mirror/dex - dex - xhrpb gitea

Commit Graph

Author	SHA1	Message	Date
Eric Chiang	74eaec60cb	Merge pull request #661 from rithujohn191/gRPC-client-auth cmd/dex: add option for gRPC client auth CA.	10 years ago
rithu leena john	42dfd3ecec	cmd/dex: add option for gRPC client auth CA.	10 years ago
Eric Chiang	799b3f3ef5	Merge pull request #658 from ericchiang/dev-dont-error-on-invalid-username *: don't error out if a username doesn't exist in the backing connector	10 years ago
Eric Chiang	90e613b328	Merge pull request #649 from rithujohn191/gRPC-endpoints api: add gRPC endpoints for creating, updating and deleting passwords	10 years ago
Eric Chiang	57a59d4631	*: don't error out if a username doesn't exist in the backing connector Instead of throwing a 500 error if a user enters an invalid name, display the same text box as if the user had entered the wrong password. NOTE: An invalid username now returns much quicker than an invalid password. Consider adding an arbitrary sleep in the future if we care about masking which was invalid.	10 years ago
rithu leena john	ed7e943406	api: add gRPC endpoints for creating, updating and deleting passwords	10 years ago
Eric Chiang	2a9051c864	Merge pull request #654 from ericchiang/dev-sql-optimistic-concurrency storage/sql: use isolation level "serializable" for transactions	10 years ago
Eric Chiang	8debe68314	Documentation: remove caveat about running multiple instances	10 years ago
Eric Chiang	786e12b15e	storage/conformance: expand transaction test suite	10 years ago
Eric Chiang	52e2a1668c	storage/sql: use isolation level "serializable" for transactions	10 years ago
Eric Chiang	1c51c50b23	Merge pull request #652 from ericchiang/dev-docs-api Documentation: add document on the dex API	10 years ago
Eric Chiang	fe1d27586e	Documentation: add document on the dex API	10 years ago
Eric Chiang	651b406cfd	Merge pull request #651 from ericchiang/dev-remove-openldap-container contrib/openldap: remove OpenLDAP container	10 years ago
Eric Chiang	f672e75a3a	contrib/openldap: remove OpenLDAP container Based on #640 we're going to osixia/openldap instead of rolling our own container. Removing this work for now. If we want it back we can revert easily enough.	10 years ago
rithu leena john	0cfd815d3d	Merge pull request #648 from ericchiang/dev-storage-docs storage: update godocs	10 years ago
Eric Chiang	c0aa63ac97	storage: update godocs	10 years ago
Eric Chiang	a7c2fca039	Merge pull request #645 from ericchiang/dev-ldap-fix-switch connector/ldap: fix bug in switch statement	10 years ago
Eric Chiang	4329406158	connector/ldap: fix bug in switch statement	10 years ago
Eric Chiang	d7912a3a97	Merge pull request #638 from ericchiang/dev-share-a-single-callback *: allow call connectors to share a single a single callback	10 years ago
Eric Chiang	44fec87ce1	Merge pull request #642 from ericchiang/k8s-client-id storage/kubernetes: allow arbitrary client IDs	10 years ago
Eric Chiang	d7a75c5b5d	storage/kubernetes: allow arbitrary client IDs Use a hash algorithm to match client IDs to Kubernetes object names. Because cryptographic hash algorithms produce sums larger than a Kubernetes name can fit, a non-cryptographic hash is used instead. Hash collisions are checked and result in errors.	10 years ago
Eric Chiang	99717cb56d	Merge pull request #635 from ericchiang/dev-transaction-tests storage/conformance: add tests for transactional guarantees	10 years ago
Eric Chiang	acf3d6385e	Merge pull request #641 from ericchiang/dev-scripts-fix-get-protoc scripts: fix get-protoc script to work directly after a clean	10 years ago
Eric Chiang	84c3ba0fe3	scripts: fix get-protoc script to work directly after a clean Right now `make grpc` only works if a user hasn't run a `make clean`. Fix this.	10 years ago
Eric Chiang	c1f18802c9	Merge pull request #624 from ericchiang/dev-ldap-connector connector/ldap: expand LDAP connector to include searches	10 years ago
Eric Chiang	f5a378a4e5	Merge pull request #640 from rithujohn191/openldap-docs Documentation: adding documentation for running ldap tests locally	10 years ago
rithu leena john	27880dba59	Documentation: adding documentation for running ldap tests locally	10 years ago
Eric Chiang	13f7dfaef0	connector/ldap: expand LDAP connector to include searches	10 years ago
Eric Chiang	7c2289e0de	*: rename internally used "state" form value to "req" "state" means something specific to OAuth2 and SAML so we don't want to confuse developers who are working on this. Also don't use "session" which could easily be confused with HTTP cookies.	10 years ago
Eric Chiang	a3235d022a	*: verify "state" field before passing request to callback connectors Let the server handle the state token instead of the connector. As a result it can throw out bad requests earlier. It can also use that token to determine which connector was used to generate the request allowing all connectors to share the same callback URL. Callbacks now all look like: https://dex.example.com/callback Instead of: https://dex.example.com/callback/(connector id) Even when multiple connectors are being used.	10 years ago
Eric Chiang	88896eb949	Merge pull request #637 from squat/fix_cache_control server/handlers: fix Cache-Control header	10 years ago
Lucas Serven	5c498ae4df	server/handlers: fix Cache-Control header fixes: #636 This commit addresses a problem where the `max-age` value is being set in nanoseconds as opposed to seconds, as required by the specification.	10 years ago
Eric Chiang	4ab78d0ded	storage/kubernetes: run transactional conformance tests	10 years ago
Eric Chiang	5720ecf412	storage/conformance: add tests for transactional guarantees	10 years ago
Eric Chiang	99e312eadd	Merge pull request #632 from ericchiang/dev-docs-storage-options Documentation: add a document on storage options	10 years ago
Eric Chiang	6c4839860e	Documentation: add a document on storage options	10 years ago
Eric Chiang	d350938fb0	Merge pull request #626 from ericchiang/storage-kubernetes-guess-namespace-from-service-account-token storage/kubernetes: guess namespace from the service account token	10 years ago
Eric Chiang	ff9816464e	Merge pull request #627 from ericchiang/dev-expand-envs-in-config *: expand environment variables in config	10 years ago
Eric Chiang	101a2bc22a	Merge pull request #634 from rithujohn191/kubeconfig_context storage/kubernetes: set CurrentContext when the Kubeconfig file contains only one context	10 years ago
Eric Chiang	e0b83af981	Merge pull request #629 from ericchiang/dev-storage-kubernetes-dont-print-error storage/kubernetes: don't automatically print errors on bad HTTP status codes	10 years ago
rithu leena john	9de16f2c45	storage/kubernetes: set CurrentContext when the Kubeconfig file contains only one context	10 years ago
Eric Chiang	6c4ad8c04d	Merge pull request #630 from ericchiang/dev-storage-kubernetes-kubeconfig-guessing storage/kubernetes: don't guess the kubeconfig location and change test env	10 years ago
Eric Chiang	191c84813f	vendor: revendor	10 years ago
Eric Chiang	bc16de0b58	storage/kubernetes: don't guess the kubeconfig location and change test env Using the default KUBECONFIG environment variable to indicate that the Kubernetes tests should be run lead to cases where developers accidentally ran the tests. This has now been changed to "DEX_KUBECONFIG" and documentation hsa been added detailing how to run these tests. Additionally, no other storage reads environment variables for its normal configuration (outside of tests) so the Kubernetes storage no longer does. Overall, be less surprising.	10 years ago
Eric Chiang	138ff96c00	storage/kubernetes: don't automatically print errors on bad HTTP status codes These status codes spam the error logs for events like key rotation and third party resource creation. In these cases "bad" status codes are expected and shouldn't be automatically printed.	10 years ago
Eric Chiang	a11db557b4	*: expand environment variables in config Allow users to define config values which are read form environemnt variables. Helpful for sensitive variables such as OAuth2 client IDs or LDAP credentials.	10 years ago
Eric Chiang	8c9c5160b6	storage/kubernetes: guess namespace from the service account token The in cluster kubernetes client currently requires using the downward API to determine its namespace. However this value can be determine by inspecting the service account token mounted into the pod. As a fallback, use this to guess the current namespace.	10 years ago
Eric Chiang	ba9f6c6cd6	Merge pull request #618 from ericchiang/dev-contrib-ldap-container contrib/openldap: add an OpenLDAP Docker image for testing	10 years ago
Eric Chiang	373ac050f7	contrib/openldap: add a OpenLDAP container for testing	10 years ago
Eric Chiang	ea52bf263b	Merge pull request #623 from ericchiang/dev-port-oob-template *: port oob template	10 years ago

1 2 3 4

199 Commits (74eaec60cb04d8d2bb91579eec4d43d14ee4dd1c) All Branches Search

199 Commits (74eaec60cb04d8d2bb91579eec4d43d14ee4dd1c)

All Branches