mirror/dex - dex - xhrpb gitea

Commit Graph

Author	SHA1	Message	Date
m.nabokikh	1d83e4749d	Add gocritic Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	5 years ago
Alastair Houghton	9187aa669d	fix: allow Authorization header when doing CORS The Authorization header needs to be allowed when doing CORS because otherwise /userinfo can't work. It isn't one of the headers explicitly allowed by default by Gorilla, so we have to call handlers.AllowedHeaders() to specify it. Issues: #1532 Signed-off-by: Alastair Houghton <alastair@alastairs-place.net>	6 years ago
Rui Yang	bd2234cd12	Add constructor for static key strategy Co-authored-by: Josh Winters <jwinter@pivotal.io> Signed-off-by: Rui Yang <ruiya@vmware.com>	6 years ago
justin-slowik	9882ea453f	better support for /device/callback redirect uris with public clients. Signed-off-by: justin-slowik <justin.slowik@thermofisher.com>	6 years ago
Justin Slowik	9c699b1028	Server integration test for Device Flow (#3 ) Extracted test cases from OAuth2Code flow tests to reuse in device flow deviceHandler unit tests to test specific device endpoints Include client secret as an optional parameter for standards compliance Signed-off-by: justin-slowik <justin.slowik@thermofisher.com>	6 years ago
Justin Slowik	9bbdc721d5	Device flow token code exchange (#2 ) * Added /device/token handler with associated business logic and storage tests. Perform user code exchange, flag the device code as complete. Moved device handler code into its own file for cleanliness. Cleanup * Removed PKCE code * Rate limiting for /device/token endpoint based on ietf standards * Configurable Device expiry Signed-off-by: justin-slowik <justin.slowik@thermofisher.com>	6 years ago
Justin Slowik	0d1a0e4129	Device token api endpoint (#1 ) * Added /device/token handler with associated business logic and storage tests. * Use crypto rand for user code Signed-off-by: justin-slowik <justin.slowik@thermofisher.com>	6 years ago
Justin Slowik	6d343e059b	Generates/Stores the device request and returns the device and user codes. Signed-off-by: justin-slowik <justin.slowik@thermofisher.com>	6 years ago
techknowlogick	0a9f56527e	Add Gitea connector (#1715 ) * Add Gitea connector * Add details to readme * resolve lint issue	6 years ago
Ivan Mikheykin	7ef1179e75	feat: connector for Atlassian Crowd	6 years ago
Joshua Winters	76825fef8f	Make logger and prometheus optional in server config Signed-off-by: Josh Winters <jwinters@pivotal.io> Co-authored-by: Mark Huang <mhuang@pivotal.io>	6 years ago
Zach Brown	13be146d2a	Add support for password grant #926	6 years ago
Andrew Block	92e63771ac	Added OpenShift connector	6 years ago
Mark Sagi-Kazar	9bd5ae5197	Fix goimports	6 years ago
Joel Speed	97ffa21262	Create separate Google connector	6 years ago
Marc-André Dufresne	0dbb642f2c	Add option to always display connector selection even if there's only one	7 years ago
Marc-André Dufresne	d458e882aa	Allow arbitrary data to be passed to templates	7 years ago
Stephan Renatus	d9487e553b	*: fix some lint issues Mostly gathered these using golangci-lint's deadcode and ineffassign linters. Signed-off-by: Stephan Renatus <srenatus@chef.io>	7 years ago
Maarten den Braber	a8d059a237	Add userinfo endpoint Co-authored-by: Yuxing Li <360983+jackielii@users.noreply.github.com> Co-authored-by: Francisco Santiago <1737357+fjbsantiago@users.noreply.github.com>	7 years ago
Benoit Sigoure	d6ad67a6de	server: add metrics for CORS handlers.	7 years ago
Mark Sagi-Kazar	d1c8f8d095	Remove structured logging from the logger interface	7 years ago
Mark Sagi-Kazar	be581fa7ff	Add logger interface and stop relying on Logrus directly	7 years ago
Eric Chiang	8935a1479c	server: update health check endpoint to query storage periodically Instead of querying the storage every time a health check is performed query it periodically and save the result.	7 years ago
joannano	88d1e2b041	keystone: test cases, refactoring and cleanup	7 years ago
Krzysztof Balka	a965365a2b	keystone: refresh token and groups	7 years ago
knangia	0774a89066	keystone: squashed changes from knangia/dex	7 years ago
Maximilian Gaß	468c74d1d2	Make expiry of auth requests configurable	7 years ago
Ed Tan	d26e23c16f	Make suggested code changes	8 years ago
Ed Tan	8c75d85b60	Add Bitbucket connector	8 years ago
Stephan Renatus	b9f6594bf0	*: github.com/coreos/dex -> github.com/dexidp/dex Signed-off-by: Stephan Renatus <srenatus@chef.io>	8 years ago
Frederic Branczyk	5f03479d29	*: Add go runtime, process, HTTP and gRPC metrics	8 years ago
Pavel Borzenkov	6193bf5566	connector: implement Microsoft connector connector/microsoft implements authorization strategy via Microsoft's OAuth2 endpoint + Graph API. It allows to choose what kind of tenants are allowed to authenticate in Dex via Microsoft: * common - both personal and business/school accounts * organizations - only business/school accounts * consumers - only personal accounts * <tenant uuid> - only account of specific tenant Signed-off-by: Pavel Borzenkov <pavel.borzenkov@gmail.com>	8 years ago
Stephan Renatus	b09a13458f	password connectors: allow overriding the username attribute (password prompt) This allows users of the LDAP connector to give users of Dex' login prompt an idea of what they should enter for a username. Before, irregardless of how the LDAP connector was set up, the prompt was Username [_________________] Password [_________________] Now, this is configurable, and can be used to say "MyCorp SSO Login" if that's what it is. If it's not configured, it will default to "Username". For the passwordDB connector (local users), it is set to "Email Address", since this is what it uses. Signed-off-by: Stephan Renatus <srenatus@chef.io>	8 years ago
Pavel Borzenkov	ab06119431	connector: implement LinkedIn connector connector/linkedin implements authorization strategy via LinkedIn's OAuth2 endpoint + profile API. It doesn't implement RefreshConnector as LinkedIn doesn't provide any refresh token at all (https://developer.linkedin.com/docs/oauth2, Step 5 — Refresh your Access Tokens) and recommends ordinary AuthCode exchange flow when token refresh is required. Signed-off-by: Pavel Borzenkov <pavel.borzenkov@gmail.com>	9 years ago
Michael Stapelberg	4931f30a80	authproxy.md: strip X-Remote-User follow-up for https://github.com/coreos/dex/pull/1100	9 years ago
Michael Stapelberg	a41d93db4a	Implement the “authproxy” connector (for Apache2 mod_auth etc.)	9 years ago
Eric Stroczynski	2b354c8fdb	server: set sane bcrypt cost upper bound	9 years ago
Eric Stroczynski	4bcb0aaae9	server: log bcrypt cost if > 12, error on runtime > 10s The bcrypt hashing algorithm runtime grows exponentially with cost, and might cause a timeout if the cost is too high. Notifying the user of high cost and of long running calculations will help with tuning and debugging.	9 years ago
Eric Stroczynski	4a88d0641a	: update {S->s}irupsen/logrus	9 years ago
rithu john	8c9c2518f5	server: account for dynamically changing connector object in storage.	9 years ago
Lucas Serven	f3d9bd5008	server/server.go: make successful garbage collection log at info level	9 years ago
Eric Chiang	777eeafabc	*: update go-oidc and use standard library's context package	9 years ago
Simon HEGE	415a68f977	Allow CORS on keys and token endpoints	9 years ago
Eric Chiang	f926d74157	server: fixes for the implicit and hybrid flow Accept the following response_type for the implicit flow: id_token token id_token And the following for hybrid flow code id_token code token code token id_token This corrects the previous behavior of the implicit flow, which only accepted "token" (now correctly rejected).	9 years ago
Simon HEGE	b4c47910e4	Allow CORS on discovery endpoint	9 years ago
rithu john	75aa1c67ce	server: add error HTML templates with error description.	9 years ago
rithu john	9949a1313c	server: modify error messages to use logrus.	9 years ago
rithu john	2e22a948cf	cmd/dex: add logging config and serve logger for different modules.	9 years ago
Eric Chiang	391dc51c13	*: add theme based frontend configuration This PR reworks the web layout so static files can be provided and a "themes" directory to allow a certain degree of control over logos, styles, etc. This PR does NOT add general support for frontend customization, only enough to allow us to start exploring theming internally. The dex binary also must now be run from the root directory since templates are no longer "compiled into" the binary. The docker image has been updated with frontend assets.	9 years ago
Eric Chiang	952e0f81f5	connector: add RefreshConnector interface	9 years ago

1 2

68 Commits (4f326390aa188643ffe6bc27aad57db88d23bd2a)