mirror/dex - dex - xhrpb gitea

Commit Graph

Author	SHA1	Message	Date
Chris Loukas	d33a76fa19	Make prompt configurable for oidc offline_access	6 years ago
m.nabokikh	383c2fe8b6	Adding oidc email scope check This helps to avoid "no email claim" error if email scope was not specified. Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	6 years ago
Lars Lehtonen	8e0ae82034	connector/oidc: replace deprecated oauth2.RegisterBrokenAuthHeaderProvider with oauth2.Endpoint.AuthStyle	6 years ago
Mark Sagi-Kazar	9bd5ae5197	Fix goimports	6 years ago
Joel Speed	3156553843	OIDC: Rename refreshToken to RefreshToken	6 years ago
Joel Speed	77fcf9ad77	Use a struct for connector data within OIDC connector	6 years ago
Joel Speed	f6077083c9	Identify error as failure to retrieve refresh token	6 years ago
Joel Speed	8b344fe4d3	Fix Refresh comment	6 years ago
Joel Speed	433bb2afec	Remove duplicate code	6 years ago
Joel Speed	4076eed17b	Build opts based on scope	6 years ago
Joel Speed	0857a0fe09	Implement refresh in OIDC connector This has added the access=offline parameter and prompt=consent parameter to the initial request, this works with google, assuming other providers will ignore the prompt parameter	6 years ago
Thomas Jackson	21ab30d207	Add option to enable groups for oidc connectors There's been some discussion in #1065 regarding what to do about refreshing groups. As it stands today dex doesn't update any of the claims on refresh (groups would just be another one). The main concern with enabling it is that group claims may change more frequently. While we continue to wait on the upstream refresh flows, this adds an option to enable the group claim. This is disabled by default (so no behavioral change) but enables those that are willing to have the delay in group claim change to use oidc IDPs. Workaround to #1065	7 years ago
Thomas Jackson	512cb3169e	Run getUserInfo prior to claim enforcement If you have an oidc connector configured and that IDP provides thin tokens (e.g. okta) then the majority of the requested claims come in the getUserInfo call (such as email_verified). So if getUserInfo is configured it should be run before claims are validated.	7 years ago
Stephan Renatus	d9487e553b	*: fix some lint issues Mostly gathered these using golangci-lint's deadcode and ineffassign linters. Signed-off-by: Stephan Renatus <srenatus@chef.io>	7 years ago
flarno11	8c1716d356	make userName configurable	7 years ago
Stephan Renatus	4e8cbf0f61	connectors/oidc: truely ignore "email_verified" claim if configured that way Fixes #1455, I hope. Signed-off-by: Stephan Renatus <srenatus@chef.io>	7 years ago
cappyzawa	9650836851	make userID configurable	7 years ago
Thomas Jackson	52d09a2dfa	Add option in oidc to hit the optional userinfo endpoint Some oauth providers return "thin tokens" which won't include all of the claims requested. This simply adds an option which will make the oidc connector use the userinfo endpoint to fetch all the claims.	7 years ago
Gerald Barker	fc723af0fe	Add option to OIDC connecter to override email_verified to true	7 years ago
Mark Sagi-Kazar	be581fa7ff	Add logger interface and stop relying on Logrus directly	7 years ago
Stephan Renatus	b9f6594bf0	*: github.com/coreos/dex -> github.com/dexidp/dex Signed-off-by: Stephan Renatus <srenatus@chef.io>	8 years ago
Eric Chiang	6475ce1f62	connector/oidc: remove test that talks to the internet	9 years ago
Michael Stapelberg	a41d93db4a	Implement the “authproxy” connector (for Apache2 mod_auth etc.)	9 years ago
Eric Stroczynski	4a88d0641a	: update {S->s}irupsen/logrus	9 years ago
rithu john	5e0bf8b65f	connector/oidc: fix hosted domain support.	9 years ago
Ben Navetta	cbb007663f	add documentation and tests	9 years ago
Ben Navetta	4194530cf3	initial hostedDomain support	9 years ago
rithu john	682d78f527	connector: improve error message for callback URL mismatch	9 years ago
rithu john	59502850f0	connector: Connectors without a RefreshConnector should not return a refresh token instead of erroring	9 years ago
Eric Chiang	ac032e99f0	connector/oidc: expose oauth2.RegisterBrokenAuthHeaderProvider	9 years ago
Eric Chiang	777eeafabc	*: update go-oidc and use standard library's context package	9 years ago
rithu john	2e22a948cf	cmd/dex: add logging config and serve logger for different modules.	9 years ago
Eric Chiang	522749b5d8	*: switch oidc client to github.com/coreos/go-oidc This saves us from having to import two different versions of square/go-jose.	10 years ago
Eric Chiang	952e0f81f5	connector: add RefreshConnector interface	10 years ago
Eric Chiang	aa7f304bc1	: switch to github.com/ghodss/yaml for more consistent YAML parsing ghodss/yaml converts from YAML to JSON before attempting to unmarshal. This allows us to: Get the correct behavor when decoding base64'd []byte slices. * Use json.RawMessage. Not have to support extravagant YAML features. * Let our structs use `json:` tags	10 years ago
Eric Chiang	a3235d022a	*: verify "state" field before passing request to callback connectors Let the server handle the state token instead of the connector. As a result it can throw out bad requests earlier. It can also use that token to determine which connector was used to generate the request allowing all connectors to share the same callback URL. Callbacks now all look like: https://dex.example.com/callback Instead of: https://dex.example.com/callback/(connector id) Even when multiple connectors are being used.	10 years ago
Eric Chiang	a11db557b4	*: expand environment variables in config Allow users to define config values which are read form environemnt variables. Helpful for sensitive variables such as OAuth2 client IDs or LDAP credentials.	10 years ago
Eric Chiang	bfe560ee21	rename	10 years ago
Eric Chiang	fd5e508f1c	*: implement the OpenID Connect connector	10 years ago
Eric Chiang	cab271f304	initial commit	10 years ago

44 Commits (4792f0c59f833e6a9175ac7c199d7a72bc052d2e)