mirror/dex - dex - xhrpb gitea

Commit Graph

Author	SHA1	Message	Date
rithu john	0ee40865a2	web/static/main.css: fix typo.	9 years ago
Eric Chiang	72a431dd4b	{web,server}: use html/template and reduce use of auth request ID Switch from using "text/template" to "html/template", which provides basic XSS preventions. We haven't identified any particular place where unsanitized user data is rendered to the frontend. This is just a preventative step. At the same time, make more templates take pure URL instead of forming an URL themselves using an "authReqID" argument. This will help us stop using the auth req ID in certain places, preventing garbage collection from killing login flows that wait too long at the login screen. Also increase the login session window (time between initial redirect and the user logging in) from 30 minutes to 24 hours, and display a more helpful error message when the session expires. How to test: 1. Spin up dex and example with examples/config-dev.yaml. 2. Login through both the password prompt and the direct redirect. 3. Edit examples/config-dev.yaml removing the "connectors" section. 4. Ensure you can still login with a password. (email/password is "admin@example.com" and "password")	9 years ago
Ali Javadi	e623ad4d35	connector: add GitLab connector	9 years ago
rithu john	75aa1c67ce	server: add error HTML templates with error description.	9 years ago
Amruta Chitnis	b7439d1a75	Address PR comments	9 years ago
Amruta Chitnis	577d1af029	web: Updates classes in templates	9 years ago
Amruta Chitnis	2bc690591e	web: Updates css	9 years ago
Amruta Chitnis	ea75973547	web: Adds tectonic specific files	9 years ago
Amruta Chitnis	0dc7870f39	web: Adds svg files for icons	9 years ago
Eric Chiang	5e61d5fe83	Revert "Merge pull request #714 from amrutac/refactor-css" This reverts commit `4d88eabb50`, reversing changes made to `b38d355202`.	9 years ago
Amruta Chitnis	170727454d	web: Updates classes in templates	9 years ago
Amruta Chitnis	fabdae8e71	web: Updates css	9 years ago
Amruta Chitnis	da872ecd35	web: Adds tectonic specific files	9 years ago
Amruta Chitnis	513525c0ab	web: Adds svg files for icons	9 years ago
Eric Chiang	391dc51c13	*: add theme based frontend configuration This PR reworks the web layout so static files can be provided and a "themes" directory to allow a certain degree of control over logos, styles, etc. This PR does NOT add general support for frontend customization, only enough to allow us to start exploring theming internally. The dex binary also must now be run from the root directory since templates are no longer "compiled into" the binary. The docker image has been updated with frontend assets.	9 years ago
Eric Chiang	7c2289e0de	*: rename internally used "state" form value to "req" "state" means something specific to OAuth2 and SAML so we don't want to confuse developers who are working on this. Also don't use "session" which could easily be confused with HTTP cookies.	10 years ago
Eric Chiang	7084a801d7	*: port oob template	10 years ago
Eric Chiang	91ff8a16cd	web/templates: port templates from v1	10 years ago

19 Commits (v2.3.x)