MM53
efc2fdb102
Store offline sessions only if they were requested by the user ( #3125 )
...
Signed-off-by: MM53 <2821Signed-off-by: MM53 <28218664+MM53@users.noreply.github.com>
2 years ago
Cedric-Magnan
139845c0a5
fix: linting with gofmt
...
Signed-off-by: Cedric-Magnan <cedric.magnan@artefact.com>
Signed-off-by: Oded Ben-Ozer <obenozer@wayfair.com>
3 years ago
Cedric-Magnan
a72413dd47
Update server.go
...
Signed-off-by: Cedric-Magnan <cedric.magnan@artefact.com>
Signed-off-by: Oded Ben-Ozer <obenozer@wayfair.com>
3 years ago
Cedric-Magnan
6c00fe0580
Update oauth2.go
...
Signed-off-by: Cedric-Magnan <cedric.magnan@artefact.com>
Signed-off-by: Oded Ben-Ozer <obenozer@wayfair.com>
3 years ago
Marco Franssen
895b166681
Implement GetClient gRPC endpoint ( #2972 )
...
Signed-off-by: Marco Franssen <marco.franssen@gmail.com>
3 years ago
Sean Liao
dcf7b18510
OAuth 2.0 Token Exchange ( #2806 )
...
Signed-off-by: Sean Liao <sean+git@liao.dev>
Co-authored-by: Maksim Nabokikh <max.nabokih@gmail.com>
3 years ago
Cedric-Magnan
7e4798a7a4
fix: linting with gofmt
...
Signed-off-by: Cedric-Magnan <cedric.magnan@artefact.com>
3 years ago
Cedric-Magnan
791657276e
Update server.go
...
Signed-off-by: Cedric-Magnan <cedric.magnan@artefact.com>
3 years ago
Cedric-Magnan
212df8e0ee
Update oauth2.go
...
Signed-off-by: Cedric-Magnan <cedric.magnan@artefact.com>
3 years ago
Josh Soref
e15b599e6a
spelling: programmatically
...
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>
3 years ago
Josh Soref
a1a05c4a65
spelling: nonexistent
...
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>
3 years ago
Josh Soref
6af340af94
spelling: in spite
...
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>
3 years ago
Josh Soref
542cb4cb65
spelling: data with
...
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>
3 years ago
Maksim Nabokikh
28aaa8f511
fix: Do not skip approval screen by default ( #2897 )
...
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
3 years ago
Mark Sagi-Kazar
d8f2628a84
chore: regenerate proto
...
Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>
3 years ago
Maksim Nabokikh
fc0e2e9383
feat: Add default robots.txt ( #2834 )
...
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
3 years ago
Maksim Nabokikh
7016a82589
fix: return 401 if password is invalid ( #2796 )
...
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
3 years ago
nobuyo
9f70c7da43
Add test for skipping approval
...
Signed-off-by: nobuyo <longzechangsheng@gmail.com>
3 years ago
nobuyo
b7fb7d93a3
Revert back personal tasted changes
...
Signed-off-by: nobuyo <longzechangsheng@gmail.com>
3 years ago
nobuyo
8a86a0a9b8
Skip redirection to approval when it is not requied ( #2686 )
...
Signed-off-by: nobuyo <longzechangsheng@gmail.com>
3 years ago
Daniel Lipovetsky
07d7913049
chore: Upgrade golangci-lint to v1.50.1 from v1.46.0 ( #2790 )
3 years ago
Maksim Nabokikh
6d9ca8de49
fix: Do not use connector data from the refresh token field ( #2729 )
...
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
3 years ago
m.nabokikh
4b5f1d5289
fix: refresh token only once for all concurrent requests
...
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
4 years ago
Bob Callaway
793bcc4b61
address review comments
...
Signed-off-by: Bob Callaway <bcallaway@google.com>
4 years ago
Bob Callaway
fcfbb1ecb0
Add HMAC protection on /approval endpoint
...
Signed-off-by: Bob Callaway <bcallaway@google.com>
4 years ago
Bob Callaway
83e2df821e
add PKCE support to device code flow ( #2575 )
...
Signed-off-by: Bob Callaway <bobcallaway@users.noreply.github.com>
4 years ago
Shivansh Vij
65592d0b5a
Updating test cases
...
Fixes https://github.com/dexidp/dex/issues/2537
Signed-off-by: Shivansh Vij <shivanshvij@outlook.com>
4 years ago
Shivansh Vij
cbf158bcc0
Fixes https://github.com/dexidp/dex/issues/2537
...
Signed-off-by: Shivansh Vij <shivanshvij@outlook.com>
4 years ago
m.nabokikh
bdfb10137a
Add the comment about groups request notification
...
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
4 years ago
m.nabokikh
3d5a3befb4
fix: prevent cross-site scripting for the device flow
...
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
4 years ago
m.nabokikh
ad89e01676
fix: log only errors on refreshing
...
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
4 years ago
m.nabokikh
57e9611ff6
fix: Implicit Grant discovery
...
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
4 years ago
Mark Sagi-Kazar
79721196a8
fix(server): wrap credentials in the correct Dial option
...
Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>
4 years ago
Stephen Augustus
243661155e
server: grpc.WithInsecure is now insecure.NewCredentials()
...
Signed-off-by: Stephen Augustus <foo@auggie.dev>
4 years ago
Maksim Nabokikh
ca615f7ad7
Update server/refreshhandlers.go
...
Co-authored-by: Márk Sági-Kazár <sagikazarmark@users.noreply.github.com>
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
4 years ago
m.nabokikh
578cb05f7b
fix: return invalid_grant error on claiming token of another client
...
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
4 years ago
Joshua Winters
9284ffb8c0
Add generic oauth connector
...
Co-authored-by: Shash Reddy <sreddy@pivotal.io>
Signed-off-by: Joshua Winters <jwinters@pivotal.io>
4 years ago
copperyp
5854dd192d
using path.Join replace filepath.Join
...
Signed-off-by: copperyp <copperyp@gmail.com>
4 years ago
copperyp
a1c1076137
fix web static file path slash error for win platform
...
Signed-off-by: copperyp <copperyp@gmail.com>
4 years ago
m.nabokikh
9fad0602ec
fix: do not update offlinesession lastUsed field if refresh token was not change
...
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
4 years ago
Bob Callaway
2e0041f95f
ensure template does not double-escape URL
...
Signed-off-by: Bob Callaway <bob.callaway@gmail.com>
5 years ago
ariary
7bc966217d
sort grant type supported
...
Signed-off-by: ariary <ariary9.2@hotmail.fr>
5 years ago
Bob Callaway
8fd69c16f5
correctly handle path escaping for connector IDs
...
Signed-off-by: Bob Callaway <bob.callaway@gmail.com>
5 years ago
Eng Zer Jun
f0186ff265
refactor: move from io/ioutil to io and os package
...
The io/ioutil package has been deprecated as of Go 1.16, see
https://golang.org/doc/go1.16#ioutil . This commit replaces the existing
io/ioutil functions with their new definitions in io and os packages.
Signed-off-by: Eng Zer Jun <engzerjun@gmail.com>
5 years ago
ariary
c6f6dd69e9
lint comment
...
Signed-off-by: ariary <ariary9.2@hotmail.fr>
5 years ago
kali
1497e70225
Add parametrization of grant type supported in discovery endpoint
...
Signed-off-by: ariary <ariary9.2@hotmail.fr>
5 years ago
Monis Khan
3009ae3b5d
Return valid JWT access token from password grant
...
This change updates the password grant handler to issue a valid JWT
access token instead of just returning a random value as the access
token. This makes it possible to use the access token against the
user info endpoint.
Signed-off-by: Monis Khan <i@monis.app>
5 years ago
Tomasz Kleczek
4ffaa60d21
Improve auth flow error handling
...
Signed-off-by: Tomasz Kleczek <tomasz.kleczek@gmail.com>
5 years ago
Henning
138364ceeb
handlePasswordGrant: insert connectorData into OfflineSession ( #2199 )
...
* handlePasswordGrant: insert connectorData into OfflineSession
This change will insert the ConnectorData from the initial Login
into the OfflineSession, as already done in handlePasswordLogin.
Signed-off-by: Henning Surmeier <h.surmeier@mittwald.de>
5 years ago
Mark Sagi-Kazar
ceb4324c18
test: quick fix flaky test
...
Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>
5 years ago