mirror/dex - dex - xhrpb gitea

Commit Graph

Author	SHA1	Message	Date
justin-slowik	9882ea453f	better support for /device/callback redirect uris with public clients. Signed-off-by: justin-slowik <justin.slowik@thermofisher.com>	6 years ago
Justin Slowik	9c699b1028	Server integration test for Device Flow (#3 ) Extracted test cases from OAuth2Code flow tests to reuse in device flow deviceHandler unit tests to test specific device endpoints Include client secret as an optional parameter for standards compliance Signed-off-by: justin-slowik <justin.slowik@thermofisher.com>	6 years ago
Justin Slowik	9bbdc721d5	Device flow token code exchange (#2 ) * Added /device/token handler with associated business logic and storage tests. Perform user code exchange, flag the device code as complete. Moved device handler code into its own file for cleanliness. Cleanup * Removed PKCE code * Rate limiting for /device/token endpoint based on ietf standards * Configurable Device expiry Signed-off-by: justin-slowik <justin.slowik@thermofisher.com>	6 years ago
Justin Slowik	0d1a0e4129	Device token api endpoint (#1 ) * Added /device/token handler with associated business logic and storage tests. * Use crypto rand for user code Signed-off-by: justin-slowik <justin.slowik@thermofisher.com>	6 years ago
Justin Slowik	6d343e059b	Generates/Stores the device request and returns the device and user codes. Signed-off-by: justin-slowik <justin.slowik@thermofisher.com>	6 years ago
m.nabokikh	70505b258d	Fix templates with asset paths that point to external URL Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	6 years ago
Mark Sagi-Kazar	e84682d7b9	Add v2 api module	6 years ago
techknowlogick	0a9f56527e	Add Gitea connector (#1715 ) * Add Gitea connector * Add details to readme * resolve lint issue	6 years ago
Brian Candler	d2c9305e0f	Fix comment for implicit flow	6 years ago
Tadeusz Magura-Witkowski	7b7e2a040d	Automatic consistency fixing in case of missing refresh token in db	6 years ago
Kyle Larose	ab5ea03025	handlers: do not fail login if refresh token gone There is a chance that offline storage could fall out of sync with the refresh token tables. One example is if dex crashes/is stopped in the middle of handling a login request. If the old refresh token associated with the offline session is deleted, and then the process stops, the offline session will still refer to the old token. Unfortunately, if this case occurs, there is no way to recover from it, since further logins will be halted due to dex being unable to clean up the old tokens till referenced in the offline session: the database is essentially corrupted. There doesn't seem to be a good reason to fail the auth request if the old refresh token is gone. This changes the logic in `handleAuthCode` to not fail the entire transaction if the old refresh token could not be deleted because it was not present. This has the effect of installing the new refresh token, and unpdating the offline storage, thereby fixing the issue, however it occured.	6 years ago
Ivan Mikheykin	7ef1179e75	feat: connector for Atlassian Crowd	6 years ago
Joshua Winters	76825fef8f	Make logger and prometheus optional in server config Signed-off-by: Josh Winters <jwinters@pivotal.io> Co-authored-by: Mark Huang <mhuang@pivotal.io>	6 years ago
Rui Yang	0f9a74f1d0	Remove uneccesary client verification	6 years ago
Zach Brown	13be146d2a	Add support for password grant #926	6 years ago
m.nabokikh	058e72ef50	Pick icons on login screen by connector type instead of ID Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	6 years ago
Andrew Block	92e63771ac	Added OpenShift connector	6 years ago
Mark Sagi-Kazar	050d5af937	Fix ineffassign	6 years ago
Mark Sagi-Kazar	65c77e9db2	Fix bodyclose	6 years ago
Mark Sagi-Kazar	f141f2133b	Fix whitespace	6 years ago
Mark Sagi-Kazar	9bd5ae5197	Fix goimports	6 years ago
Mark Sagi-Kazar	367b187cf4	Fix missspell	6 years ago
Mark Sagi-Kazar	8c3dc0ca66	Remove unused code (fixed: unused, structcheck, deadcode linters)	6 years ago
Joel Speed	97ffa21262	Create separate Google connector	6 years ago
Joel Speed	c4e96dda32	Fix migration of old connector data	6 years ago
Joel Speed	d9095073c8	Unindent session updates on finalizeLogin	6 years ago
Joel Speed	19ad7daa7f	Use old ConnectorData before session.ConnectorData	6 years ago
Joel Speed	176ba709a4	Revert "Remove connectordata from other structs" This reverts commit 27f33516db343bd79b56a47ecef0fe514a35082d.	6 years ago
Joel Speed	4076eed17b	Build opts based on scope	6 years ago
Joel Speed	5c88713177	Remove connectordata from other structs	6 years ago
Joel Speed	0352258093	Update handleRefreshToken logic	6 years ago
Joel Speed	575c792156	Store most recent refresh token in offline sessions	6 years ago
serhiimakogon	b793afd375	preferred_username claim added on refresh token	6 years ago
Nándor István Krácser	0b55f121b4	Fix missing email in log message Co-Authored-By: Felix Fontein <ff@dybuster.com>	6 years ago
Nandor Kracser	c1b421fa04	add preffered_username to idToken Signed-off-by: Nandor Kracser <bonifaido@gmail.com>	6 years ago
Yannis Zarkadas	27944d4f8f	templates: add new relativeURL function Signed-off-by: Yannis Zarkadas <yanniszark@arrikto.com>	7 years ago
Yannis Zarkadas	839130f01c	handlers: change all handlers to pass down http request Signed-off-by: Yannis Zarkadas <yanniszark@arrikto.com>	7 years ago
erwinvaneyk	3e2217b3f4	Replace x/net/context with context of stdlib	7 years ago
Nandor Kracser	bd61535cb6	connector/ldap: display login error	7 years ago
Marc-André Dufresne	0dbb642f2c	Add option to always display connector selection even if there's only one	7 years ago
Marc-André Dufresne	d458e882aa	Allow arbitrary data to be passed to templates	7 years ago
Mike O	43d1a044bd	Add tests for some callback handler error conditions	7 years ago
Mike O	d03a43335e	Return HTTP 400 for invalid state parameter	7 years ago
Stephan Renatus	291cd9e01c	regenerate protobuf code Signed-off-by: Stephan Renatus <srenatus@chef.io>	7 years ago
Stephan Renatus	231e571c3c	server/api: fix logging in VerifyPassword Before: msg="api: password check failed : %vcrypto/bcrypt: hashedPassword is not the hash of the given password" After: msg="api: password check failed : crypto/bcrypt: hashedPassword is not the hash of the given password" Signed-off-by: Stephan Renatus <srenatus@chef.io>	7 years ago
Stephan Renatus	d9487e553b	*: fix some lint issues Mostly gathered these using golangci-lint's deadcode and ineffassign linters. Signed-off-by: Stephan Renatus <srenatus@chef.io>	7 years ago
Stephan Renatus	8561a66365	server/{handler,oauth2}: cleanup error returns Now, we'll return a standard error, and have the caller act upon this being an instance of authErr. Also changes the storage.AuthRequest return to a pointer, and returns nil in error cases. Signed-off-by: Stephan Renatus <srenatus@chef.io>	7 years ago
LanceH	07a77e0dac	Use connector_id param to skip directly to a specific connector	7 years ago
Tyler Cloke	dd84e73c0e	Add VerifyPassword to API It takes in an email and plain text password to verify. If it fails to find a password stored for email, it returns not_found. If it finds the password hash stored but that hash doesn't match the password passed via the API, it returns verified = false, else it returns verified = true. Co-authored-by: Alban Seurat <alban.seurat@me.com>	7 years ago
Andy Lindeman	5b66bf05c8	Fixed shadowed variable declaration	7 years ago

... 2 3 4 5 6 ...

377 Commits (8e96058e71257eb0a32e1b0a42303094dea9d8fb)