mirror/dex - dex - xhrpb gitea

Commit Graph

Author	SHA1	Message	Date
Moto Ishizawa	dc979c1d6d	server: use time.Time instead of int64 for token expiration time	10 years ago
Moto Ishizawa	25e4228e35	server: add expires_in field to the response of token endpoint	10 years ago
Eric Chiang	fa8f98acac	server: fix registration redirect for servers listenin at non-base URLs	10 years ago
Rubén Soleto Buenvarón	c91b37aa9e	refresh token rotation Update refresh token flow to revoke old refresh token and generates a new one. Fixes #519	10 years ago
Jeremy Whitlock	27b80cbca8	connector: add uaa connector This commit adds support for dex to authenticate users from a CloudFoundry User Account and Authentication (UAA) Server. Fixes: #538	10 years ago
Eric Chiang	b02a3a3163	*: add "groups" scope	10 years ago
Bobby Rullo	b80dbc8975	server: support out-of-band auth flow When "urn:ietf:wg:oauth:2.0:oob" is used as a redirect URI, redirect to an internal dex page where the user is shown the code and instructed to paste it into their app.	10 years ago
Bobby Rullo	cdcf08066d	client, server: public client restrictions * disallow ClientCreds for public clients * clients can only redirect to localhost or OOB	10 years ago
Bobby Rullo	4f85f3a479	server: change ClientMetadata -> Client Metadata is not enough these days - we're going to need access to the Public field as well.	10 years ago
Bobby Rullo	32a1994a5e	refresh tokens: store and validate scopes. A refresh request must fail if it asks for scopes that were not originally granted when the refresh token was obtained. This Commit: * changes repo to store scopes with tokens * changes repo interface signatures so that scopes can be stored and verified * updates dependent code to pass along scopes	10 years ago
Bobby Rullo	5939a15d10	remove DexServer	10 years ago
Bobby Rullo	e71c5086ba	server: CodeToken now does Cross-Client auth	10 years ago
Bobby Rullo	9b4740862c	server: /auth accepts, validates X-client scopes	10 years ago
Bobby Rullo	847849931f	Revert "Fix response_type missing param" This reverts commit `821b242c83`.	10 years ago
Rubén Soleto Buenvarón	821b242c83	Fix response_type missing param This commit fix problem with response_type param, which is required according to OIDC spec, when it is missing. At now, when connector_id url query param is not set, connector view use response_type that client request instead of default "code". Fixes #370	10 years ago
Eric Chiang	c3aa6a1ee3	server: correctly decode oauth2 basic auth credentials Fixes #336	10 years ago
Eric Chiang	04cd1851aa	server: add dynamic client registration	10 years ago
Frode Nordahl	5d284e08ae	Change status code used for redirects from StatusTemporaryRedirect (307) to StatusFound (302) HTTP code 307 aka. StatusTemporaryRedirect is used throughout the project. However, the endpoints redirected to explicitly expects the client to make a GET request. If a HTTP client issues a POST request to a server and receives a HTTP 307 redirect, it forwards the POST request to the new URL. When using 302 the HTTP client will issue a GET request. Fixes #287	10 years ago
Eric Chiang	5e44b6bc27	*: update all to accommodate changes to go-oidc Update dex to comply with the changes to fieldnames and types of the client and provider metadata structs in coreos/go-oidc.	10 years ago
Bobby Rullo	dc828825e6	server: better UX when remote ID already exists Instead of cryptic message with nowhere to, give them the choice to login with that account or register.	10 years ago
Eric Chiang	f2c3dbc5e6	static, server: add styles for github and bitbucket connectors Add icons and styles for github and bitbucket buttons.	10 years ago
Joe Bowers	0c854a21d6	server: endpoint and system for sending invitations to dex An invitation allows users to both verify their email address and set a new password.	10 years ago
Gyu-Ho Lee	f06073fbcd	server: use standard lib http.Request.BasicAuth Go 1.4+ has https://golang.org/pkg/net/http/#Request.BasicAuth method for http.Request and it was requested by CoreOS(kelsey) [1] with the same functionalities. If dex's Go development is being done in Go 1.4 or later, we should use the standard library. Thanks! --- [1] https://codereview.appspot.com/76540043/	11 years ago
Bobby Rullo	bf9517fdaa	server,cmd: Add flag for disabling registation For situations where admins add users.	11 years ago
Giulio Iotti	472e4a02a4	*: Remove unnecessary else statements Whenever it makes the code easier to follow, use early return to avoid else statements.	11 years ago
Yifan Gu	93a0830ae0	server: check scope in requests. Require 'openid' in scope for all requests. Require 'offline_access' for returning refresh token.	11 years ago
Yifan Gu	066fd859ec	session: add 'scope' field in session.	11 years ago
Bobby Rullo	66fe201c24	*: move original project to dex	11 years ago

29 Commits (v1)