mirror/dex - dex - xhrpb gitea

Commit Graph

Author	SHA1	Message	Date
Maksim Nabokikh	5bbfbbe168	feat: add PKCE (Proof Key for Code Exchange) configuration to OAuth2 settings (#4638 ) Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>	4 days ago
Maksim Nabokikh	80d297b8a4	feat: update CSS for improved theming and button styles (#4634 )	5 days ago
Maksim Nabokikh	f80a89dd5d	feat(client): add allowed connectors field to client configuration (#4610 ) Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>	5 days ago
Maksim Nabokikh	7777773067	feat(connector): connectors for grants (#4619 ) Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>	6 days ago
Mathias Gebbe	fec4f53203	feat(oauth2): add client credentials flow with opt-in config flag (#4583 ) Implement the OAuth2 client_credentials grant type for machine-to-machine authentication. The grant is gated behind a new clientCredentialsEnabled config flag (defaults to false), following the same pattern as passwordConnector for the password grant. --------- Signed-off-by: Mathias Gebbe <mathias.gebbe@gmail.com> Signed-off-by: Maksim Nabokikh <maksim.nabokikh@flant.com> Signed-off-by: Maksim Nabokikh <max.nabokih@gmail.com> Co-authored-by: Maksim Nabokikh <maksim.nabokikh@flant.com> Co-authored-by: Maksim Nabokikh <max.nabokih@gmail.com>	2 weeks ago
Maksim Nabokikh	8db7699e0f	feat: implement device code flow in example-app (#4570 ) This is a KubeCon 2026 preparation: 1. Add device flow to the example-app 2. Add userinfo checker 3. Refactor the structure Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>	3 weeks ago
Maksim Nabokikh	785033767c	feat: refactor signer configuration with local and vault options (#4532 ) Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>	4 weeks ago
Ivan Zviagintsev	9e377718dc	feat: add name and emailVerified fields for static passwords (#4526 ) Signed-off-by: Ivan Zvyagintsev <ivan.zvyagintsev@flant.com>	1 month ago
Maksim Nabokikh	56958b1ad2	feat: Add Vault signer for JWT (#4512 ) Signed-off-by: Maksim Nabokikh <max.nabokih@gmail.com>	1 month ago
Doug Goldstein	4bdb4f2c5a	chore: extend example configs for idEnv and public (#4443 ) Add a few more examples in the configs for staticClient configuration using idEnv and public flags. Signed-off-by: Doug Goldstein <cardoe@cardoe.com>	1 month ago
Ivan Zviagintsev	d1b2722e39	feat: support groups and preferred_username for staticPasswords (#4456 ) Signed-off-by: Ivan Zvyagintsev <ivan.zvyagintsev@flant.com>	2 months ago
Maksim Nabokikh	81af48862b	Remove additional features and add a feature flag instead (#3663 ) Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	2 years ago
Maksim Nabokikh	225660785c	Enrich Dex logs with real IP and request ID (#3661 ) Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com> Signed-off-by: Maksim Nabokikh <max.nabokih@gmail.com> Co-authored-by: Márk Sági-Kazár <sagikazarmark@users.noreply.github.com>	2 years ago
Maksim Nabokikh	63f4410ac1	Update dependencies before Dex v2.41 (#3637 ) Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	2 years ago
Giovanni Campeol	b07e1bc9f1	gRPC Connectors API (#3245 ) Signed-off-by: Giovanni Campeol <giovanni.campeol.95@gmail.com> Signed-off-by: Maksim Nabokikh <maksim.nabokikh@flant.com> Co-authored-by: Maksim Nabokikh <maksim.nabokikh@flant.com>	2 years ago
Maksim Nabokikh	088339fc28	Add headers control to dex web server (#3339 ) Customization of headers in the authentication server is crucial for enforcing stringent security measures by allowing the inclusion of specific headers required for authentication protocols and compliance standards. This customization ensures that authentication requests are processed securely, mitigating potential vulnerabilities and ensuring adherence to security policies. Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	2 years ago
Sean Liao	8ac8dca9f4	include granttypes in example config (#3027 ) Signed-off-by: Sean Liao <sean+git@liao.dev>	3 years ago
m.nabokikh	6822ad950f	feat: enable profiling endpoints Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	4 years ago
Jesse Glick	65edeff231	Include explanation in comment: https://github.com/dexidp/dex/pull/2218#discussion_r679873279 Signed-off-by: Jesse Glick <jglick@cloudbees.com>	5 years ago
Jesse Glick	f1d4fec45e	Demonstrate use of `htpasswd` for bCrypt in `staticPasswords` Signed-off-by: Jesse Glick <jglick@cloudbees.com>	5 years ago
m.nabokikh	beb8911cf7	chore: add note about units to expire config Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	5 years ago
m.nabokikh	91de99d57e	feat: Add refresh token expiration and rotation settings Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	5 years ago
Mark Sagi-Kazar	27a43669a7	chore: add new development configuration Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>	5 years ago
Mark Sagi-Kazar	0a88483409	chore: rename the docs directory Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>	5 years ago
Maksim Nabokikh	35da73de38	chore: add frontend section to dev config (#1913 ) * chore: add frontend section to dev config Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	5 years ago
Isaac Parker	0af41fb4ca	docs: Correct tlsClientCA example reference Signed-off-by: Isaac Parker <parrotmac@gmail.com>	5 years ago
justin-slowik	9882ea453f	better support for /device/callback redirect uris with public clients. Signed-off-by: justin-slowik <justin.slowik@thermofisher.com>	6 years ago
justin-slowik	f6d8427f32	Added device flow static client to config-dev.yaml Signed-off-by: justin-slowik <justin.slowik@thermofisher.com>	6 years ago
Justin Slowik	9bbdc721d5	Device flow token code exchange (#2 ) * Added /device/token handler with associated business logic and storage tests. Perform user code exchange, flag the device code as complete. Moved device handler code into its own file for cleanliness. Cleanup * Removed PKCE code * Rate limiting for /device/token endpoint based on ietf standards * Configurable Device expiry Signed-off-by: justin-slowik <justin.slowik@thermofisher.com>	6 years ago
Nandor Kracser	5b7a664e9d	add docker-compose for local testing	6 years ago
Brian Candler	442d3de11d	Allow the "google" connector to work without a service account Fixes #1718	6 years ago
Zach Brown	13be146d2a	Add support for password grant #926	6 years ago
Tom Downes	963b8e992d	Add examples for recent additions to oauth2 configuration options	7 years ago
Frederic Branczyk	5f03479d29	*: Add go runtime, process, HTTP and gRPC metrics	8 years ago
rithu john	5e0bf8b65f	connector/oidc: fix hosted domain support.	9 years ago
Eric Chiang	c1a7285711	examples: document explicit flow in example config	9 years ago
Ben Navetta	687bc9ca5c	add hosted domain to example config	9 years ago
Eric Chiang	33f0199077	*: fix spelling using github.com/client9/misspell	9 years ago
rithu john	fa2f76bcdb	examples: adding a gRPC client example.	9 years ago
Eric Chiang	4d54038256	examples: add logger fields	9 years ago
Eric Chiang	391dc51c13	*: add theme based frontend configuration This PR reworks the web layout so static files can be provided and a "themes" directory to allow a certain degree of control over logos, styles, etc. This PR does NOT add general support for frontend customization, only enough to allow us to start exploring theming internally. The dex binary also must now be run from the root directory since templates are no longer "compiled into" the binary. The docker image has been updated with frontend assets.	9 years ago
Phu Kieu	ba58f3f43b	Fix Google OIDC callback url	9 years ago
Eric Chiang	a52e324f68	*: readme updates for v2	9 years ago
Eric Chiang	015e7cf606	cmd/dex: only expand from env for storages and connectors Bcrypt'd hashes have "$" characters in them. This means that #667 (accepting actually bcrypted values) combined with #627 (expanding config with environment variables) broke the example config. For now, allow storages and connectors to expand their configs from the environment, but don't do this anywhere else.	9 years ago
rithu leena john	600e761266	cmd/dex: expose IDTokensValidFor and RotateKeysAfter server options in config.	10 years ago
Eric Chiang	ebe51e736d	cmd/dex: accept raw bcrypt'd hash as well as base64'd version of hash	10 years ago
rithu leena john	42dfd3ecec	cmd/dex: add option for gRPC client auth CA.	10 years ago
Eric Chiang	a11db557b4	*: expand environment variables in config Allow users to define config values which are read form environemnt variables. Helpful for sensitive variables such as OAuth2 client IDs or LDAP credentials.	10 years ago
Eric Chiang	dc13f09fb7	*: add more comments to the example config	10 years ago
Eric Chiang	2909929b17	*: add the ability to define passwords statically	10 years ago

1 2

55 Commits (5bbfbbe168a747b017710dd8804846ddf390cbb2)