mirror/dex - dex - xhrpb gitea

Commit Graph

Author	SHA1	Message	Date
Yann Soubeyrand	c5f2871ab5	cmd/dex/serve.go: log static client name instead of ID Signed-off-by: Yann Soubeyrand <yann.soubeyrand@gmx.fr>	7 years ago
Mark Sagi-Kazar	06521ffa49	Remove the logrus logger wrapper	7 years ago
Mark Sagi-Kazar	be581fa7ff	Add logger interface and stop relying on Logrus directly	7 years ago
Haines Chan	18b6b34b67	Display access token in example app	7 years ago
Steven Danna	59f8b02d47	Set minimum TLS protocol version to TLSv1.2, set PreferServerCipherSuites Some environments are subject to strict rules about the permitted TLS protocol verion and available ciphers. Setting TLSv1.2 as the minimum version ensures we do not use weaker protocols. We've opted against making this configurable given the age of TLSv1.2 and the increasing push to deprecate TLSv1.1 and older. The PreferServerCipherSuites setting is also commonly flagged by SSL quality scanning tools. Since Go provides a relatively modern set of default ciphers by default, defaulting this to true is unlikely to make much practical difference. Signed-off-by: Steven Danna <steve@chef.io>	7 years ago
Haines Chan	b78b8aeee0	Replace "GET", "POST" to http.MethodGet and http.MethodPost	7 years ago
Maximilian Gaß	74f84ce0be	Change config test to non-default expiry settings	7 years ago
Maximilian Gaß	468c74d1d2	Make expiry of auth requests configurable	7 years ago
Stephan Renatus	73fdf4f75b	storage/sql/postgres: expose stdlib tunables, set them for tests - adapted TestUnmarshalConfig to ensure the fields are read in - added a test to see that at least MaxOpenConns works: - this is only exposed through (*db).Stats() in go 1.11, so this test has a build tag - the other two configurables can't be read back, so we've got to trust that the mechanism works given the one instance that's tested.. Signed-off-by: Stephan Renatus <srenatus@chef.io>	7 years ago
Stephan Renatus	b9f6594bf0	*: github.com/coreos/dex -> github.com/dexidp/dex Signed-off-by: Stephan Renatus <srenatus@chef.io>	8 years ago
Frederic Branczyk	5f03479d29	*: Add go runtime, process, HTTP and gRPC metrics	8 years ago
Daniel Dao	ca114f7812	storage: add etcd storage This patch adds etcd storage implementation. This should be useful in environments where - we dont want to depends on a separate, hard to maintain SQL cluster - we dont want to incur the overhead of talking to kubernetes apiservers - kubernetes is not available yet, or if kubernetes depends on dex to perform authentication and the operator would like to remove any circular dependency if possible.	8 years ago
Devon Barrett	eb14a8245c	fixes typo: s/suppied/supplied/	9 years ago
rithu john	fd4f57b5f3	storage/static.go: storage backend should not explicitly lower-case email ids.	9 years ago
Eric Stroczynski	4a88d0641a	: update {S->s}irupsen/logrus	9 years ago
rithu john	dc4b97b851	cmd/dex/serve: add local connector directly to static connectors in storage	9 years ago
rithu john	8c9c2518f5	server: account for dynamically changing connector object in storage.	9 years ago
zhuguihua	4e99ec3eeb	Fix two typos Signed-off-by: zhuguihua <zhuguihua@cmss.chinamobile.com> Change storace to storage in cmd/dex/config.go, change userSearch to groupSearch in connector/ldap/ldap.go	9 years ago
Eric Chiang	5f377f07d4	*: promote SAML to stable This means we no longer refer to it as "experimental" and wont make breaking changes.	9 years ago
Eric Chiang	9b0e9ab2ca	cmd/example-app: fix custom CA behavior	9 years ago
Eric Chiang	777eeafabc	*: update go-oidc and use standard library's context package	9 years ago
Ali Javadi	e623ad4d35	connector: add GitLab connector	9 years ago
rithu john	31e8009441	cmd/dex: make connector name field mandatory in dex configuration.	9 years ago
Simon HEGE	415a68f977	Allow CORS on keys and token endpoints	9 years ago
Eric Chiang	ed20fee2b9	cmd/example-app: fix refreshing	9 years ago
Eric Chiang	78665074ed	cmd/example-app: add option to not request a refresh token	9 years ago
Eric Chiang	0f4a1f69c5	*: wire up SAML POST binding	9 years ago
Simon HEGE	b4c47910e4	Allow CORS on discovery endpoint	9 years ago
rithu john	135b71727d	server: use UTC timestamps in dex.	9 years ago
Eric Chiang	50086e6863	cmd/dex: provide better feedback when parsing config	9 years ago
rithu john	8b7f810bb8	cmd/dex: modify error messages to info messages.	9 years ago
Eric Chiang	fe196864c0	*: fix comment typos found with github.com/client9/misspell	9 years ago
rithu john	9949a1313c	server: modify error messages to use logrus.	9 years ago
rithu john	2e22a948cf	cmd/dex: add logging config and serve logger for different modules.	9 years ago
Eric Chiang	aebb6818b7	cmd/example-app: use a non-empty state Use a non-empty state in the example-app to ensure dex is properly preserving the state for the code flow. Updates #712	9 years ago
Eric Chiang	391dc51c13	*: add theme based frontend configuration This PR reworks the web layout so static files can be provided and a "themes" directory to allow a certain degree of control over logos, styles, etc. This PR does NOT add general support for frontend customization, only enough to allow us to start exploring theming internally. The dex binary also must now be run from the root directory since templates are no longer "compiled into" the binary. The docker image has been updated with frontend assets.	9 years ago
Eric Chiang	522749b5d8	*: switch oidc client to github.com/coreos/go-oidc This saves us from having to import two different versions of square/go-jose.	9 years ago
Chris Jones	a2b78c28fc	cmd/dex: validate that connectors have an ID.	9 years ago
Eric Chiang	015e7cf606	cmd/dex: only expand from env for storages and connectors Bcrypt'd hashes have "$" characters in them. This means that #667 (accepting actually bcrypted values) combined with #627 (expanding config with environment variables) broke the example config. For now, allow storages and connectors to expand their configs from the environment, but don't do this anywhere else.	10 years ago
Eric Chiang	35d6423ac2	cmd/example-app: add a --debug flag	10 years ago
rithu leena john	600e761266	cmd/dex: expose IDTokensValidFor and RotateKeysAfter server options in config.	10 years ago
Eric Chiang	ebe51e736d	cmd/dex: accept raw bcrypt'd hash as well as base64'd version of hash	10 years ago
Eric Chiang	aa7f304bc1	: switch to github.com/ghodss/yaml for more consistent YAML parsing ghodss/yaml converts from YAML to JSON before attempting to unmarshal. This allows us to: Get the correct behavor when decoding base64'd []byte slices. * Use json.RawMessage. Not have to support extravagant YAML features. * Let our structs use `json:` tags	10 years ago
rithu leena john	42dfd3ecec	cmd/dex: add option for gRPC client auth CA.	10 years ago
Eric Chiang	a11db557b4	*: expand environment variables in config Allow users to define config values which are read form environemnt variables. Helpful for sensitive variables such as OAuth2 client IDs or LDAP credentials.	10 years ago
Eric Chiang	dc13f09fb7	*: add more comments to the example config	10 years ago
Eric Chiang	3dac0063df	*: properly compile version into docker images	10 years ago
Eric Chiang	4296604f11	{cmd,server}: move garbage collection logic to server	10 years ago
Eric Chiang	fdc529ee0d	cmd/example-app: check if a provider supports a refresh token scope Some OpenID Connect providers, notably Google, don't follow the spec and allow refresh tokens to be requested with the "offline_access" scope. Try to determine which we're talking to by checking the supported_scopes listed by the provider discovery.	10 years ago
Eric Chiang	dcbe67d89c	{cmd/dex,server}: expose skip approval screen option	10 years ago

1 2

69 Commits (v2.16.x)