mirror/dex - dex - xhrpb gitea

Commit Graph

Author	SHA1	Message	Date
Oleksandr Redko	9891daa585	refactor: simplify tests by using slog.DiscardHandler (#4058 ) Signed-off-by: Oleksandr Redko <oleksandr.red+github@gmail.com>	1 year ago
Melroy Dsouza	8b93966357	Support for IssuerAlias and groups as maps (#3676 ) Signed-off-by: Melroy Dsouza <meldsza@gmail.com>	1 year ago
Maksim Nabokikh	07a42839a3	Fix logger.Warnf error after merging 3661 (#3668 ) Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	2 years ago
Jack Warren	849d601e4a	Pass ctx with http.Client to verifier for OIDC connector (#3641 ) Signed-off-by: Jack Warren <jack@jackwarren.info>	2 years ago
Sean Liao	0b6a78397e	use slog for structured logging (#3502 ) Signed-off-by: Sean Liao <sean+git@liao.dev>	2 years ago
sohgaura	064a409443	OIDC connector option to override jwksURI (#3543 ) Signed-off-by: sohgaura <tiwari.dk1@gmail.com> Signed-off-by: sohgaura <31881670+sohgaura@users.noreply.github.com>	2 years ago
Abhisek Datta	677ab36020	feat: Add support for configurable prompt type for Google connector (#3475 ) Signed-off-by: abhisek <abhisek.datta@gmail.com> Signed-off-by: Maksim Nabokikh <max.nabokih@gmail.com> Co-authored-by: Maksim Nabokikh <max.nabokih@gmail.com>	2 years ago
Maksim Nabokikh	e5dce3d3b7	OIDC connector: Allow specifying empty prompt type (#3373 ) Enhanced the OIDC connector to allow specifying an empty promptType parameter. Previously, the default behavior always appended 'consent' if promptType was not specified. This adjustment was necessary due to variations in default behaviors across certain Identity Providers (IDPs). Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com> Signed-off-by: Maksim Nabokikh <maksim.nabokikh@flant.com>	2 years ago
Maksim Nabokikh	60ddd188c0	Update go-jose to v4.0.1 (#3409 ) Signed-off-by: Matthias Loibl <mail@matthiasloibl.com> Signed-off-by: Maksim Nabokikh <maksim.nabokikh@flant.com> Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com> Co-authored-by: Matthias Loibl <mail@matthiasloibl.com>	2 years ago
Chris	79d5874b35	fix(tokenExchange): use correct token type for userInfo requests (#3336 ) Signed-off-by: Chris H <33393789+MrDeerly@users.noreply.github.com>	2 years ago
Maksim Nabokikh	665a5b627c	Override OIDC provider discovered claims (#3267 ) Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	2 years ago
Jackson Argo	5df1605773	add regex for oidc group matching Signed-off-by: Jackson Argo <jackson@startree.ai>	2 years ago
Oded Ben-Ozer	a6a72453b5	fix some small formatting issue Signed-off-by: Oded Ben-Ozer <obenozer@wayfair.com>	2 years ago
Oded Ben-Ozer	115425960c	Address issues raised in review: Improve naming Signed-off-by: Oded Ben-Ozer <obenozer@wayfair.com>	2 years ago
Oded Ben Ozer	033717a07e	Apply suggestions from code review Co-authored-by: Márk Sági-Kazár <sagikazarmark@users.noreply.github.com> Signed-off-by: Oded Ben Ozer <oded.benozer@gmail.com>	2 years ago
Pradeep Mudlapur	415ddaa3da	Minimalistic support for group filtering in oidc connector (#3074 ) Signed-off-by: Pradeep Mudlapur <pradeep@juliacomputing.com> Co-authored-by: Maksim Nabokikh <max.nabokih@gmail.com> Co-authored-by: Márk Sági-Kazár <sagikazarmark@users.noreply.github.com>	2 years ago
Oded Ben-Ozer	6875b64caf	Address issues raised in review: - Rename some vars - Cleanup some comments - Tiny refactor to improve readability Signed-off-by: Oded Ben-Ozer <obenozer@wayfair.com>	3 years ago
Oded Ben-Ozer	7f0056cf13	Fix lint issue Signed-off-by: Oded Ben-Ozer <obenozer@wayfair.com>	3 years ago
Oded Ben-Ozer	b1f4bd0195	Address issues raised in review: - Add missing json tag. - Control delimiter cleaning with a configuration key. - Use better variable names - concatenate string using slice and join Signed-off-by: Oded Ben-Ozer <obenozer@wayfair.com>	3 years ago
Oded Ben-Ozer	a52848418a	Rename configuration option to include a reference to groups and structure for future claim modification additions Signed-off-by: Oded Ben-Ozer <obenozer@wayfair.com>	3 years ago
Oded Ben-Ozer	316296b0d3	Document each test case Signed-off-by: Oded Ben-Ozer <obenozer@wayfair.com>	3 years ago
Oded Ben Ozer	6d143f16c1	Composite claims in OIDC connector (#3 ) * Add the ability to composite new claims in the OIDC connector, based on upstream claims Signed-off-by: Oded Ben-Ozer <obenozer@wayfair.com>	3 years ago
Sean Liao	affd4d4e49	verify access tokens by checking getuserinfo during a token exchange (#3031 ) The provider.Verifier.Verify endpoint we were using only works with ID tokens. This isn't an issue with systems which use ID tokens as access tokens (e.g. dex), but for systems with opaque access tokens (e.g. Google / GCP), those access tokens could not be verified. Instead, check the access token against the getUserInfo endpoint. Signed-off-by: Sean Liao <sean+git@liao.dev> Co-authored-by: Maksim Nabokikh <max.nabokih@gmail.com>	3 years ago
Sean Liao	dcf7b18510	OAuth 2.0 Token Exchange (#2806 ) Signed-off-by: Sean Liao <sean+git@liao.dev> Co-authored-by: Maksim Nabokikh <max.nabokih@gmail.com>	3 years ago
Maksim Nabokikh	bc8c2276e3	Fail if OIDC config contains hosted domains (#2937 ) Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	3 years ago
Josh Soref	d8a9756df7	spelling: verified Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>	3 years ago
Maksim Nabokikh	2ea1a80c86	fix: propagate http client to userInfo requests for OIDC connector (#2781 ) Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	3 years ago
Rui Yang	54345b6331	TLS configure for OIDC connector (#1632 ) Signed-off-by: Rui Yang <ruiya@vmware.com>	3 years ago
Joost Buskermolen	72dd3c60c0	fix: Fallback when group claim is a string instead of an array of strings (#2639 ) Signed-off-by: Joost Buskermolen <joost@buskervezel.nl> Co-authored-by: Michiel van Pouderoijen <michiel@pouderoijen.nl>	4 years ago
Anthony Brandelli	5fe1647fc7	Fix issues to make the linter happy Signed-off-by: Anthony Brandelli <abrandel@cisco.com>	4 years ago
Anthony Brandelli	7c335e9337	Add support for IDPs that do not send ID tokens in the reply when using a refresh grant. Add tests for the aforementioned functionality. Signed-off-by: Anthony Brandelli <abrandel@cisco.com>	4 years ago
Anthony Brandelli	f07a58a7f1	Remove google specific hd / hosted domain claim config Signed-off-by: Anthony Brandelli <abrandel@cisco.com>	4 years ago
Engin Diri	5d9d68106a	feat: Add acr_values support for OIDC Signed-off-by: Engin Diri <engin.diri@mail.schwarz>	4 years ago
Happy2C0de	419db81c67	Remove overrideWithMissingCustomEmailClaim Signed-off-by: Happy2C0de <46957159+Happy2C0de@users.noreply.github.com>	4 years ago
Happy2C0de	55605751f5	Add overrideWithMissingCustomEmailClaim test Signed-off-by: Happy2C0de <46957159+Happy2C0de@users.noreply.github.com>	4 years ago
Happy2C0de	b28098dde8	Revert querying preferrredUsernameKey Signed-off-by: Happy2C0de <46957159+Happy2C0de@users.noreply.github.com>	4 years ago
Happy2C0de	1608b473eb	Remove false failed errors. Signed-off-by: Happy2C0de <46957159+Happy2C0de@users.noreply.github.com>	4 years ago
Happy2C0de	2b6bb1997c	Revert ClaimMapping struct Signed-off-by: Happy2C0de <46957159+Happy2C0de@users.noreply.github.com>	4 years ago
Happy2C0de	14a0aecc81	Move claimMapping.enforce to overrideClaimMapping Signed-off-by: Happy2C0de <46957159+Happy2C0de@users.noreply.github.com>	4 years ago
Happy2C0de	45143c98b3	Add claimMapping enforcement Signed-off-by: Happy2C0de <46957159+Happy2C0de@users.noreply.github.com>	4 years ago
Mark Sagi-Kazar	b8ac640c4f	Update oidc library Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>	5 years ago
Josh Soref	84e9cb6947	spelling: verified Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>	5 years ago
Rui Yang	058202d007	revert changes for user id and user name Signed-off-by: Rui Yang <ruiya@vmware.com>	6 years ago
Rui Yang	0494993326	update oidc documentation and email claim err msg Signed-off-by: Rui Yang <ruiya@vmware.com>	6 years ago
Rui Yang	41207ba265	Combine #1691 and #1776 to unify OIDC provider claim mapping add tests for groups key mapping Signed-off-by: Rui Yang <ruiya@vmware.com>	6 years ago
Scott Lemmon	a783667c57	Add groupsClaimMapping to the OIDC connector The groupsClaimMapping setting allows one to specify which claim to pull group information from the OIDC provider. Previously it assumed group information was always in the "groups" claim, but that isn't the case for many OIDC providers (such as AWS Cognito using the "cognito:groups" claim instead) Signed-off-by: Scott Lemmon <slemmon@aurora.tech> Signed-off-by: Rui Yang <ruiya@vmware.com>	6 years ago
Cyrille Nofficial	61312e726e	Add parameter configuration to override email claim key Signed-off-by: Rui Yang <ruiya@vmware.com>	6 years ago
Rui Yang	52c39fb130	check if upstream contains preferrend username claim first Signed-off-by: Rui Yang <ryang@pivotal.io> Signed-off-by: Rui Yang <ruiya@vmware.com>	6 years ago
Rui Yang	4812079647	add tests when preferred username key is not set Signed-off-by: Rui Yang <ruiya@vmware.com>	6 years ago
Rui Yang	d9afb7e59c	default to preferred_username claim Signed-off-by: Rui Yang <ruiya@vmware.com>	6 years ago

1 2

98 Commits (8e96058e71257eb0a32e1b0a42303094dea9d8fb)