9400
dexctl: remove api driver
...
API Driver is dead: This API turns out to not be super useful, requiring
an existing client to create other clients is weird.
Long live API Driver? Let's use Dynamic Client API and the bootstrap API
to create a better API Driver! LONG LIVE API DRIVER.
10 years ago
Eric Chiang
b7674744ee
*: don't let generated comment become package comment
10 years ago
Alexandr Burdiyan
24134e18ea
Add connector id to the registration error message
...
Right now it is not clear what connector is failing. It will be easier to debug with more specific error message.
Related to #400 .
10 years ago
Bobby Rullo
f9dbc8a3d2
db, client: add data model for trusted peers
...
Trusted Peers are clients that are authorized to mint tokens
for another client.
10 years ago
Eric Chiang
35ea3d9ae1
*: add ability to set and list connectors from admin API
...
closes #360
10 years ago
Evan Cordell
73d9742c8b
client manager: accept full client when creating
10 years ago
Evan Cordell
a418e1c4e7
client: add client manager
...
adds a client manager to handle business logic, leaving the repo
for basic crud operations. Also adds client to the test script
10 years ago
Evan Cordell
3da98fcb8e
client: add transaction support
10 years ago
Bobby Rullo
9c403aba41
fix dexctl
10 years ago
Bobby Rullo
399b15abeb
integration, *: Improve tests for admin api
...
* TestCreateClient was missing test coverage on error cases
* Fixed bug where 500s were being reported for bad requests
* changed function signature of NewAdminAPI back to old way of passing
in lots of repos: passing in a DbMap made it difficult to test
* added swappable ID and Secret generators when creating Clients
10 years ago
Bobby Rullo
e5948ab3ce
*: ClientIdentityXXX -> ClientXXX
...
Get rid of all outdated "ClientIdentity" terminology.
10 years ago
Eric Chiang
b10645f58d
*: add client registration endpoint to admin API
10 years ago
Eric Chiang
6120f7ac05
*: add isAdmin option to client repo when creating a client
10 years ago
Eric Chiang
07af73f367
*: don't allow sqlite3 if --no-db flag not specified
10 years ago
Eric Chiang
c7ed4fdd60
pkg,cmd: add document generator tool
10 years ago
Eric Chiang
04cd1851aa
server: add dynamic client registration
10 years ago
Eric Chiang
ec3bc7f258
*: allow dexctl set-connector-configs to read from stdin
...
Closes #276
10 years ago
Eric Chiang
0deccc7050
cmd: add version to command worker and overlord, print go version
...
Closes #272
10 years ago
Eric Chiang
5e44b6bc27
*: update all to accommodate changes to go-oidc
...
Update dex to comply with the changes to fieldnames and types of
the client and provider metadata structs in coreos/go-oidc.
10 years ago
Eric Chiang
22c20e4e32
cmd: add version subcommand to dexctl
...
closes #220
10 years ago
Eric Chiang
8e5115ce73
cmd: use spf13/cobra for dexctl cli logic
10 years ago
Eric Chiang
3776c74c15
cmd: reduce backoff max when worker is waiting for connectors
...
fixes #177
10 years ago
Eric Chiang
49389c9b90
cmd, db: verify at least one secret is passed to --key-secrets
...
Passing an empty list to the overlord or worker's --key-secrets
flag currently causes an out of range panic. Always check to ensure
there's at least one element passed.
Fixes #130
Fixes #217
10 years ago
Eric Chiang
f43655a8c3
user/manager: connector must exists when creating remote identity
...
Add ConnectorConfigRepo to UserManager. When trying to create a
RemoteIdentity, validate that the connector ID exists.
Fixes #198
10 years ago
Eric Chiang
d518447282
user: move user manager to it's own package
...
This commit moves the user.Manage to its own package (user/manager)
so it can import the connector package in a later commit.
For clarity, it renames "Manager" to "UserManager" using gorname.
This commit has no functional changes.
10 years ago
Brian Waldon
b14ce73fa0
*: use example.com in place of coreos.com
...
Align with RFC2606 for example email addresses, using example.com
in place of coreos.com where appropriate.
10 years ago
George Tankersley
07a4d4441e
pkg/crypto: replace old crypto with new crypto
11 years ago
Bobby Rullo
55040c55fa
server, integration, cmd: Protect Admin API
...
Admin API now requires a 128 byte base64 encoded secret to be passed in
Authorization header, closing up a potential security hole for those
who expose this service.
11 years ago
Bobby Rullo
d3d6a75b91
fixup - Code review changes.
11 years ago
Bobby Rullo
bf9517fdaa
server,cmd: Add flag for disabling registation
...
For situations where admins add users.
11 years ago
Bobby Rullo
510293a984
fixup
11 years ago
Bobby Rullo
3cd0d84e31
cmd/dex-worker: wait 'til connectors are available
...
Otherwise, if worker starts without connectors, and then connectors are
added workers have to be restarted to pick up the changes.
11 years ago
Giulio Iotti
472e4a02a4
*: Remove unnecessary else statements
...
Whenever it makes the code easier to follow, use early return to
avoid else statements.
11 years ago
Bobby Rullo
f1820cda14
cmd,server,static/html: Configurable name, logo
...
fixes #47
11 years ago
Bobby Rullo
62aa12fa6c
cmd/dex-overlord: was using the wrong err
11 years ago
Bobby Rullo
9b64ecb2d7
cmd/dex-overlord: bind admin API on 127.0.0.1
...
Instead of 0.0.0.0; this is safer, since the admin API is very powerful.
fixes #97
11 years ago
Yifan Gu
3da456efa8
dex-worker: add TLS support.
...
Add two new flags '--cert-file' and '--key-file'.
If scheme == 'https', then we will use the two new flags to get
the cert/key pair for TLS connection.
Also add '--ca-file' to the example app to allow TLS connection to the
dex-worker using a specified ca file.
11 years ago
Bobby Rullo
d0c199b62c
cmd, server: base64 encode multiple secrets
...
Two things here:
* key secrets are now base64 encoded strings, so we get the full key
space
* we can pass >1 of them in so we can rotate them
11 years ago
Alex Polvi
c7d2393add
bug: remote whitespace so eval works
11 years ago
Bobby Rullo
8b6a2699d9
cmd/dex-overlord, db: migrations in overlord
...
Migrations happen only in the overlord, so there's no thundering herd,
and database initialziation can be more easily controlled.
11 years ago
Bobby Rullo
66fe201c24
*: move original project to dex
11 years ago