mirror/dex - dex - xhrpb gitea

Commit Graph

Author	SHA1	Message	Date
Nandor Kracser	7b416b5a8e	gitlab: add tests	7 years ago
Nandor Kracser	a08a5811d4	gitlab: support for group whitelist	7 years ago
Gerald Barker	fc723af0fe	Add option to OIDC connecter to override email_verified to true	7 years ago
Mark Sagi-Kazar	06521ffa49	Remove the logrus logger wrapper	7 years ago
Mark Sagi-Kazar	be581fa7ff	Add logger interface and stop relying on Logrus directly	7 years ago
James Nord	fe247b106b	remove blank line that tripped up `make verify-proto`	7 years ago
James Nord	9840fccdbb	rename useLoginAsId -> useLoginAsID	7 years ago
Stephan Renatus	df18cb0c22	ldap_test: add filter tests The filters for user and group searches hadn't been included in our LDAP tests. Now they are. The concrete test cases are somewhat contrived, but that shouldn't matter too much. Also note that the example queries I've used are not supported in AD: https://stackoverflow.com/a/10043452 Signed-off-by: Stephan Renatus <srenatus@chef.io>	7 years ago
James Nord	5822a5ce9e	fix formatting of connector/github/github_test.go	7 years ago
James Nord	03ffd0798c	Allow an option to use the github user handle rather than an id. For downstream apps using a github handle is much simpler than working with numbers. WHilst the number is stable and the handle is not - GitHUb does give you a big scary wanring if you try and change it that bad things may happen to you, and generally few users ever change it. This can be enabled with a configuration option `useLoginAsId`	7 years ago
Krzysztof Balka	e8ba848907	keystone: fetching groups only if requested, refactoring.	7 years ago
joannano	88d1e2b041	keystone: test cases, refactoring and cleanup	7 years ago
Krzysztof Balka	a965365a2b	keystone: refresh token and groups	7 years ago
knangia	0774a89066	keystone: squashed changes from knangia/dex	7 years ago
Daniel Kessler	ee54a50956	LDAP connector - add emailSuffix config option	7 years ago
Josh Winters	bb11a1ebee	github: add 'both' team name field option this will result in both the team name and the team slug being returned for each team, allowing a bit more flexibility in auth validation. Signed-off-by: Topher Bullock <tbullock@pivotal.io> Signed-off-by: Alex Suraci <suraci.alex@gmail.com>	7 years ago
gypsydiver	f21e6a0f00	gypsydiver/1347-pr-gitlab-groups	7 years ago
Alexander Matyushentsev	7bd084bc07	Issue #1102 - Add config to explicitly enable loading all github groups	7 years ago
Alexander Matyushentsev	20bc6cd353	Full list of groups should include group names as well as group_name:team_name	7 years ago
Alexander Matyushentsev	ce3cd53a11	Bug fix: take into account 'teamNameField' settings while fetching all user groups	7 years ago
Alexander Matyushentsev	e876353128	Rename variables to stop shadowing package name	7 years ago
Alexander Matyushentsev	a9f71e378f	Update getPagination method comment	7 years ago
Alexander Matyushentsev	e10b8232d1	Apply reviewer notes: style changes, make sure unit test verifies pagination	7 years ago
Alexander Matyushentsev	51d9b3d3ca	Issue #1184 - Github connector now returns a full group list when no org is specified	7 years ago
Stephan Renatus	c14b2fd5a5	connector/ldap: slightly improve error output Signed-off-by: Stephan Renatus <srenatus@chef.io>	7 years ago
Ed Tan	50afa921b5	Remove unused DisplayName	8 years ago
Ed Tan	6ffc8fcd8d	Rename bitbucket to bitbucketcloud	8 years ago
Ed Tan	d26e23c16f	Make suggested code changes	8 years ago
Ed Tan	2c024d8caf	Fix golint issues	8 years ago
Ed Tan	8c75d85b60	Add Bitbucket connector	8 years ago
Stephan Renatus	26c0206627	connector/saml: make unparsable (trailing, non-space/newline) data an error Fixes #1304, if we want to be harsh. However, I think if it was the user's intention to pass two certs, and the second one couldn't be read, that shouldn't just disappear. After all, when attempting to login later, that might fail because the expected IdP cert data isn't there. Signed-off-by: Stephan Renatus <srenatus@chef.io>	8 years ago
veily	317f433a14	support self-signed certificates ldap Format ldap.go Format ldap.go: with a space for golint with a space Rename clientCA is to clientCert Update ldap.go modified the ldap client certificate file comments. modified load ldap client cert error. modified load ldap client cert error: fmt.Errorf("ldap: load client cert failed: %v", err)	8 years ago
Scott Reisor	2707302054	add Refresh() to mock passwordConnector	8 years ago
Taras Burko	bf39130bab	Configurable team name field for GitHub connector	8 years ago
Stephan Renatus	b9f6594bf0	*: github.com/coreos/dex -> github.com/dexidp/dex Signed-off-by: Stephan Renatus <srenatus@chef.io>	8 years ago
Stephan Renatus	6a2d4ab6b4	connectors/ldap: treat 'constraint violation' on bind as bad credentials Some directory servers (I think it's Oracle) return Constraint Violation: Exceed password retry limit. Account locked. when attempting to login too many times. While constraint violation can mean many things, we're checking this as an error on BIND, so it's more likely that something like this has happened than any other thing. Hence, we should treat it as an "incorrect password" situation, not an internal error. It would of course be preferrable to surface more information about this precise error (and similar ones), but I think this is beyond this small change. Signed-off-by: Stephan Renatus <srenatus@chef.io>	8 years ago
Anian Z	5454a4729f	fix default baseURL for gitlab connector	8 years ago
silenceshell	468b5e3f0a	fix typo Should `pulic` be `public`?	8 years ago
Stephan Renatus	608260d0f1	saml: add tests case covering tampered NameID field (comment) As sketched here: https://developer.okta.com/blog/2018/02/27/a-breakdown-of-the-new-saml-authentication-bypass-vulnerability Thought it was interesting to see how our SAML connector behaved. And it seems to be behaving well. :) Signed-off-by: Stephan Renatus <srenatus@chef.io>	8 years ago
pmcgrath	4aec353aec	1170 - Fix comment typos BsaeDN should be BaseDN	8 years ago
Pavel Borzenkov	47df6ea2ff	connector/microsoft: add support for groups Microsoft connector now provides support for 'groups' claim in case 'tenant' is configured in Dex config for the connector. It's possible to deny user authentication if the user is not a member of at least one configured groups. Signed-off-by: Pavel Borzenkov <pavel.borzenkov@gmail.com>	8 years ago
Pavel Borzenkov	6193bf5566	connector: implement Microsoft connector connector/microsoft implements authorization strategy via Microsoft's OAuth2 endpoint + Graph API. It allows to choose what kind of tenants are allowed to authenticate in Dex via Microsoft: * common - both personal and business/school accounts * organizations - only business/school accounts * consumers - only personal accounts * <tenant uuid> - only account of specific tenant Signed-off-by: Pavel Borzenkov <pavel.borzenkov@gmail.com>	8 years ago
Stephan Renatus	b09a13458f	password connectors: allow overriding the username attribute (password prompt) This allows users of the LDAP connector to give users of Dex' login prompt an idea of what they should enter for a username. Before, irregardless of how the LDAP connector was set up, the prompt was Username [_________________] Password [_________________] Now, this is configurable, and can be used to say "MyCorp SSO Login" if that's what it is. If it's not configured, it will default to "Username". For the passwordDB connector (local users), it is set to "Email Address", since this is what it uses. Signed-off-by: Stephan Renatus <srenatus@chef.io>	9 years ago
Eric Chiang	6475ce1f62	connector/oidc: remove test that talks to the internet	9 years ago
Pavel Borzenkov	3b5df52c0f	connector/linkedin: implement RefreshConnector interface Do Refresh() by querying user's profile data. Since LinkedIn doesn't provide refresh tokens at all, and the access tokens have 60 days expiration, refresh tokens issued by Dex will fail to update after 60 days. Signed-off-by: Pavel Borzenkov <pavel.borzenkov@gmail.com>	9 years ago
Pavel Borzenkov	ab06119431	connector: implement LinkedIn connector connector/linkedin implements authorization strategy via LinkedIn's OAuth2 endpoint + profile API. It doesn't implement RefreshConnector as LinkedIn doesn't provide any refresh token at all (https://developer.linkedin.com/docs/oauth2, Step 5 — Refresh your Access Tokens) and recommends ordinary AuthCode exchange flow when token refresh is required. Signed-off-by: Pavel Borzenkov <pavel.borzenkov@gmail.com>	9 years ago
Eric Chiang	d099145921	authproxy: update docs and set a userID	9 years ago
Michael Stapelberg	a41d93db4a	Implement the “authproxy” connector (for Apache2 mod_auth etc.)	9 years ago
Eric Chiang	fcf00019de	connector/ldap: add test for InsecureSkipVerify option	9 years ago
Lars Sjöström	4605fdd551	connector/gitlab: Fix regexp in Link parser	9 years ago

1 2 3

131 Commits (0babb2df18a7c4617bb82803d86471d887d99a4e)