Mark Sagi-Kazar
4792f0c59f
Revendor dependencies
6 years ago
Mark Sagi-Kazar
dad8d6d687
Add separate module for the api package
6 years ago
Stephen Augustus
e1a45ba33e
Merge pull request #1738 from justaugustus/augustus
...
MAINTAINERS: Add Stephen Augustus (@justaugustus )
6 years ago
Stephen Augustus
e151af1b44
MAINTAINERS: Add Stephen Augustus (justaugustus)
...
Signed-off-by: Stephen Augustus <saugustus@vmware.com>
6 years ago
Stephen Augustus
de871b3f8a
MAINTAINERS: Alpha-sort maintainers
...
Signed-off-by: Stephen Augustus <saugustus@vmware.com>
6 years ago
Joel Speed
9d7e472c63
Merge pull request #1720 from candlerb/fix-google
...
Allow the "google" connector to work without a service account
6 years ago
Márk Sági-Kazár
2ca992e9b3
Merge pull request #1721 from candlerb/fix-token-comment
...
Fix comment for implicit flow
6 years ago
techknowlogick
0a9f56527e
Add Gitea connector ( #1715 )
...
* Add Gitea connector
* Add details to readme
* resolve lint issue
6 years ago
Brian Candler
442d3de11d
Allow the "google" connector to work without a service account
...
Fixes #1718
6 years ago
Brian Candler
d2c9305e0f
Fix comment for implicit flow
6 years ago
Márk Sági-Kazár
709d4169d6
Merge pull request #1694 from flant/fix-openshift-root-ca
...
Fix OpenShift connector rootCA option
6 years ago
Márk Sági-Kazár
ba723caa0a
Merge pull request #1704 from srenatus/sr/saml/filter-allowed-groups
...
connector/saml: add 'FilterGroups' setting
6 years ago
Márk Sági-Kazár
c0dfeb7068
Merge pull request #1692 from flant/oidc-icon
...
Add icon for OIDC provider
6 years ago
m.nabokikh
47b0d33142
Add icon for OIDC provider
...
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
6 years ago
m.nabokikh
521aa0802f
Fix OpenShift connector rootCA option
...
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
6 years ago
Stephan Renatus
4a0feaf589
connector/saml: add 'FilterGroups' setting
...
This should make AllowedGroups equivalent to an LDAP group filter:
When set to true, only the groups from AllowedGroups will be included in the
user's identity.
Signed-off-by: Stephan Renatus <srenatus@chef.io>
6 years ago
poh chiat
d87cf1c924
create github oauthconfig with redirecturl ( #1700 )
6 years ago
Márk Sági-Kazár
336e284a46
Merge pull request #1701 from tkleczek/static_client_secret_fix
...
allow no secret for static public clients
6 years ago
Tomasz Kleczek
c830d49884
allow no secret for static public clients
...
For statically-configured public clients it should be allowed for both
Secret and SecretEnv fields to be empty.
6 years ago
Martijn
0a85a97ba9
Allow preferred_username claim to be set for Crowd connector ( #1684 )
...
* Add atlassiancrowd connector to list in readme
* Add TestIdentityFromCrowdUser
* Set preferred_username claim when configured
* Add preferredUsernameField option to docs
* Log warning when mapping invalid crowd field
6 years ago
Mattias Sjöström
cd054c71af
Documentation: Fix typo and add specification in openshift connector doc ( #1687 )
...
Serviceaccount annotation in oc patch instruction was malformed. Format
specification of Client ID for a Service Account was missing.
6 years ago
Márk Sági-Kazár
83d8853fd9
Merge pull request #1686 from kenperkins/gh-1682
...
Adding slack channel to README
6 years ago
Ken Perkins
05b8acb974
Adding slack channel to README
6 years ago
Kyle Travis
cfae2eb720
storage/kubernetes: remove shadowed ResourceVersion from Connector ( #1673 )
6 years ago
Ken Perkins
f6476b62f2
Added Email of Keystone to Identity ( #1681 )
...
* Added Email of Keystone to Identity
After the successful login to keystone, the Email of the logged in user
is fetch from keystone and provided to `identity.Email`.
This is useful for upstream software that uses the Email as the primary
identification.
* Removed unnecessary code from getUsers
* Changed creation of userResponse in keystone
* Fixing linter error
Co-authored-by: Christoph Glaubitz <christoph.glaubitz@innovo-cloud.de>
6 years ago
Nándor István Krácser
ebef257dcd
Merge pull request #1678 from Teeed/auto_consistency_fix
...
Automatic consistency fixing in case of missing refresh token in db
6 years ago
Tadeusz Magura-Witkowski
0513ce3d6b
Merge branch 'master' into auto_consistency_fix
6 years ago
Nándor István Krácser
ec57e31103
Merge pull request #1645 from JerrySunWRS/master
...
Wrap Kubernetes host address in square brackets
6 years ago
Tadeusz Magura-Witkowski
7b7e2a040d
Automatic consistency fixing in case of missing refresh token in db
6 years ago
Márk Sági-Kazár
3693b74791
Merge pull request #1676 from dexidp/lint-timeout
...
increase go lint timeout
6 years ago
Nándor István Krácser
db23367150
increase go lint timeout
6 years ago
Nándor István Krácser
741bf029a1
Merge pull request #1670 from klarose/handle-refresh-no-present
...
handlers: do not fail login if refresh token gone
6 years ago
Kyle Larose
ab5ea03025
handlers: do not fail login if refresh token gone
...
There is a chance that offline storage could fall out of sync with the
refresh token tables. One example is if dex crashes/is stopped in the
middle of handling a login request. If the old refresh token associated
with the offline session is deleted, and then the process stops, the
offline session will still refer to the old token.
Unfortunately, if this case occurs, there is no way to recover from it,
since further logins will be halted due to dex being unable to clean up
the old tokens till referenced in the offline session: the database is
essentially corrupted.
There doesn't seem to be a good reason to fail the auth request if the
old refresh token is gone. This changes the logic in `handleAuthCode` to
not fail the entire transaction if the old refresh token could not be
deleted because it was not present. This has the effect of installing
the new refresh token, and unpdating the offline storage, thereby fixing
the issue, however it occured.
6 years ago
Nándor István Krácser
277272502b
Merge pull request #1674 from dexidp/githubci-mysql
...
ci: add mysql service
6 years ago
Nandor Kracser
8ab1ea9334
ci: add mysql service
...
Signed-off-by: Nandor Kracser <bonifaido@gmail.com>
6 years ago
Nándor István Krácser
d820fd45d8
Merge pull request #1664 from lhotrifork/static-client-env-vars
...
storage/static.go: expand environment variables in client ID and secret
6 years ago
Yann Soubeyrand
99c3ec6820
Add ability to set ID and Secret from environment variables for static clients
...
Having ID and Secret in clear inside configuration files for static
clients is not ideal. This commit allows setting these from environment
variables.
Signed-off-by: Yann Soubeyrand <yann.soubeyrand@gmx.fr>
6 years ago
Joel Speed
30ea963bb6
Merge pull request #1656 from taxibeat/oidc-prompt-type
...
Make prompt configurable for oidc offline_access
6 years ago
Nándor István Krácser
b7cf701032
Merge pull request #1515 from flant/atlassian-crowd-connector
...
new connector for Atlassian Crowd
6 years ago
Nándor István Krácser
2bd4886517
Merge pull request #1661 from sabre1041/openshift-connector-mail
...
Setting email for OpenShift connector
6 years ago
Andrew Block
76bb453ff3
Setting email for OpenShift connector
6 years ago
Márk Sági-Kazár
b9787d48ac
Merge pull request #1660 from dexidp/checkout-v2
...
ci: use checkout@v2
6 years ago
Nándor István Krácser
fab0da7b69
ci: use checkout@v2
6 years ago
Nándor István Krácser
edd3a40141
Merge pull request #1659 from dexidp/sql-specific-migrations
...
storage/sql: allow specifying sql flavor specific migrations
6 years ago
Nandor Kracser
c7e9960c7e
storage/mysql: increase auth_request.state length to 4096
...
Signed-off-by: Nandor Kracser <bonifaido@gmail.com>
6 years ago
Nandor Kracser
80749ffd3f
storage/sql: allow specifying sql flavor specific migrations
...
Signed-off-by: Nandor Kracser <bonifaido@gmail.com>
6 years ago
Nándor István Krácser
1160649c31
Merge pull request #1621 from concourse/pr/passowrd-grant-synced
...
Rework - add support for Resource Owner Password Credentials Grant
6 years ago
Chris Loukas
d33a76fa19
Make prompt configurable for oidc offline_access
6 years ago
Nándor István Krácser
f17fa67715
Merge pull request #1653 from sdarwin/doc-dex-healthz
...
update doc regarding health check
6 years ago
Nándor István Krácser
0f8c4db9f6
Merge pull request #1650 from sdarwin/k8s-doc
...
update kubernetes.md document
6 years ago