mirror/dex - dex - xhrpb gitea

Commit Graph

Author	SHA1	Message	Date
Eric Chiang	b02a3a3163	*: add "groups" scope	10 years ago
Eric Chiang	5a78e89807	clean up LDAP connector * Remove some unlikely to be used fields to help configurability. * Combined "serverHost" and "serverPort" into "host" * Remove "timeout" (just default to 30 seconds). * Remove "maxIdleConn" will add it back if users feel the need to control the number of cached connections. * Remove "trustedEmailProvider" (just always trust). * Remove "skipCertVerification" you can't make this connector ingore TLS errors. * Fix configs that don't search before bind (previously broken). * Add more examples to Documentation * Refactor LDAPPool Acquire() and Put() into a Do() function which always does the flow correctly. * Added more comments and renamed some functions. * Moved methods on LDAPIdentityProvider to the LDAPConnector	10 years ago
Bobby Rullo	32a1994a5e	refresh tokens: store and validate scopes. A refresh request must fail if it asks for scopes that were not originally granted when the refresh token was obtained. This Commit: * changes repo to store scopes with tokens * changes repo interface signatures so that scopes can be stored and verified * updates dependent code to pass along scopes	10 years ago
Bobby Rullo	ca18efb1fe	client: load full clients w/ LoadableClient The Client object on its own doesn't fully express everything about a single client, and so when loading clients from a static configuration it's not enough to just (de)serialize clients. To that end, LoadableClient contains the full representation of a client and associated entities.	10 years ago
Bobby Rullo	f9dbc8a3d2	db, client: add data model for trusted peers Trusted Peers are clients that are authorized to mint tokens for another client.	10 years ago
Bobby Rullo	1b4dca80d7	client: remove ClientManagerFromClients Replaced by ClientRepoFromClients, which makes more sense IMO. Also, it was doing the wrong thing: it was ignoring the client_id and client_secret passed into it as far as I can tell.	10 years ago
Bobby Rullo	8d1a6f2324	functional: test sample clients file is valid Also tests that it's being loaded properly (which is not the case in NewClientManagerFromClients, which will be removed in subsequent commit)	10 years ago
Frode Nordahl	3077979a3b	Functional tests for LDAP Connection Pool	10 years ago
Evan Cordell	73d9742c8b	client manager: accept full client when creating	10 years ago
Evan Cordell	a418e1c4e7	client: add client manager adds a client manager to handle business logic, leaving the repo for basic crud operations. Also adds client to the test script	10 years ago
Evan Cordell	3da98fcb8e	client: add transaction support	10 years ago
Bobby Rullo	3442a5af1c	functional: test Admin field serialization	10 years ago
Bobby Rullo	e5948ab3ce	*: ClientIdentityXXX -> ClientXXX Get rid of all outdated "ClientIdentity" terminology.	10 years ago
Bobby Rullo	95757e8779	*: Client Repo now deals with custom Client object This is instead of oidc.ClientIdentity. This makes it easier to add new fields custom to dex to the client.	10 years ago
Eric Chiang	7416929455	*: add revocation methods to refresh repo	10 years ago
Eric Chiang	6120f7ac05	*: add isAdmin option to client repo when creating a client	10 years ago
Eric Chiang	01a24542e9	*: fix tests that care about email case sensitivity	10 years ago
Eric Chiang	208afd3b01	*: add functional tests for case insensitive emails	10 years ago
Eric Chiang	bf88fe48a6	functional: don't fail if postgres or ldap isn't availabl	10 years ago
Eric Chiang	2cc0ae6fac	functional: remove in memory connector configs from ldap tests	10 years ago
Eric Chiang	dcf5835189	*: remove in memory connector config repo	10 years ago
Eric Chiang	b572b8dd6c	*: remove in memory client repo The DB implementation expects secrets to be base64 encoded blobs. Because of this a bunch of tests broke moving to sqlite. A lot of this commit is fixing those tests.	10 years ago
Eric Chiang	72d1ecab64	*: remove in memory password info repo	10 years ago
Eric Chiang	2726f4dcdf	*: remove in memory user repo	10 years ago
Eric Chiang	7bac93aa20	*: remove in memory session repos Move manager to it's own package so it can import db. Move all references to the in memory session repos to use sqlite3.	10 years ago
Eric Chiang	5052d8007f	functional: clean up functional tests Adjust logic and remove panics from functional tests.	10 years ago
Frode Nordahl	4d970d5fc4	connector: add LDAP connector Authentication is performed by binding to the configured LDAP server using the user supplied credentials. Successfull bind equals authenticated user. Optionally the connector can be configured to search before authentication. The entryDN found will be used to bind to the LDAP server. This feature must be enabled to get supplementary information from the directory (ID, Name, Email). This feature can also be used to limit access to the service. Example use case: Allow your users to log in with e-mail address instead of the identification string in your DNs (typically username). To make re-use of HTTP form handling code from the Local connector possible: - Implemented IdentityProvider interface - Moved the re-used functions to login_local.go Fixes #119	10 years ago
Eric Chiang	ec3bc7f258	*: allow dexctl set-connector-configs to read from stdin Closes #276	10 years ago
Eric Chiang	5e44b6bc27	*: update all to accommodate changes to go-oidc Update dex to comply with the changes to fieldnames and types of the client and provider metadata structs in coreos/go-oidc.	10 years ago
Bobby Rullo	c1f8effe1a	db, functional: make value column in key not pkey go-oidc increased the size of the generated keys, which were too large to be used as primary keys in postgres.	10 years ago
Eric Chiang	8e5115ce73	cmd: use spf13/cobra for dexctl cli logic	10 years ago
Eric Chiang	f43655a8c3	user/manager: connector must exists when creating remote identity Add ConnectorConfigRepo to UserManager. When trying to create a RemoteIdentity, validate that the connector ID exists. Fixes #198	10 years ago
George Tankersley	07a4d4441e	pkg/crypto: replace old crypto with new crypto	11 years ago
Joe Bowers	2ed2859896	repo: functional repo tests includes changes to ensure uniform errors for DB and in-memory repos	11 years ago
Yifan Gu	44c6cb44f5	refresh: bcrypt raw bytes rather than base64 encoded string. This enables us to control the length of the bytes that will be bcrypted, by default it's 64. Also changed the token's stored form from string('text') to []byte('bytea') and added some test cases for different types of invalid tokens.	11 years ago
Bobby Rullo	c8feb5c33d	db: PrivateKeySetRepo now takes >1 secrets The first secret is used to encrypt, the rest are for decryption; if the first doesn't work, the rest are tried in order. The makes it possible to rotate keys.	11 years ago
Bobby Rullo	74df09acb6	db: gorp moved to github.com/go-gorp/gorp	11 years ago
Bobby Rullo	4ce5a36d08	db: initialize bigint, boolean columns gorp hates nil.	11 years ago
Bobby Rullo	84bc8073de	functional: Test DBs use migrations All repo tests build their tables by applying all the migrations. This way we know our migrations are functional.	11 years ago
Bobby Rullo	66fe201c24	*: move original project to dex	11 years ago

45 Commits (v1)