mirror/dex - dex - xhrpb gitea

Commit Graph

Author	SHA1	Message	Date
Maksim Nabokikh	5a4395fd12	feat: add UserIdentity entity and CRUD operations (#4643 ) Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com> Signed-off-by: Maksim Nabokikh <max.nabokih@gmail.com> Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>	3 days ago
Maksim Nabokikh	9bee809252	feat(crd): add CRD handling behavior and configuration options (#4543 ) Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>	4 weeks ago
Ivan Zviagintsev	d1b2722e39	feat: support groups and preferred_username for staticPasswords (#4456 ) Signed-off-by: Ivan Zvyagintsev <ivan.zvyagintsev@flant.com>	2 months ago
Maksim Nabokikh	a4449010a4	k8s storage: Request only one object to check if API exists (#4027 ) Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>	1 year ago
Bob Maertz	ad31b5d6f7	Passing context storage (#3941 ) Signed-off-by: Bob Maertz <1771054+bobmaertz@users.noreply.github.com>	1 year ago
Sean Liao	0b6a78397e	use slog for structured logging (#3502 ) Signed-off-by: Sean Liao <sean+git@liao.dev>	2 years ago
Ferenc Fabian	2377b0a0cd	Add context to storage's Create endpoints (#2935 ) * Initial commit Signed-off-by: PumpkinSeed <qwer.kocka@gmail.com> * Finish the syntex fixes Signed-off-by: PumpkinSeed <qwer.kocka@gmail.com> * Add fixes after running the tests Signed-off-by: PumpkinSeed <qwer.kocka@gmail.com> * Change background context to request context Signed-off-by: PumpkinSeed <qwer.kocka@gmail.com> --------- Signed-off-by: PumpkinSeed <qwer.kocka@gmail.com>	2 years ago
m.nabokikh	4b5f1d5289	fix: refresh token only once for all concurrent requests Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	4 years ago
Michael Kelly	a51d12056f	Tweaks based on review comments Signed-off-by: Michael Kelly <mkelly@arista.com>	4 years ago
Michael Kelly	502a2d0d4a	Limit the amount of objects we attempt to GC on each cycle If something causes the number k8s resources to increase beyond a certain threshold, garbage collection can fail because the query to retrieve those resources will time out, resulting in a perpetual cycle of being unable to garbage collect resources. In lieu of trying to get every object each cycle, we can limit the number of resources retrieved per GC cycle to some reasonable number. Signed-off-by: Michael Kelly <mkelly@arista.com>	4 years ago
m.nabokikh	9fad0602ec	fix: do not update offlinesession lastUsed field if refresh token was not change Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	4 years ago
m.nabokikh	d413870f6e	feat: Update token periodically if Dex is running in Kubernetes cluster Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	5 years ago
m.nabokikh	7a2472555a	feat: Create CRDs as apiextensions.k8s.io/v1 Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	5 years ago
Josh Soref	0288864da7	spelling: collision Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>	5 years ago
m.nabokikh	be378dd9a7	feat: Retry Kubernetes update requests Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	5 years ago
m.nabokikh	4801b2c975	fix: Handle kubernetes API conflicts properly for signing keys Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	6 years ago
Justin Slowik	9bbdc721d5	Device flow token code exchange (#2 ) * Added /device/token handler with associated business logic and storage tests. Perform user code exchange, flag the device code as complete. Moved device handler code into its own file for cleanliness. Cleanup * Removed PKCE code * Rate limiting for /device/token endpoint based on ietf standards * Configurable Device expiry Signed-off-by: justin-slowik <justin.slowik@thermofisher.com>	6 years ago
Justin Slowik	0d1a0e4129	Device token api endpoint (#1 ) * Added /device/token handler with associated business logic and storage tests. * Use crypto rand for user code Signed-off-by: justin-slowik <justin.slowik@thermofisher.com>	6 years ago
Justin Slowik	6d343e059b	Generates/Stores the device request and returns the device and user codes. Signed-off-by: justin-slowik <justin.slowik@thermofisher.com>	6 years ago
Michael Venezia	395febf808	storage/kubernetes: Removing Kubernetes TPR support Third Party Resources (TPR) have been removed from Kubernetes for roughly 2 years. This commit removes the support dex had for them. Documentation has been updated to reflect this and to instruct users on how to migrate from TPR-powered dex environment to a Custom Resource Defintion (CRD) based one that dex > v2.17 will support	7 years ago
Mark Sagi-Kazar	be581fa7ff	Add logger interface and stop relying on Logrus directly	7 years ago
Song.Jin	5f0a03a06b	modify log msg as per suggested	7 years ago
Song.Jin	9b5bec1ddf	check if crd exist before try creating them	7 years ago
Song.Jin	d2daa4e2ac	allow it to disable CRD creation	7 years ago
Stephan Renatus	b9f6594bf0	*: github.com/coreos/dex -> github.com/dexidp/dex Signed-off-by: Stephan Renatus <srenatus@chef.io>	8 years ago
Eric Chiang	3d2d92b31b	*: run kubernetes tests in travis	8 years ago
Chance Zibolski	9d7b0b59bd	storage/kubernetes: Log before registering custom resources Logging before attempting to make any connection to Kubernetes is useful when the connection hangs and dex is killed before it can log any errors.	9 years ago
rithu john	1311caf864	storage/kubernetes: add CRD support	9 years ago
rithu john	146481375e	[WIP]: add CRD support	9 years ago
Eric Stroczynski	4a88d0641a	: update {S->s}irupsen/logrus	9 years ago
rithu john	bc55b86d0d	storage: add connector object to backend storage.	9 years ago
Eric Chiang	6cb38604d9	storage/kubernetes: log INFO level if TPR already exists, not ERROR	9 years ago
Eric Chiang	777eeafabc	*: update go-oidc and use standard library's context package	9 years ago
Eric Chiang	a7b8e52b92	storage/kubernetes: fix conflict error detection in TRP creation PR #815 fixed the Kubernetes storage implementation by correctly returning storage.ErrAlreadyExists on POST conflicts. This caused a regression in TPR creation (#822) when some, but not all, of the resources already existed. E.g. for users upgrading from old versions of dex. Fixes #822	9 years ago
Eric Chiang	4be029c6c1	storage/kubernetes: fix kubernetes storage conformance test failures	9 years ago
rithu john	d928ac0677	storage: Add OfflineSession object to backend storage.	9 years ago
Eric Chiang	312ca7491e	storage: add extra fields to refresh token and update method	9 years ago
rithu john	2c03693972	storage: Add ConnectorData to storage RefreshToken.	9 years ago
rithu john	9949a1313c	server: modify error messages to use logrus.	9 years ago
rithu john	2e22a948cf	cmd/dex: add logging config and serve logger for different modules.	9 years ago
rithu john	19c22807a7	api: adding ListPasswords() method to the storage interface.	9 years ago
Eric Chiang	aa7f304bc1	: switch to github.com/ghodss/yaml for more consistent YAML parsing ghodss/yaml converts from YAML to JSON before attempting to unmarshal. This allows us to: Get the correct behavor when decoding base64'd []byte slices. * Use json.RawMessage. Not have to support extravagant YAML features. * Let our structs use `json:` tags	10 years ago
Eric Chiang	d7a75c5b5d	storage/kubernetes: allow arbitrary client IDs Use a hash algorithm to match client IDs to Kubernetes object names. Because cryptographic hash algorithms produce sums larger than a Kubernetes name can fit, a non-cryptographic hash is used instead. Hash collisions are checked and result in errors.	10 years ago
Eric Chiang	4ab78d0ded	storage/kubernetes: run transactional conformance tests	10 years ago
Eric Chiang	bc16de0b58	storage/kubernetes: don't guess the kubeconfig location and change test env Using the default KUBECONFIG environment variable to indicate that the Kubernetes tests should be run lead to cases where developers accidentally ran the tests. This has now been changed to "DEX_KUBECONFIG" and documentation hsa been added detailing how to run these tests. Additionally, no other storage reads environment variables for its normal configuration (outside of tests) so the Kubernetes storage no longer does. Overall, be less surprising.	10 years ago
Eric Chiang	691476b477	storage/kubernetes: manage third party resources and drop support for 1.3	10 years ago
Eric Chiang	558059ee58	storage/kubernetes: add garbage collection method	10 years ago
Eric Chiang	7ff3ce85a2	*: add password resource to kubernetes storage implementation	10 years ago
Eric Chiang	bfe560ee21	rename	10 years ago
Eric Chiang	3110f45c3d	*: lots of renaming	10 years ago

1 2

53 Commits (5a4395fd12de61478fc1b701e5d1fda29ce883c6)