mirror/dex - dex - xhrpb gitea

Commit Graph

Author	SHA1	Message	Date
Ali Javadi	e623ad4d35	connector: add GitLab connector	9 years ago
Ali Javadi	98bfa4fbb1	Fixes #706	9 years ago
Holger Koser	e46f2ebe40	Improve SAML Signature and Response Validation * Improve Order of Namespace Declarations and Attributes in Canonical XML. This is related to an issue in goxmldsig for which I created an [pull request](https://github.com/russellhaering/goxmldsig/pull/17). * Do not compress the AuthnRequest if `HTTP-POST` binding is used. * SAML Response is valid if the Message and/or the Assertion is signed. * Add `AssertionConsumerServiceURL` to `AuthnRequest` * Validate Status on the Response * Validate Conditions on the Assertion * Validation SubjectConfirmation on the Subject	9 years ago
Eric Chiang	31dfb54b6f	connector: add a SAML connector	9 years ago
rithu john	6a728f107e	connector/ldap: enable groupSearch to be empty	9 years ago
rithu john	9949a1313c	server: modify error messages to use logrus.	9 years ago
rithu john	2e22a948cf	cmd/dex: add logging config and serve logger for different modules.	9 years ago
Eric Chiang	1e0cf3c068	connector/ldap: default email_verified to true	9 years ago
Eric Chiang	522749b5d8	*: switch oidc client to github.com/coreos/go-oidc This saves us from having to import two different versions of square/go-jose.	9 years ago
Eric Chiang	55e97d90a6	*: add tests for the RefreshConnector	9 years ago
Eric Chiang	952e0f81f5	connector: add RefreshConnector interface	9 years ago
Eric Chiang	ae4c32bc3b	connector/ldap: use gopkg.in/ldap.v2's escape filter Use the escape filter method provided by the upstream LDAP package instead of rolling our own.	9 years ago
Phu Kieu	d4aba443ac	Allow getAttr to return DN Specify "DN" as attribute name to return, but will only work if not present in ldap.Entry.Attributes Use when full DN is stored in groupSearch's userAttr	9 years ago
Chris Jones	384ac87deb	connector/ldap: Always set tls.Config.ServerName, to support LDAP servers with public CA certs.	9 years ago
Eric Chiang	0f31566b27	connector: accept base64 encoded CA and add convience open method	10 years ago
Eric Chiang	aa7f304bc1	: switch to github.com/ghodss/yaml for more consistent YAML parsing ghodss/yaml converts from YAML to JSON before attempting to unmarshal. This allows us to: Get the correct behavor when decoding base64'd []byte slices. * Use json.RawMessage. Not have to support extravagant YAML features. * Let our structs use `json:` tags	10 years ago
Eric Chiang	57a59d4631	*: don't error out if a username doesn't exist in the backing connector Instead of throwing a 500 error if a user enters an invalid name, display the same text box as if the user had entered the wrong password. NOTE: An invalid username now returns much quicker than an invalid password. Consider adding an arbitrary sleep in the future if we care about masking which was invalid.	10 years ago
Eric Chiang	4329406158	connector/ldap: fix bug in switch statement	10 years ago
Eric Chiang	13f7dfaef0	connector/ldap: expand LDAP connector to include searches	10 years ago
Eric Chiang	a3235d022a	*: verify "state" field before passing request to callback connectors Let the server handle the state token instead of the connector. As a result it can throw out bad requests earlier. It can also use that token to determine which connector was used to generate the request allowing all connectors to share the same callback URL. Callbacks now all look like: https://dex.example.com/callback Instead of: https://dex.example.com/callback/(connector id) Even when multiple connectors are being used.	10 years ago
Eric Chiang	a11db557b4	*: expand environment variables in config Allow users to define config values which are read form environemnt variables. Helpful for sensitive variables such as OAuth2 client IDs or LDAP credentials.	10 years ago
Eric Chiang	68746fd795	*: add a mock connector which takes a username and password for testing Since we don't have a good strategy which takes a username and password add a mock connector which implementes PasswordConnector so we can develop the frontend screens.	10 years ago
Eric Chiang	bfe560ee21	rename	10 years ago
Eric Chiang	fd5e508f1c	*: implement the OpenID Connect connector	10 years ago
Eric Chiang	f4c5722e42	*: connectors use a different identity object than storage	10 years ago
Eric Chiang	cab271f304	initial commit	10 years ago

29 Commits (v2.2.x)