mirror/dex - dex - xhrpb gitea

Commit Graph

Author	SHA1	Message	Date
Bob Callaway	83e2df821e	add PKCE support to device code flow (#2575 ) Signed-off-by: Bob Callaway <bobcallaway@users.noreply.github.com>	4 years ago
Shivansh Vij	cbf158bcc0	Fixes https://github.com/dexidp/dex/issues/2537 Signed-off-by: Shivansh Vij <shivanshvij@outlook.com>	4 years ago
m.nabokikh	3d5a3befb4	fix: prevent cross-site scripting for the device flow Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	4 years ago
m.nabokikh	dea1d3383c	Deprecation warning log message Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	5 years ago
m.nabokikh	3bd0e91a68	Make /device/token deprecation warning more concise Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	5 years ago
m.nabokikh	9ed5cc00cf	Add deprecation warning for /device/token endpoint Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	5 years ago
m.nabokikh	1211a86d58	fix: use /token endpoint to get tokens with device flow Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	5 years ago
m.nabokikh	a7978890c7	Add Cache-control headers to token responses Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	5 years ago
m.nabokikh	b2e9f67edc	Enable unparam, prealloc, sqlclosecheck linters Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	5 years ago
m.nabokikh	1d83e4749d	Add gocritic Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	6 years ago
justin-slowik	9a7926c19b	Cleaned up Device Flow test log levels Signed-off-by: justin-slowik <justin.slowik@thermofisher.com> Remove extraneous "=" from conformance.go Co-authored-by: Joel Speed <Joel.speed@hotmail.co.uk> Additional test for TestHandleDeviceCode Signed-off-by: justin-slowik <justin.slowik@thermofisher.com>	6 years ago
justin-slowik	9882ea453f	better support for /device/callback redirect uris with public clients. Signed-off-by: justin-slowik <justin.slowik@thermofisher.com>	6 years ago
Justin Slowik	9c699b1028	Server integration test for Device Flow (#3 ) Extracted test cases from OAuth2Code flow tests to reuse in device flow deviceHandler unit tests to test specific device endpoints Include client secret as an optional parameter for standards compliance Signed-off-by: justin-slowik <justin.slowik@thermofisher.com>	6 years ago
Justin Slowik	9bbdc721d5	Device flow token code exchange (#2 ) * Added /device/token handler with associated business logic and storage tests. Perform user code exchange, flag the device code as complete. Moved device handler code into its own file for cleanliness. Cleanup * Removed PKCE code * Rate limiting for /device/token endpoint based on ietf standards * Configurable Device expiry Signed-off-by: justin-slowik <justin.slowik@thermofisher.com>	6 years ago

15 Commits (287c5552b009d7262e9deb981e11bcaba643b321)