mirror/dex - dex - xhrpb gitea

Commit Graph

Author	SHA1	Message	Date
Yann Soubeyrand	99c3ec6820	Add ability to set ID and Secret from environment variables for static clients Having ID and Secret in clear inside configuration files for static clients is not ideal. This commit allows setting these from environment variables. Signed-off-by: Yann Soubeyrand <yann.soubeyrand@gmx.fr>	6 years ago
krishnadurai	91cbd466a5	Option to add staticPasswords from environment variables	6 years ago
Joel Speed	176ba709a4	Revert "Remove connectordata from other structs" This reverts commit 27f33516db343bd79b56a47ecef0fe514a35082d.	6 years ago
Joel Speed	5c88713177	Remove connectordata from other structs	6 years ago
Joel Speed	575c792156	Store most recent refresh token in offline sessions	6 years ago
Nandor Kracser	c1b421fa04	add preffered_username to idToken Signed-off-by: Nandor Kracser <bonifaido@gmail.com>	6 years ago
Kazumasa Kohtaka	cc314690f4	Avoid generating an identifer which starts with a number because it may be used as a SAML's ID attribute	9 years ago
rithu john	8c9c2518f5	server: account for dynamically changing connector object in storage.	9 years ago
rithu john	bc55b86d0d	storage: add connector object to backend storage.	9 years ago
rithu john	d928ac0677	storage: Add OfflineSession object to backend storage.	9 years ago
Eric Chiang	1eda382789	server: add at_hash claim support The "at_hash" claim, which provides hash verification for the "access_token," is a required claim for implicit and hybrid flow requests. Previously we did not include it (against spec). This PR implements the "at_hash" logic and adds the claim to all responses. As a cleanup, it also moves some JOSE signing logic out of the storage package and into the server package. For details see: https://openid.net/specs/openid-connect-core-1_0.html#ImplicitIDToken	9 years ago
Eric Chiang	312ca7491e	storage: add extra fields to refresh token and update method	9 years ago
Eric Chiang	fd20b213bb	storage: fix postgres timezone handling Dex's Postgres client currently uses the `timestamp` datatype for storing times. This lops of timezones with no conversion, causing times to lose locality information. We could convert all times to UTC before storing them, but this is a backward incompatible change for upgrades, since the new version of dex would still be reading times from the database with no locality. Because of this intrinsic issue that current Postgres users don't save any timezone data, we chose to treat any existing installation as corrupted and change the datatype used for times to `timestamptz`. This is a breaking change, but it seems hard to offer an alternative that's both correct and backward compatible. Additionally, an internal flag has been added to SQL flavors, `supportsTimezones`. This allows us to handle SQLite3, which doesn't support timezones, while still storing timezones in other flavors. Flavors that don't support timezones are explicitly converted to UTC.	9 years ago
rithu john	19c22807a7	api: adding ListPasswords() method to the storage interface.	9 years ago
Eric Chiang	aa7f304bc1	: switch to github.com/ghodss/yaml for more consistent YAML parsing ghodss/yaml converts from YAML to JSON before attempting to unmarshal. This allows us to: Get the correct behavor when decoding base64'd []byte slices. * Use json.RawMessage. Not have to support extravagant YAML features. * Let our structs use `json:` tags	10 years ago
rithu leena john	ed7e943406	api: add gRPC endpoints for creating, updating and deleting passwords	10 years ago
Eric Chiang	c0aa63ac97	storage: update godocs	10 years ago
Eric Chiang	df6cfa0b7a	storage: add GC method to interface to standardize handling	10 years ago
Eric Chiang	74b44e9757	storage: add a password resource	10 years ago
Eric Chiang	490b3494db	storage: increase the number of bytes randomly generated for IDs Because these values are used for OAuth2 codes, refresh tokens, etc, they shouldn't be guessable. Increase the number of random bytes from 64 to 128.	10 years ago
Eric Chiang	82a55cf785	{server,storage}: add LoggedIn flag to AuthRequest and improve storage docs Currently, whether or not a user has authenticated themselves through a connector is indicated by a pointer being nil or non-nil. Instead add an explicit flag that marks this.	10 years ago
Eric Chiang	53d1be4a87	*: load static clients from config file	10 years ago
Eric Chiang	3110f45c3d	*: lots of renaming	10 years ago
Eric Chiang	f4c5722e42	*: connectors use a different identity object than storage	10 years ago
Eric Chiang	e716c14718	storage: remove current registration process for new storages	10 years ago
Eric Chiang	820b460583	storage/kubernetes: garbage collect expired objects	10 years ago
Eric Chiang	94e26782b4	*: add gRPC server for interacting with storages	10 years ago
Eric Chiang	cab271f304	initial commit	10 years ago

29 Commits (4792f0c59f833e6a9175ac7c199d7a72bc052d2e)