mirror/dex - dex - xhrpb gitea

Commit Graph

Author	SHA1	Message	Date
Stephan Renatus	291cd9e01c	regenerate protobuf code Signed-off-by: Stephan Renatus <srenatus@chef.io>	7 years ago
Stephan Renatus	231e571c3c	server/api: fix logging in VerifyPassword Before: msg="api: password check failed : %vcrypto/bcrypt: hashedPassword is not the hash of the given password" After: msg="api: password check failed : crypto/bcrypt: hashedPassword is not the hash of the given password" Signed-off-by: Stephan Renatus <srenatus@chef.io>	7 years ago
Stephan Renatus	d9487e553b	*: fix some lint issues Mostly gathered these using golangci-lint's deadcode and ineffassign linters. Signed-off-by: Stephan Renatus <srenatus@chef.io>	7 years ago
Stephan Renatus	8561a66365	server/{handler,oauth2}: cleanup error returns Now, we'll return a standard error, and have the caller act upon this being an instance of authErr. Also changes the storage.AuthRequest return to a pointer, and returns nil in error cases. Signed-off-by: Stephan Renatus <srenatus@chef.io>	7 years ago
LanceH	07a77e0dac	Use connector_id param to skip directly to a specific connector	7 years ago
Tyler Cloke	dd84e73c0e	Add VerifyPassword to API It takes in an email and plain text password to verify. If it fails to find a password stored for email, it returns not_found. If it finds the password hash stored but that hash doesn't match the password passed via the API, it returns verified = false, else it returns verified = true. Co-authored-by: Alban Seurat <alban.seurat@me.com>	7 years ago
Andy Lindeman	5b66bf05c8	Fixed shadowed variable declaration	7 years ago
Andy Lindeman	59b6595c37	userinfo_endpoint is required	7 years ago
Andy Lindeman	8959dc4275	ctx is not used	7 years ago
Andy Lindeman	21174c06a1	Remove comment We have a story around user info now	7 years ago
Andy Lindeman	840065faaf	Assert something about the returned userinfo	7 years ago
Andy Lindeman	46f5726d11	Use oidc.Verifier to verify tokens	7 years ago
Andy Lindeman	157c359f3e	Bump go-oidc to latest v2	7 years ago
mdbraber	3dd1bac821	Fix comments	7 years ago
Maarten den Braber	74f4e749b9	Formatting	7 years ago
Maarten den Braber	d7750b1e26	Fix changes	7 years ago
Maarten den Braber	a8d059a237	Add userinfo endpoint Co-authored-by: Yuxing Li <360983+jackielii@users.noreply.github.com> Co-authored-by: Francisco Santiago <1737357+fjbsantiago@users.noreply.github.com>	7 years ago
Tomas Barton	55cebd58a8	print appropriate error	7 years ago
Benoit Sigoure	d6ad67a6de	server: add metrics for CORS handlers.	7 years ago
Mark Sagi-Kazar	06521ffa49	Remove the logrus logger wrapper	7 years ago
Mark Sagi-Kazar	d1c8f8d095	Remove structured logging from the logger interface	7 years ago
Mark Sagi-Kazar	be581fa7ff	Add logger interface and stop relying on Logrus directly	7 years ago
Eric Chiang	8935a1479c	server: update health check endpoint to query storage periodically Instead of querying the storage every time a health check is performed query it periodically and save the result.	7 years ago
joannano	88d1e2b041	keystone: test cases, refactoring and cleanup	7 years ago
Krzysztof Balka	a965365a2b	keystone: refresh token and groups	7 years ago
knangia	0774a89066	keystone: squashed changes from knangia/dex	7 years ago
Haines Chan	b78b8aeee0	Replace "GET", "POST" to http.MethodGet and http.MethodPost	7 years ago
Maximilian Gaß	468c74d1d2	Make expiry of auth requests configurable	7 years ago
Cosmin Cojocar	01c6b9dd91	Remove the 'public' field from UpdateClientReq proto message	7 years ago
Alexander Matyushentsev	ff8b44558e	Issue #1263 - Render error message provided by connector if user authentication failed	7 years ago
Cosmin Cojocar	281ec27118	Update also to a list of empty redirect URIs and Peers	7 years ago
Cosmin Cojocar	9d1ec6c36b	Revert "Avoid overwriting exiting redirect URI and trusted peers when updating the client" This reverts commit `49fa5ee6e8`.	7 years ago
Cosmin Cojocar	49fa5ee6e8	Avoid overwriting exiting redirect URI and trusted peers when updating the client Also skip configure the Public field.	7 years ago
Cosmin Cojocar	c9b18b2785	Add tests for UpateClient API	7 years ago
Cosmin Cojocar	9926a0dced	Extend the API with a function which updates the client configuration	7 years ago
Danny Sauer	74bfbcefbc	minor spelling correction	8 years ago
Ed Tan	d26e23c16f	Make suggested code changes	8 years ago
Ed Tan	8c75d85b60	Add Bitbucket connector	8 years ago
Stephan Renatus	b9f6594bf0	*: github.com/coreos/dex -> github.com/dexidp/dex Signed-off-by: Stephan Renatus <srenatus@chef.io>	8 years ago
Vy-Shane Xie	b03c85e56e	Add new federated:id scope that causes Dex to add a federated_claims claim containing the connector_id and user_id to the ID token	8 years ago
Frederic Branczyk	5f03479d29	*: Add go runtime, process, HTTP and gRPC metrics	8 years ago
Eric Buth	da45adcb6e	email scope only allows access to a user's email address	8 years ago
Stephan Renatus	f013a44581	handlers/connector_login: check before update (optimization) Signed-off-by: Stephan Renatus <srenatus@chef.io>	8 years ago
Stephan Renatus	f18d7afc6f	handlers/connector_login: update AuthRequest irregardless of method Before, you could not POST your credentials to a password-connector's endpoint without GETing that endpoint first. While this makes sense for browser clients; automated interactions with Dex don't need to look at the password form to fill it in. A symptom of that missing GET was that the POST succeeded (!) with login successful: connector "", username="admin", email="admin@example.com", groups=[] Note the connector "". A subsequent call to finalizeLogin would then fail with connector with ID "" not found: failed to get connector object from storage: not found Now, the connector ID of an auth request will be updated for both GETs and POSTs. Signed-off-by: Stephan Renatus <srenatus@chef.io>	8 years ago
Eric Chiang	c5de6fa733	*: regenerate proto	8 years ago
Kazumasa Kohtaka	9948228e5b	Set a proper status code before sending an error status page	8 years ago
Pavel Borzenkov	6193bf5566	connector: implement Microsoft connector connector/microsoft implements authorization strategy via Microsoft's OAuth2 endpoint + Graph API. It allows to choose what kind of tenants are allowed to authenticate in Dex via Microsoft: * common - both personal and business/school accounts * organizations - only business/school accounts * consumers - only personal accounts * <tenant uuid> - only account of specific tenant Signed-off-by: Pavel Borzenkov <pavel.borzenkov@gmail.com>	8 years ago
Stephan Renatus	41f663f70c	show "back" link for password connectors This way, the user who has selected, say, "Log in with Email" can make up their mind, and select a different connector instead. However, if there's only one connector set up, none of this makes sense -- and the link will thus not be displayed. Signed-off-by: Stephan Renatus <srenatus@chef.io>	8 years ago
Stephan Renatus	b09a13458f	password connectors: allow overriding the username attribute (password prompt) This allows users of the LDAP connector to give users of Dex' login prompt an idea of what they should enter for a username. Before, irregardless of how the LDAP connector was set up, the prompt was Username [_________________] Password [_________________] Now, this is configurable, and can be used to say "MyCorp SSO Login" if that's what it is. If it's not configured, it will default to "Username". For the passwordDB connector (local users), it is set to "Email Address", since this is what it uses. Signed-off-by: Stephan Renatus <srenatus@chef.io>	8 years ago
Pavel Borzenkov	ab06119431	connector: implement LinkedIn connector connector/linkedin implements authorization strategy via LinkedIn's OAuth2 endpoint + profile API. It doesn't implement RefreshConnector as LinkedIn doesn't provide any refresh token at all (https://developer.linkedin.com/docs/oauth2, Step 5 — Refresh your Access Tokens) and recommends ordinary AuthCode exchange flow when token refresh is required. Signed-off-by: Pavel Borzenkov <pavel.borzenkov@gmail.com>	9 years ago

1 2 3 4

154 Commits (6ae11a1cfee5a10b4bc6fe2b158881a34e06be21)