Victor Sartori
1ea1d809a1
Update alpine to 3.8
8 years ago
Victor Sartori
780a359f8e
Fix #1252
8 years ago
Eric Chiang
036e5d050d
Merge pull request #1226 from joedborg/examples-cleanup
...
Removing whitespace
8 years ago
Eric Chiang
384db1f33e
Merge pull request #1231 from mklan/patch-1
...
Update using-dex.md
8 years ago
Eric Chiang
0822f1d4d3
Merge pull request #1232 from silenceshell/patch-1
...
fix typo
8 years ago
Eric Chiang
bf3ffb53a0
Merge pull request #1233 from kpschuck/master
...
Updates go to 1.10.2 to support SHA-512 for ldaps
8 years ago
Kevin Schuck
ca3d73c36d
Updates go to 1.10.2 to support SHA-512 for ldaps
8 years ago
silenceshell
468b5e3f0a
fix typo
...
Should `pulic` be `public`?
8 years ago
Matthias Klan
481f1276a8
Update using-dex.md
...
fix wrong port from example
8 years ago
Joe Borg
fc8b20ba35
Removing whitespace
8 years ago
Eric Chiang
0d3edf2456
Merge pull request #1208 from ericchiang/go10
...
*: update build to Go 1.10
8 years ago
Eric Chiang
264484075a
*: update build to Go 1.10
8 years ago
Eric Chiang
f2eac0e723
Merge pull request #1200 from carbin-gun/master
...
Update check go major version way
8 years ago
charles.deng
d92c21b9f9
Update check go major version way
...
the previous one just keep one prefix number as the major number, it should be the whole number after the dot.
8 years ago
Eric Chiang
218d671a96
Merge pull request #1198 from srenatus/sr/add-test-case-for-tampered-nameid-field-with-comment
...
saml: add tests case covering tampered NameID field (comment)
8 years ago
Stephan Renatus
608260d0f1
saml: add tests case covering tampered NameID field (comment)
...
As sketched here:
https://developer.okta.com/blog/2018/02/27/a-breakdown-of-the-new-saml-authentication-bypass-vulnerability
Thought it was interesting to see how our SAML connector behaved. And
it seems to be behaving well. :)
Signed-off-by: Stephan Renatus <srenatus@chef.io>
8 years ago
Eric Chiang
39a66d1496
Merge pull request #1195 from Skn0tt/patch-1
...
Add missing word
8 years ago
Simon Knott
822a10cede
Add missing word
8 years ago
Eric Chiang
01d63b086f
Merge pull request #1176 from vyshane/master
...
New id_provider scope that adds the connector ID and user ID to the ID token claims
8 years ago
Vy-Shane Xie
b03c85e56e
Add new federated:id scope that causes Dex to add a federated_claims claim containing the connector_id and user_id to the ID token
8 years ago
Eric Chiang
ce686390a5
Merge pull request #1144 from srenatus/sr/support-direct-post-without-get-first
...
handlers/connector_login: update AuthRequest irregardless of method
8 years ago
Eric Chiang
c0bcc81997
Merge pull request #1171 from pmcgrath/1170-fix-typos
...
1170 - Fix comment typos
8 years ago
pmcgrath
4aec353aec
1170 - Fix comment typos
...
BsaeDN should be BaseDN
8 years ago
Eric Chiang
1dbecefadf
Merge pull request #1166 from ericchiang/coc
...
automated PR: update CoC and legalese
8 years ago
Eric Chiang
f83c86cead
Merge pull request #1168 from ericchiang/connector-docs
...
README: expand connector docs and assign each a level of support
8 years ago
Eric Chiang
ea2c63d7b0
README: expand connector docs and assign each a level of support
8 years ago
Eric Chiang
2851b3c7a6
Merge pull request #1167 from ericchiang/restructure-connector-docs
...
Documentation: restructure connector docs to a single folder
8 years ago
Eric Chiang
460f48320e
Documentation: restructure connector docs to a single folder
8 years ago
Eric Chiang
2215158b2a
update CoC and legalese
8 years ago
Eric Chiang
6ef8cd512f
Merge pull request #1155 from brancz/prometheus
...
Add Prometheus metrics
8 years ago
Frederic Branczyk
0930b09e4e
vendor: Add metrics packages
8 years ago
Frederic Branczyk
5f03479d29
*: Add go runtime, process, HTTP and gRPC metrics
8 years ago
Eric Chiang
053c476c4f
Merge pull request #1157 from ericchiang/conn-oidc-doc-groups
...
document limitations in the OpenID Connect connector
8 years ago
Eric Chiang
0811d1a07a
document limitations in the OpenID Connect connector
8 years ago
Eric Chiang
b5baf6b1ca
Merge pull request #1152 from diegs/bom
...
license: add bill of materials.
8 years ago
Diego Pontoriero
6d4fef4b9a
license: add bill of materials.
8 years ago
Eric Chiang
9d4b1041bd
Merge pull request #1151 from topos-ai/email-address
...
Clarify email scope description
8 years ago
Eric Buth
da45adcb6e
email scope only allows access to a user's email address
8 years ago
Stephan Renatus
f013a44581
handlers/connector_login: check before update (optimization)
...
Signed-off-by: Stephan Renatus <srenatus@chef.io>
8 years ago
Eric Chiang
ec5e2cc3c6
Merge pull request #1135 from mpashka/master
...
Update slapd.sh
8 years ago
Pavel Moukhataev
5ef1312b38
Add note for OpenLDAP installation
8 years ago
Stephan Renatus
f18d7afc6f
handlers/connector_login: update AuthRequest irregardless of method
...
Before, you could not POST your credentials to a password-connector's
endpoint without GETing that endpoint first. While this makes sense for
browser clients; automated interactions with Dex don't need to look at
the password form to fill it in.
A symptom of that missing GET was that the POST succeeded (!) with
login successful: connector "", username="admin", email="admin@example.com", groups=[]
Note the connector "". A subsequent call to finalizeLogin would then
fail with
connector with ID "" not found: failed to get connector object from storage: not found
Now, the connector ID of an auth request will be updated for both GETs
and POSTs.
Signed-off-by: Stephan Renatus <srenatus@chef.io>
8 years ago
Eric Chiang
5172a46171
Merge pull request #1143 from wkalt/fix-verifier-creation-typo
...
Correct "Verifier" method name in using-dex doc
8 years ago
Wyatt Alt
e7d57bb31b
Correct "Verifier" method name in using-dex doc
...
Change provider.NewVerifier to provider.Verifier per the godocs:
https://godoc.org/github.com/coreos/go-oidc#Provider.Verifier
8 years ago
Eric Chiang
18da628842
Merge pull request #1142 from zlabjp/status-code
...
Bugfix: Set a proper status code before sending an error status page
8 years ago
rithu leena john
32257bcf8e
Merge pull request #1140 from ericchiang/fix-proto-build
...
*: fix proto build
8 years ago
Eric Chiang
c5de6fa733
*: regenerate proto
8 years ago
Eric Chiang
ab102b8189
*: revendor
8 years ago
Eric Chiang
35063da41e
*: pin protoc-gen-go dependencies
8 years ago
Kazumasa Kohtaka
9948228e5b
Set a proper status code before sending an error status page
8 years ago