mirror/dex - dex - xhrpb gitea

Commit Graph

Author	SHA1	Message	Date
Stephan Renatus	d9487e553b	*: fix some lint issues Mostly gathered these using golangci-lint's deadcode and ineffassign linters. Signed-off-by: Stephan Renatus <srenatus@chef.io>	7 years ago
Maarten den Braber	a8d059a237	Add userinfo endpoint Co-authored-by: Yuxing Li <360983+jackielii@users.noreply.github.com> Co-authored-by: Francisco Santiago <1737357+fjbsantiago@users.noreply.github.com>	7 years ago
Benoit Sigoure	d6ad67a6de	server: add metrics for CORS handlers.	7 years ago
Mark Sagi-Kazar	d1c8f8d095	Remove structured logging from the logger interface	7 years ago
Mark Sagi-Kazar	be581fa7ff	Add logger interface and stop relying on Logrus directly	7 years ago
Eric Chiang	8935a1479c	server: update health check endpoint to query storage periodically Instead of querying the storage every time a health check is performed query it periodically and save the result.	7 years ago
joannano	88d1e2b041	keystone: test cases, refactoring and cleanup	7 years ago
Krzysztof Balka	a965365a2b	keystone: refresh token and groups	7 years ago
knangia	0774a89066	keystone: squashed changes from knangia/dex	7 years ago
Maximilian Gaß	468c74d1d2	Make expiry of auth requests configurable	7 years ago
Ed Tan	d26e23c16f	Make suggested code changes	8 years ago
Ed Tan	8c75d85b60	Add Bitbucket connector	8 years ago
Stephan Renatus	b9f6594bf0	*: github.com/coreos/dex -> github.com/dexidp/dex Signed-off-by: Stephan Renatus <srenatus@chef.io>	8 years ago
Frederic Branczyk	5f03479d29	*: Add go runtime, process, HTTP and gRPC metrics	8 years ago
Pavel Borzenkov	6193bf5566	connector: implement Microsoft connector connector/microsoft implements authorization strategy via Microsoft's OAuth2 endpoint + Graph API. It allows to choose what kind of tenants are allowed to authenticate in Dex via Microsoft: * common - both personal and business/school accounts * organizations - only business/school accounts * consumers - only personal accounts * <tenant uuid> - only account of specific tenant Signed-off-by: Pavel Borzenkov <pavel.borzenkov@gmail.com>	8 years ago
Stephan Renatus	b09a13458f	password connectors: allow overriding the username attribute (password prompt) This allows users of the LDAP connector to give users of Dex' login prompt an idea of what they should enter for a username. Before, irregardless of how the LDAP connector was set up, the prompt was Username [_________________] Password [_________________] Now, this is configurable, and can be used to say "MyCorp SSO Login" if that's what it is. If it's not configured, it will default to "Username". For the passwordDB connector (local users), it is set to "Email Address", since this is what it uses. Signed-off-by: Stephan Renatus <srenatus@chef.io>	8 years ago
Pavel Borzenkov	ab06119431	connector: implement LinkedIn connector connector/linkedin implements authorization strategy via LinkedIn's OAuth2 endpoint + profile API. It doesn't implement RefreshConnector as LinkedIn doesn't provide any refresh token at all (https://developer.linkedin.com/docs/oauth2, Step 5 — Refresh your Access Tokens) and recommends ordinary AuthCode exchange flow when token refresh is required. Signed-off-by: Pavel Borzenkov <pavel.borzenkov@gmail.com>	9 years ago
Michael Stapelberg	4931f30a80	authproxy.md: strip X-Remote-User follow-up for https://github.com/coreos/dex/pull/1100	9 years ago
Michael Stapelberg	a41d93db4a	Implement the “authproxy” connector (for Apache2 mod_auth etc.)	9 years ago
Eric Stroczynski	2b354c8fdb	server: set sane bcrypt cost upper bound	9 years ago
Eric Stroczynski	4bcb0aaae9	server: log bcrypt cost if > 12, error on runtime > 10s The bcrypt hashing algorithm runtime grows exponentially with cost, and might cause a timeout if the cost is too high. Notifying the user of high cost and of long running calculations will help with tuning and debugging.	9 years ago
Eric Stroczynski	4a88d0641a	: update {S->s}irupsen/logrus	9 years ago
rithu john	8c9c2518f5	server: account for dynamically changing connector object in storage.	9 years ago
Lucas Serven	f3d9bd5008	server/server.go: make successful garbage collection log at info level	9 years ago
Eric Chiang	777eeafabc	*: update go-oidc and use standard library's context package	9 years ago
Simon HEGE	415a68f977	Allow CORS on keys and token endpoints	9 years ago
Eric Chiang	f926d74157	server: fixes for the implicit and hybrid flow Accept the following response_type for the implicit flow: id_token token id_token And the following for hybrid flow code id_token code token code token id_token This corrects the previous behavior of the implicit flow, which only accepted "token" (now correctly rejected).	9 years ago
Simon HEGE	b4c47910e4	Allow CORS on discovery endpoint	9 years ago
rithu john	75aa1c67ce	server: add error HTML templates with error description.	9 years ago
rithu john	9949a1313c	server: modify error messages to use logrus.	9 years ago
rithu john	2e22a948cf	cmd/dex: add logging config and serve logger for different modules.	9 years ago
Eric Chiang	391dc51c13	*: add theme based frontend configuration This PR reworks the web layout so static files can be provided and a "themes" directory to allow a certain degree of control over logos, styles, etc. This PR does NOT add general support for frontend customization, only enough to allow us to start exploring theming internally. The dex binary also must now be run from the root directory since templates are no longer "compiled into" the binary. The docker image has been updated with frontend assets.	9 years ago
Eric Chiang	952e0f81f5	connector: add RefreshConnector interface	9 years ago
Eric Chiang	57a59d4631	*: don't error out if a username doesn't exist in the backing connector Instead of throwing a 500 error if a user enters an invalid name, display the same text box as if the user had entered the wrong password. NOTE: An invalid username now returns much quicker than an invalid password. Consider adding an arbitrary sleep in the future if we care about masking which was invalid.	10 years ago
Eric Chiang	a3235d022a	*: verify "state" field before passing request to callback connectors Let the server handle the state token instead of the connector. As a result it can throw out bad requests earlier. It can also use that token to determine which connector was used to generate the request allowing all connectors to share the same callback URL. Callbacks now all look like: https://dex.example.com/callback Instead of: https://dex.example.com/callback/(connector id) Even when multiple connectors are being used.	10 years ago
Eric Chiang	89ecfd2ede	server: only print gc stats if something has been removed	10 years ago
Eric Chiang	4296604f11	{cmd,server}: move garbage collection logic to server	10 years ago
Eric Chiang	dcbe67d89c	{cmd/dex,server}: expose skip approval screen option	10 years ago
Eric Chiang	cdf0b91690	server: add an option to enable emails and passwords from the database	10 years ago
Eric Chiang	e873a31b21	server: add health check endpoint	10 years ago
Eric Chiang	8b079168be	server: add gRPC service implementation	10 years ago
Eric Chiang	608d8ba984	*: switch dex to the ported templates	10 years ago
Eric Chiang	571024182d	*: set response types supported in discovery based on server config	10 years ago
Eric Chiang	c113df961a	*: support the implicit flow	10 years ago
Eric Chiang	bfe560ee21	rename	10 years ago
Eric Chiang	4cbe9bbc82	server: cache signing keys	10 years ago
Eric Chiang	cab271f304	initial commit	10 years ago

48 Commits (6ae11a1cfee5a10b4bc6fe2b158881a34e06be21)