mirror/dex - dex - xhrpb gitea

Commit Graph

Author	SHA1	Message	Date
techknowlogick	0a9f56527e	Add Gitea connector (#1715 ) * Add Gitea connector * Add details to readme * resolve lint issue	6 years ago
Stephan Renatus	4a0feaf589	connector/saml: add 'FilterGroups' setting This should make AllowedGroups equivalent to an LDAP group filter: When set to true, only the groups from AllowedGroups will be included in the user's identity. Signed-off-by: Stephan Renatus <srenatus@chef.io>	6 years ago
Martijn	0a85a97ba9	Allow preferred_username claim to be set for Crowd connector (#1684 ) * Add atlassiancrowd connector to list in readme * Add TestIdentityFromCrowdUser * Set preferred_username claim when configured * Add preferredUsernameField option to docs * Log warning when mapping invalid crowd field	6 years ago
Mattias Sjöström	cd054c71af	Documentation: Fix typo and add specification in openshift connector doc (#1687 ) Serviceaccount annotation in oc patch instruction was malformed. Format specification of Client ID for a Service Account was missing.	6 years ago
Chris Loukas	d33a76fa19	Make prompt configurable for oidc offline_access	6 years ago
sdarwin	49e85a3cb1	update doc regarding health check	6 years ago
sdarwin	11d91c144f	update kubernetes.md document	6 years ago
Hidetake Iwata	2ec5e5463f	Update kubelogin-activedirectory.md for credential plugin	6 years ago
Ivan Mikheykin	7ef1179e75	feat: connector for Atlassian Crowd	6 years ago
Colleen Murphy	7319d3796f	Fix kubernetes storage link In `58093dbb2` the kubernetes documentation was updated to refer to CRDs rather than TPRs when discussing how storage works for dex. However, the rest of the line was not updated and still referred to the TPR section, whose anchor link was changed in `395febf80` with the removal of TPR support. This change updates the kubernetes documentation to point to the currect section of the storage documentation for CRDs.	6 years ago
Vitaliy Dmitriev	f2e7823db9	connector/ldap: add multiple user to group mapping Add an ability to fetch user's membership from groups of a different type by specifying multiple group attribute to user attribute value matchers in the Dex config: userMatchers: - userAttr: uid groupAttr: memberUid - userAttr: DN groupAttr: member In other words the user's groups can be fetched now from ldap structure similar to the following: dn: cn=john,ou=People,dc=example,dc=org objectClass: person objectClass: inetOrgPerson sn: doe cn: john uid: johndoe mail: johndoe@example.com userpassword: bar dn: cn=qa,ou=Groups,ou=Portland,dc=example,dc=org objectClass: groupOfNames cn: qa member: cn=john,ou=People,dc=example,dc=org dn: cn=logger,ou=UnixGroups,ou=Portland,dc=example,dc=org objectClass: posixGroup gidNumber: 1000 cn: logger memberUid: johndoe Signed-off-by: Vitaliy Dmitriev <vi7alya@gmail.com>	6 years ago
Andrew Block	296659cb50	Reduced OpenShift scopes and enhanced documentation	6 years ago
Andrew Block	5afa02644a	Added OpenShift documentation to README	6 years ago
Andrew Block	92e63771ac	Added OpenShift connector	6 years ago
Mark Sagi-Kazar	3fb85ab009	Remove instructions for kubernetes tests from docs	6 years ago
Nandor Kracser	a38e215891	connector/google: support group whitelisting Signed-off-by: Nandor Kracser <bonifaido@gmail.com>	6 years ago
YanJin	e11b2ceeee	add issuer in the templates.md	6 years ago
Joel Speed	9d9a1017e4	Add documentation for google connector	6 years ago
Tony Hsu	6e35f24399	Fix typo	7 years ago
Ta-Ching Chen	76c76a0b39	Add note for redirect uri	7 years ago
j.ai	2c52c52686	Fix URLs in curl cmd as stated in the overview doc.	7 years ago
Thomas Jackson	21ab30d207	Add option to enable groups for oidc connectors There's been some discussion in #1065 regarding what to do about refreshing groups. As it stands today dex doesn't update any of the claims on refresh (groups would just be another one). The main concern with enabling it is that group claims may change more frequently. While we continue to wait on the upstream refresh flows, this adds an option to enable the group claim. This is disabled by default (so no behavioral change) but enables those that are willing to have the delay in group claim change to use oidc IDPs. Workaround to #1065	7 years ago
Ken Perkins	285c1f162e	connector/saml: Adding group filtering - 4 new tests - Doc changes to use the group filtering	7 years ago
Erwin van Eyk	5c99525ed3	Clarify the origin of openid-ca	7 years ago
Michael Venezia	395febf808	storage/kubernetes: Removing Kubernetes TPR support Third Party Resources (TPR) have been removed from Kubernetes for roughly 2 years. This commit removes the support dex had for them. Documentation has been updated to reflect this and to instruct users on how to migrate from TPR-powered dex environment to a Custom Resource Defintion (CRD) based one that dex > v2.17 will support	7 years ago
Michael Venezia	b65966d744	cmd/dex: adding reflection to grpc api, enabled through configuration	7 years ago
Marc-André Dufresne	d458e882aa	Allow arbitrary data to be passed to templates	7 years ago
mkontani	c067761df6	fix mysql sample query	7 years ago
Nandor Kracser	ff34e570b4	connector/gitlab: implement useLoginAsID as in GitHub connector	7 years ago
Maxime Desrosiers	458585008b	microsoft: option for group UUIDs instead of name and group whitelist	7 years ago
Nandor Kracser	a572ad8fec	storage/sql: rework of the original MySQL PR	7 years ago
Stephan Renatus	447f24a81b	ADOPTERS: replace Documentation/production-users.md, add Chef Signed-off-by: Stephan Renatus <srenatus@chef.io>	7 years ago
flarno11	8c1716d356	make userName configurable	7 years ago
cappyzawa	9650836851	make userID configurable	7 years ago
Thomas Jackson	52d09a2dfa	Add option in oidc to hit the optional userinfo endpoint Some oauth providers return "thin tokens" which won't include all of the claims requested. This simply adds an option which will make the oidc connector use the userinfo endpoint to fetch all the claims.	7 years ago
Nandor Kracser	a08a5811d4	gitlab: support for group whitelist	7 years ago
Nandor Kracser	b1931fc9bd	docs: update bitbucket permission requirements	7 years ago
Gerald Barker	fc723af0fe	Add option to OIDC connecter to override email_verified to true	7 years ago
Takashi Okamoto	ac290f77aa	Fix typo.	7 years ago
Mark Sagi-Kazar	c48cb36e8f	Fix typo	7 years ago
Nandor Kracser	6c71b330a8	production users: add Banzai Cloud	7 years ago
James Nord	9840fccdbb	rename useLoginAsId -> useLoginAsID	7 years ago
James Nord	1911b52c6b	Add documentation for the new GitHub useLoginAsId option	7 years ago
Stephan Renatus	4abf3b2102	docs: mirror resolution of #1281 in dev doc Signed-off-by: Stephan Renatus <srenatus@chef.io>	7 years ago
Takashi Okamoto	337bbe5f09	fix typos.	7 years ago
Takashi Okamoto	1b7b3515d7	Add Active Directory instruction.	7 years ago
Takashi Okamoto	fbdb55aba9	Add doc for kubelogin and Active Directory ingtegration sample.	7 years ago
Joshua M. Dotson	46296ab9d0	Documentation/dev-dependencies.md: Update for Go modules	7 years ago
Owen Tuz	9ea2ade208	LDAP docs - remove extra wording re DN	7 years ago
Owen Tuz	e603a5e631	LDAP connector - Document that 'DN' must be in capitals	7 years ago

1 2 3 4 5

205 Commits (4792f0c59f833e6a9175ac7c199d7a72bc052d2e)