mirror/dex - dex - xhrpb gitea

Commit Graph

Author	SHA1	Message	Date
Tomasz Kleczek	c830d49884	allow no secret for static public clients For statically-configured public clients it should be allowed for both Secret and SecretEnv fields to be empty.	6 years ago
Yann Soubeyrand	99c3ec6820	Add ability to set ID and Secret from environment variables for static clients Having ID and Secret in clear inside configuration files for static clients is not ideal. This commit allows setting these from environment variables. Signed-off-by: Yann Soubeyrand <yann.soubeyrand@gmx.fr>	6 years ago
Zach Brown	13be146d2a	Add support for password grant #926	6 years ago
krishnadurai	321790870f	Fixes lint	6 years ago
krishnadurai	2d5619e4e8	Corrects imports after merge	6 years ago
Mark Sagi-Kazar	f141f2133b	Fix whitespace	6 years ago
Mark Sagi-Kazar	9bd5ae5197	Fix goimports	6 years ago
Mark Sagi-Kazar	142c96c210	Fix stylecheck	6 years ago
krishnadurai	1fd5dd7b0e	Change env var prefix to DEX and add to ci.yaml	6 years ago
krishnadurai	af9c2880a6	Corrects validation logic for static password check	6 years ago
krishnadurai	91cbd466a5	Option to add staticPasswords from environment variables	6 years ago
Steven Danna	46f48b33a1	Use a more conservative set of CipherSuites The default cipher suites used by Go include a number of ciphers that have known weaknesses. In addition to leaving users open to these weaknesses, the inclusion of these weaker ciphers causes problems with various automated scanning tools. This PR disables the CBC-mode, RC4, and 3DES ciphers included in the Go standard library by passing an explicit cipher suite list. The ciphers included here are more line with those recommended by Mozilla for "Intermediate" compatibility. [0] Performance Implications The Go standard library does capability-based cipher ordering, preferring AES ciphers if the underlying hardware has AES specific instructions. [1] Since all of the relevant code is internal modules, to do the same thing ourselves would require duplicating that code. Here, I've placed AES based ciphers first. Compatibility Implications This does reduce the number of clients who will be able to communicate with dex. [0] https://ssl-config.mozilla.org/#server=nginx&server-version=1.17.0&config=intermediate&hsts=false&ocsp=false [1] `a8c2e5c6ad/src/crypto/tls/common.go (L1091)` Signed-off-by: Steven Danna <steve@chef.io>	7 years ago
Michael Venezia	b65966d744	cmd/dex: adding reflection to grpc api, enabled through configuration	7 years ago
Marc-André Dufresne	0dbb642f2c	Add option to always display connector selection even if there's only one	7 years ago
Marc-André Dufresne	d458e882aa	Allow arbitrary data to be passed to templates	7 years ago
Stephan Renatus	ea7fd6d470	cmd/dex: adapt to prometheus API change Signed-off-by: Stephan Renatus <srenatus@chef.io>	7 years ago
Stephan Renatus	d9487e553b	*: fix some lint issues Mostly gathered these using golangci-lint's deadcode and ineffassign linters. Signed-off-by: Stephan Renatus <srenatus@chef.io>	7 years ago
Stephan Renatus	d7c7d42466	cmd/example-app: check all errors, pass claims as string to renderToken Signed-off-by: Stephan Renatus <srenatus@chef.io>	7 years ago
Stephan Renatus	c4e0587df1	cmd/example-app: expose connector_id As a piece of "living documentation" for #1481. Signed-off-by: Stephan Renatus <srenatus@chef.io>	7 years ago
Sabith K Soopy	6769a3b18e	Errors should not start with caps - https://github.com/dexidp/dex/pull/1264#discussion_r253264017 Signed-off-by: Sabith <sabithksme@gmail.com>	7 years ago
Sabith K Soopy	6ccb96ff74	Add some test to validate the configuration	7 years ago
Nandor Kracser	a572ad8fec	storage/sql: rework of the original MySQL PR	7 years ago
Pavel Borzenkov	e53bdfabb9	storage/sql: initial MySQL storage implementation It will be shared by both Postgres and MySQL configs. Signed-off-by: Pavel Borzenkov <pavel.borzenkov@gmail.com>	7 years ago
Yann Soubeyrand	c5f2871ab5	cmd/dex/serve.go: log static client name instead of ID Signed-off-by: Yann Soubeyrand <yann.soubeyrand@gmx.fr>	7 years ago
Mark Sagi-Kazar	06521ffa49	Remove the logrus logger wrapper	7 years ago
Mark Sagi-Kazar	be581fa7ff	Add logger interface and stop relying on Logrus directly	7 years ago
Haines Chan	18b6b34b67	Display access token in example app	7 years ago
Steven Danna	59f8b02d47	Set minimum TLS protocol version to TLSv1.2, set PreferServerCipherSuites Some environments are subject to strict rules about the permitted TLS protocol verion and available ciphers. Setting TLSv1.2 as the minimum version ensures we do not use weaker protocols. We've opted against making this configurable given the age of TLSv1.2 and the increasing push to deprecate TLSv1.1 and older. The PreferServerCipherSuites setting is also commonly flagged by SSL quality scanning tools. Since Go provides a relatively modern set of default ciphers by default, defaulting this to true is unlikely to make much practical difference. Signed-off-by: Steven Danna <steve@chef.io>	7 years ago
Haines Chan	b78b8aeee0	Replace "GET", "POST" to http.MethodGet and http.MethodPost	7 years ago
Maximilian Gaß	74f84ce0be	Change config test to non-default expiry settings	7 years ago
Maximilian Gaß	468c74d1d2	Make expiry of auth requests configurable	7 years ago
Stephan Renatus	73fdf4f75b	storage/sql/postgres: expose stdlib tunables, set them for tests - adapted TestUnmarshalConfig to ensure the fields are read in - added a test to see that at least MaxOpenConns works: - this is only exposed through (*db).Stats() in go 1.11, so this test has a build tag - the other two configurables can't be read back, so we've got to trust that the mechanism works given the one instance that's tested.. Signed-off-by: Stephan Renatus <srenatus@chef.io>	7 years ago
Stephan Renatus	b9f6594bf0	*: github.com/coreos/dex -> github.com/dexidp/dex Signed-off-by: Stephan Renatus <srenatus@chef.io>	8 years ago
Frederic Branczyk	5f03479d29	*: Add go runtime, process, HTTP and gRPC metrics	8 years ago
Daniel Dao	ca114f7812	storage: add etcd storage This patch adds etcd storage implementation. This should be useful in environments where - we dont want to depends on a separate, hard to maintain SQL cluster - we dont want to incur the overhead of talking to kubernetes apiservers - kubernetes is not available yet, or if kubernetes depends on dex to perform authentication and the operator would like to remove any circular dependency if possible.	8 years ago
Devon Barrett	eb14a8245c	fixes typo: s/suppied/supplied/	9 years ago
rithu john	fd4f57b5f3	storage/static.go: storage backend should not explicitly lower-case email ids.	9 years ago
Eric Stroczynski	4a88d0641a	: update {S->s}irupsen/logrus	9 years ago
rithu john	dc4b97b851	cmd/dex/serve: add local connector directly to static connectors in storage	9 years ago
rithu john	8c9c2518f5	server: account for dynamically changing connector object in storage.	9 years ago
zhuguihua	4e99ec3eeb	Fix two typos Signed-off-by: zhuguihua <zhuguihua@cmss.chinamobile.com> Change storace to storage in cmd/dex/config.go, change userSearch to groupSearch in connector/ldap/ldap.go	9 years ago
Eric Chiang	5f377f07d4	*: promote SAML to stable This means we no longer refer to it as "experimental" and wont make breaking changes.	9 years ago
Eric Chiang	9b0e9ab2ca	cmd/example-app: fix custom CA behavior	9 years ago
Eric Chiang	777eeafabc	*: update go-oidc and use standard library's context package	9 years ago
Ali Javadi	e623ad4d35	connector: add GitLab connector	9 years ago
rithu john	31e8009441	cmd/dex: make connector name field mandatory in dex configuration.	9 years ago
Simon HEGE	415a68f977	Allow CORS on keys and token endpoints	9 years ago
Eric Chiang	ed20fee2b9	cmd/example-app: fix refreshing	9 years ago
Eric Chiang	78665074ed	cmd/example-app: add option to not request a refresh token	9 years ago
Eric Chiang	0f4a1f69c5	*: wire up SAML POST binding	9 years ago

1 2

98 Commits (4792f0c59f833e6a9175ac7c199d7a72bc052d2e)