mirror/dex - dex - xhrpb gitea

Commit Graph

Author	SHA1	Message	Date
m.nabokikh	6822ad950f	feat: enable profiling endpoints Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	4 years ago
Andrew Keesler	764ce711b6	distroless: rewrite docker-entrypoint.sh in go See go doc ./cmd/docker-entrypoint for why. Signed-off-by: Andrew Keesler <akeesler@vmware.com>	4 years ago
iam-veeramalla	528ef18c2f	feat: print dex version in the logs Signed-off-by: iam-veeramalla <abhishek.veeramalla@gmail.com>	4 years ago
Eng Zer Jun	f0186ff265	refactor: move from io/ioutil to io and os package The io/ioutil package has been deprecated as of Go 1.16, see https://golang.org/doc/go1.16#ioutil. This commit replaces the existing io/ioutil functions with their new definitions in io and os packages. Signed-off-by: Eng Zer Jun <engzerjun@gmail.com>	5 years ago
m.nabokikh	eae3219e4d	feat: Add MySQL ent-based storage driver Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	5 years ago
Mark Sagi-Kazar	a207238491	chore: fix lint issues Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>	5 years ago
Mark Sagi-Kazar	0bef10ef80	chore(deps): update gosundheit Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>	5 years ago
Maksim Nabokikh	20875c972e	Discard package "version" (#2107 ) * Discard package "version" Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com> * Inject api version Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com> * Pass version arg to the dex API Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	5 years ago
m.nabokikh	19884d92ac	feat: Add ent-based postgres storage Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	5 years ago
m.nabokikh	11859166d0	feat: Add ent-based sqlite3 storage Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	5 years ago
Mark Sagi-Kazar	a050f3228a	feat: add DEX_FRONTEND_DIR env var for setting the frontend dir Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>	5 years ago
Rui Yang	4e569024fd	use go 1.16 new package io/fs Unify the interface for reading web statics. Now it could read an OS directory or get the content on live One could use //go:embed static var webFiles embed.FS anywhere and config dex server to take the file system by setting WebConfig{WebFS: webFiles} Signed-off-by: Rui Yang <ruiya@vmware.com> Co-authored-by: Aidan Oldershaw <aoldershaw@pivotal.io>	5 years ago
Rui Yang	7b50cbf0ac	use pkger for embedding static contents Co-authored-by: Vikram Yadav <vyadav@pivotal.io> Signed-off-by: Rui Yang <ruiya@vmware.com>	5 years ago
Rui Yang	10e9054811	Use http.FileSystem for web assets	5 years ago
Maksim Nabokikh	568fc06520	Update server/refreshhandlers.go Co-authored-by: Joel Speed <Joel.speed@hotmail.co.uk> Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	5 years ago
Mark Sagi-Kazar	24a1103f11	refactor: rename gr to group Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>	5 years ago
Mark Sagi-Kazar	9cffca70f2	refactor: relocate run group initialization Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>	5 years ago
m.nabokikh	87ebbaf834	fix: close storage on shutdown Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	5 years ago
Mark Sagi-Kazar	316da70545	refactor: use new health checker Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>	5 years ago
Mark Sagi-Kazar	d77147f7cf	refactor: fix router variable name Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>	5 years ago
Mark Sagi-Kazar	024f69b2c7	feat: add health check to telemetry server Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>	5 years ago
m.nabokikh	06c8ab5aa7	Fixes of naming and code style Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	5 years ago
m.nabokikh	91de99d57e	feat: Add refresh token expiration and rotation settings Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	5 years ago
Maksim Nabokikh	6664b5702d	Apply suggestions from code review Co-authored-by: Márk Sági-Kazár <sagikazarmark@users.noreply.github.com> Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	5 years ago
Maksim Nabokikh	65a8bf2af3	feat: graceful shutdown fixes Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	5 years ago
m.nabokikh	f82c217e12	feat: graceful shutdown Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	5 years ago
Mark Sagi-Kazar	6742008fc2	refactor: version command Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>	5 years ago
Mark Sagi-Kazar	c55d84b5d2	feat: add flags for bind address config options Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>	5 years ago
Mark Sagi-Kazar	cdefd1f788	refactor: serve command Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>	5 years ago
Martin Heide	4cb5577e11	Allow to disable os.ExpandEnv for storage + connector configs by env variable DEX_EXPAND_ENV = false Signed-off-by: Martin Heide <martin.heide@faro.com>	5 years ago
Mark Sagi-Kazar	349832b380	Run fixer Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>	5 years ago
m.nabokikh	1d83e4749d	Add gocritic Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	5 years ago
Mark Sagi-Kazar	6dadc26ca2	Move the example app to th examples folder Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>	6 years ago
justin-slowik	1ea2892b79	fix merge error in config.go Signed-off-by: justin-slowik <justin.slowik@thermofisher.com>	6 years ago
Justin Slowik	9bbdc721d5	Device flow token code exchange (#2 ) * Added /device/token handler with associated business logic and storage tests. Perform user code exchange, flag the device code as complete. Moved device handler code into its own file for cleanliness. Cleanup * Removed PKCE code * Rate limiting for /device/token endpoint based on ietf standards * Configurable Device expiry Signed-off-by: justin-slowik <justin.slowik@thermofisher.com>	6 years ago
krishnadurai	6698f1f80a	Corrects imports after merge Signed-off-by: justin-slowik <justin.slowik@thermofisher.com>	6 years ago
krishnadurai	776aa9dd53	Option to add staticPasswords from environment variables Signed-off-by: justin-slowik <justin.slowik@thermofisher.com>	6 years ago
Mark Sagi-Kazar	e84682d7b9	Add v2 api module	6 years ago
Tomasz Kleczek	c830d49884	allow no secret for static public clients For statically-configured public clients it should be allowed for both Secret and SecretEnv fields to be empty.	6 years ago
Yann Soubeyrand	99c3ec6820	Add ability to set ID and Secret from environment variables for static clients Having ID and Secret in clear inside configuration files for static clients is not ideal. This commit allows setting these from environment variables. Signed-off-by: Yann Soubeyrand <yann.soubeyrand@gmx.fr>	6 years ago
Zach Brown	13be146d2a	Add support for password grant #926	6 years ago
krishnadurai	321790870f	Fixes lint	6 years ago
krishnadurai	2d5619e4e8	Corrects imports after merge	6 years ago
Mark Sagi-Kazar	f141f2133b	Fix whitespace	6 years ago
Mark Sagi-Kazar	9bd5ae5197	Fix goimports	6 years ago
Mark Sagi-Kazar	142c96c210	Fix stylecheck	6 years ago
krishnadurai	1fd5dd7b0e	Change env var prefix to DEX and add to ci.yaml	6 years ago
krishnadurai	af9c2880a6	Corrects validation logic for static password check	6 years ago
krishnadurai	91cbd466a5	Option to add staticPasswords from environment variables	6 years ago
Steven Danna	46f48b33a1	Use a more conservative set of CipherSuites The default cipher suites used by Go include a number of ciphers that have known weaknesses. In addition to leaving users open to these weaknesses, the inclusion of these weaker ciphers causes problems with various automated scanning tools. This PR disables the CBC-mode, RC4, and 3DES ciphers included in the Go standard library by passing an explicit cipher suite list. The ciphers included here are more line with those recommended by Mozilla for "Intermediate" compatibility. [0] Performance Implications The Go standard library does capability-based cipher ordering, preferring AES ciphers if the underlying hardware has AES specific instructions. [1] Since all of the relevant code is internal modules, to do the same thing ourselves would require duplicating that code. Here, I've placed AES based ciphers first. Compatibility Implications This does reduce the number of clients who will be able to communicate with dex. [0] https://ssl-config.mozilla.org/#server=nginx&server-version=1.17.0&config=intermediate&hsts=false&ocsp=false [1] `a8c2e5c6ad/src/crypto/tls/common.go (L1091)` Signed-off-by: Steven Danna <steve@chef.io>	7 years ago

1 2 3

137 Commits (v2.35.x)