Maksim Nabokikh
4bb97c73a9
Handle root path better (than nothing) ( #3747 )
...
Signed-off-by: maksim.nabokikh <max.nabokih@gmail,com>
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
1 year ago
Daniël Sonck
e7c0682e45
feat: also allow localhost equivalent IP addresses ( #3778 )
...
Instead of only checking for "localhost", also validate through
net.ParseIP + IsLoopback whether the host is numerically localhost
Signed-off-by: Daniel Sonck <daniel@sonck.nl>
1 year ago
IvoGoman
1a16aa4889
feat(metrics): add response_size, request_duration histograms ( #3748 )
...
replaces felixge/httpsnoop with prometheus/client_golang instrumentation
adds histograms for response_size_bytes & request_duration_seconds
Signed-off-by: Ivo Gosemann <ivo.gosemann@sap.com>
2 years ago
Koen de Laat
d0f1777c41
Added Discovery to grpc ( #3598 )
...
Signed-off-by: Koen de Laat <koen.de.laat@philips.com>
2 years ago
Maksim Nabokikh
81af48862b
Remove additional features and add a feature flag instead ( #3663 )
...
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
2 years ago
Maksim Nabokikh
225660785c
Enrich Dex logs with real IP and request ID ( #3661 )
...
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
Signed-off-by: Maksim Nabokikh <max.nabokih@gmail.com>
Co-authored-by: Márk Sági-Kazár <sagikazarmark@users.noreply.github.com>
2 years ago
Giovanni Campeol
b07e1bc9f1
gRPC Connectors API ( #3245 )
...
Signed-off-by: Giovanni Campeol <giovanni.campeol.95@gmail.com>
Signed-off-by: Maksim Nabokikh <maksim.nabokikh@flant.com>
Co-authored-by: Maksim Nabokikh <maksim.nabokikh@flant.com>
2 years ago
Sean Liao
0b6a78397e
use slog for structured logging ( #3502 )
...
Signed-off-by: Sean Liao <sean+git@liao.dev>
2 years ago
Maksim Nabokikh
caae8a8f82
Bump google.golang.org/grpc to v1.64.0 ( #3553 )
...
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
2 years ago
Romain Caire
86e92aaf1a
fix: wrong error code returned in case of inactive token ( #3441 )
...
Signed-off-by: Romain Caire <super.cairos@gmail.com>
2 years ago
Romain Caire
8755308759
[RFC7662] Add introspect endpoint to introspect access & refresh token ( #3404 )
...
Signed-off-by: Romain Caire <super.cairos@gmail.com>
2 years ago
Maksim Nabokikh
088339fc28
Add headers control to dex web server ( #3339 )
...
Customization of headers in the authentication server is crucial for enforcing stringent security measures by allowing the inclusion of specific headers required for authentication protocols and compliance standards. This customization ensures that authentication requests are processed securely, mitigating potential vulnerabilities and ensuring adherence to security policies.
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
2 years ago
Maksim Nabokikh
60ddd188c0
Update go-jose to v4.0.1 ( #3409 )
...
Signed-off-by: Matthias Loibl <mail@matthiasloibl.com>
Signed-off-by: Maksim Nabokikh <maksim.nabokikh@flant.com>
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
Co-authored-by: Matthias Loibl <mail@matthiasloibl.com>
2 years ago
Mark Sagi-Kazar
70b32eeccc
chore: regenerate proto
...
Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>
2 years ago
i-amelia
457e133d39
Log failed login attempt ( #2454 )
...
Signed-off-by: i312042 <viktoria.lyomcheva@sap.com>
Co-authored-by: i312042 <viktoria.lyomcheva@sap.com>
2 years ago
MM53
a0cf8b2dc2
fix: Do not evaluate skipApproval on approval page ( #3086 )
...
Signed-off-by: MM53 <28218664+MM53@users.noreply.github.com>
2 years ago
Ferenc Fabian
2377b0a0cd
Add context to storage's Create endpoints ( #2935 )
...
* Initial commit
Signed-off-by: PumpkinSeed <qwer.kocka@gmail.com>
* Finish the syntex fixes
Signed-off-by: PumpkinSeed <qwer.kocka@gmail.com>
* Add fixes after running the tests
Signed-off-by: PumpkinSeed <qwer.kocka@gmail.com>
* Change background context to request context
Signed-off-by: PumpkinSeed <qwer.kocka@gmail.com>
---------
Signed-off-by: PumpkinSeed <qwer.kocka@gmail.com>
2 years ago
Maksim Nabokikh
4f307d70c6
Fix lint errors after merging AllowedHeaders feature ( #3247 )
...
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
2 years ago
Josiah Evans
dce31d82ea
feat: Add configurable CORS Headers ( #3114 )
...
Signed-off-by: Josiah Evans <josiah.evans@lunit.io>
2 years ago
MM53
efc2fdb102
Store offline sessions only if they were requested by the user ( #3125 )
...
Signed-off-by: MM53 <2821Signed-off-by: MM53 <28218664+MM53@users.noreply.github.com>
2 years ago
Cedric-Magnan
139845c0a5
fix: linting with gofmt
...
Signed-off-by: Cedric-Magnan <cedric.magnan@artefact.com>
Signed-off-by: Oded Ben-Ozer <obenozer@wayfair.com>
3 years ago
Cedric-Magnan
a72413dd47
Update server.go
...
Signed-off-by: Cedric-Magnan <cedric.magnan@artefact.com>
Signed-off-by: Oded Ben-Ozer <obenozer@wayfair.com>
3 years ago
Cedric-Magnan
6c00fe0580
Update oauth2.go
...
Signed-off-by: Cedric-Magnan <cedric.magnan@artefact.com>
Signed-off-by: Oded Ben-Ozer <obenozer@wayfair.com>
3 years ago
Marco Franssen
895b166681
Implement GetClient gRPC endpoint ( #2972 )
...
Signed-off-by: Marco Franssen <marco.franssen@gmail.com>
3 years ago
Sean Liao
dcf7b18510
OAuth 2.0 Token Exchange ( #2806 )
...
Signed-off-by: Sean Liao <sean+git@liao.dev>
Co-authored-by: Maksim Nabokikh <max.nabokih@gmail.com>
3 years ago
Cedric-Magnan
7e4798a7a4
fix: linting with gofmt
...
Signed-off-by: Cedric-Magnan <cedric.magnan@artefact.com>
3 years ago
Cedric-Magnan
791657276e
Update server.go
...
Signed-off-by: Cedric-Magnan <cedric.magnan@artefact.com>
3 years ago
Cedric-Magnan
212df8e0ee
Update oauth2.go
...
Signed-off-by: Cedric-Magnan <cedric.magnan@artefact.com>
3 years ago
Josh Soref
e15b599e6a
spelling: programmatically
...
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>
3 years ago
Josh Soref
a1a05c4a65
spelling: nonexistent
...
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>
3 years ago
Josh Soref
6af340af94
spelling: in spite
...
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>
3 years ago
Josh Soref
542cb4cb65
spelling: data with
...
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>
3 years ago
Maksim Nabokikh
28aaa8f511
fix: Do not skip approval screen by default ( #2897 )
...
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
3 years ago
Mark Sagi-Kazar
d8f2628a84
chore: regenerate proto
...
Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>
3 years ago
Maksim Nabokikh
fc0e2e9383
feat: Add default robots.txt ( #2834 )
...
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
3 years ago
Maksim Nabokikh
7016a82589
fix: return 401 if password is invalid ( #2796 )
...
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
3 years ago
nobuyo
9f70c7da43
Add test for skipping approval
...
Signed-off-by: nobuyo <longzechangsheng@gmail.com>
3 years ago
nobuyo
b7fb7d93a3
Revert back personal tasted changes
...
Signed-off-by: nobuyo <longzechangsheng@gmail.com>
3 years ago
nobuyo
8a86a0a9b8
Skip redirection to approval when it is not requied ( #2686 )
...
Signed-off-by: nobuyo <longzechangsheng@gmail.com>
3 years ago
Daniel Lipovetsky
07d7913049
chore: Upgrade golangci-lint to v1.50.1 from v1.46.0 ( #2790 )
3 years ago
Maksim Nabokikh
6d9ca8de49
fix: Do not use connector data from the refresh token field ( #2729 )
...
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
3 years ago
m.nabokikh
4b5f1d5289
fix: refresh token only once for all concurrent requests
...
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
4 years ago
Bob Callaway
793bcc4b61
address review comments
...
Signed-off-by: Bob Callaway <bcallaway@google.com>
4 years ago
Bob Callaway
fcfbb1ecb0
Add HMAC protection on /approval endpoint
...
Signed-off-by: Bob Callaway <bcallaway@google.com>
4 years ago
Bob Callaway
83e2df821e
add PKCE support to device code flow ( #2575 )
...
Signed-off-by: Bob Callaway <bobcallaway@users.noreply.github.com>
4 years ago
Shivansh Vij
65592d0b5a
Updating test cases
...
Fixes https://github.com/dexidp/dex/issues/2537
Signed-off-by: Shivansh Vij <shivanshvij@outlook.com>
4 years ago
Shivansh Vij
cbf158bcc0
Fixes https://github.com/dexidp/dex/issues/2537
...
Signed-off-by: Shivansh Vij <shivanshvij@outlook.com>
4 years ago
m.nabokikh
bdfb10137a
Add the comment about groups request notification
...
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
4 years ago
m.nabokikh
3d5a3befb4
fix: prevent cross-site scripting for the device flow
...
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
4 years ago
m.nabokikh
ad89e01676
fix: log only errors on refreshing
...
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
4 years ago