Maksim Nabokikh
d78d744468
feat: Disallow unknown config fields ( #4531 )
...
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
3 weeks ago
Michiel De Backker
a6962a8ba4
fix(mysql): quote `groups` reserved word in query replacer ( #4580 )
...
`groups` is a reserved word in MySQL >= 8.0.2, causing migration 13
to fail with a syntax error on `ALTER TABLE password ADD COLUMN groups`.
Fixes #4579
Signed-off-by: Michiel De Backker <mail@backkem.me>
3 weeks ago
Maksim Nabokikh
9bee809252
feat(crd): add CRD handling behavior and configuration options ( #4543 )
...
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
4 weeks ago
Maksim Nabokikh
785033767c
feat: refactor signer configuration with local and vault options ( #4532 )
...
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
4 weeks ago
Ivan Zviagintsev
9e377718dc
feat: add name and emailVerified fields for static passwords ( #4526 )
...
Signed-off-by: Ivan Zvyagintsev <ivan.zvyagintsev@flant.com>
1 month ago
Ivan Zviagintsev
d1b2722e39
feat: support groups and preferred_username for staticPasswords ( #4456 )
...
Signed-off-by: Ivan Zvyagintsev <ivan.zvyagintsev@flant.com>
2 months ago
Rene Dekker
9355759813
fix(storage/kubernetes): Only wrap IPv6 addresses in brackets ( #4388 )
...
The Kubernetes client code was wrapping all IP addresses (both IPv4 and
IPv6) in square brackets when constructing the API server URL. This was
based on an incorrect assumption that IPv4 addresses in brackets are valid
in a URL.
Recent versions of Go (1.25.2 and later) have stricter URL parsing
that conforms to RFC 3986. This causes a failure when running Dex in a
Kubernetes environment where the KUBERNETES_SERVICE_HOST is an IPv4
address, leading to the error "invalid IPv6 host".
This commit changes the logic to only wrap IPv6 addresses in square
brackets. It uses `ip.To4() == nil` to reliably detect if an IP address
is IPv6 before wrapping it. This ensures that URLs are correctly
formatted for both IPv4 and IPv6 addresses, fixing the incompatibility
with newer Go versions.
Signed-off-by: Rene Dekker <rene@tigera.io>
4 months ago
Maksim Nabokikh
7e2225c0e6
Do not wrap Kubernetes Address in brackets ( #4363 )
...
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
5 months ago
Mark Sagi-Kazar
26accba6b1
ci: update linter
...
Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>
7 months ago
Mark Sagi-Kazar
e230d9426d
test: use new Go features in tests
...
Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>
7 months ago
Mark Sagi-Kazar
1b548e853d
chore: update ent generated code
...
Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>
7 months ago
Maksim Nabokikh
5f91d4bed5
Allow compilation without CGO ( #4266 )
...
`ent` driver gives a normal error if the binary is compiled without CGO, but with our custom SQL driver Dex just fails to compile.
```
# github.com/dexidp/dex/cmd/dex
cmd/dex/config.go:273:26: undefined: sql.SQLite3
cmd/dex/config.go:315:43: undefined: sql.SQLite3
```
Signed-off-by: Maksim Nabokikh <maksim.nabokikh@flant.com>
Signed-off-by: Maksim Nabokikh <max.nabokih@gmail.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
7 months ago
Mark Sagi-Kazar
385e63d4d4
chore: update dependencies
...
Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>
10 months ago
Oleksandr Redko
9891daa585
refactor: simplify tests by using slog.DiscardHandler ( #4058 )
...
Signed-off-by: Oleksandr Redko <oleksandr.red+github@gmail.com>
12 months ago
Maksim Nabokikh
a4449010a4
k8s storage: Request only one object to check if API exists ( #4027 )
...
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
1 year ago
Mark Sagi-Kazar
03e18fd446
build: add ent as a tool to go.mod
...
Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>
1 year ago
Mark Sagi-Kazar
3ab44d6d9a
build: update ent to 0.14.2
...
Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>
1 year ago
Bob Maertz
ad31b5d6f7
Passing context storage ( #3941 )
...
Signed-off-by: Bob Maertz <1771054+bobmaertz@users.noreply.github.com>
1 year ago
Mark Sagi-Kazar
3f7135b902
fix: disable tls in tests
...
Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>
1 year ago
Maksim Nabokikh
9986b27b76
Bump ent v0.14.0 ( #3670 )
...
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
2 years ago
Sean Liao
0b6a78397e
use slog for structured logging ( #3502 )
...
Signed-off-by: Sean Liao <sean+git@liao.dev>
2 years ago
Maksim Nabokikh
347bebafad
Revert autogenerated columnChecker description ( #3528 )
...
Signed-off-by: Maksim Nabokikh <maksim.nabokikh@flant.com>
2 years ago
mountcount
c6fa45568b
chore: fix function names in comment ( #3464 )
...
Signed-off-by: mountcount <cuimoman@outlook.com>
2 years ago
Denys Romanenko
7225198ae7
Update max length of kubernetes object to fit kubernetes policy ( #3439 )
...
Signed-off-by: Denys Romanenko <65756796+RomanenkoDenys@users.noreply.github.com>
Signed-off-by: Maksim Nabokikh <max.nabokih@gmail.com>
Co-authored-by: Maksim Nabokikh <max.nabokih@gmail.com>
2 years ago
Maksim Nabokikh
60ddd188c0
Update go-jose to v4.0.1 ( #3409 )
...
Signed-off-by: Matthias Loibl <mail@matthiasloibl.com>
Signed-off-by: Maksim Nabokikh <maksim.nabokikh@flant.com>
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
Co-authored-by: Matthias Loibl <mail@matthiasloibl.com>
2 years ago
Mark Sagi-Kazar
3905389510
chore: update ent
...
Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>
2 years ago
Ferenc Fabian
2377b0a0cd
Add context to storage's Create endpoints ( #2935 )
...
* Initial commit
Signed-off-by: PumpkinSeed <qwer.kocka@gmail.com>
* Finish the syntex fixes
Signed-off-by: PumpkinSeed <qwer.kocka@gmail.com>
* Add fixes after running the tests
Signed-off-by: PumpkinSeed <qwer.kocka@gmail.com>
* Change background context to request context
Signed-off-by: PumpkinSeed <qwer.kocka@gmail.com>
---------
Signed-off-by: PumpkinSeed <qwer.kocka@gmail.com>
2 years ago
Maksim Nabokikh
85d4261aa9
Bump dependencies ent v0.12.5, protobuf v1.32.0 ( #3249 )
...
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
2 years ago
Maksim Nabokikh
3b78752ab1
Bump ent (v0.12.4) and example app dependencies ( #3166 )
...
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
2 years ago
MM53
a2d7d8dae2
Fix etcd device requests ( #3119 )
...
Signed-off-by: MM53 <28218664+MM53@users.noreply.github.com>
2 years ago
Mark Sagi-Kazar
902f07c3d2
chore: regenerate code
...
Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>
3 years ago
Josh Soref
a1a05c4a65
spelling: nonexistent
...
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>
3 years ago
Josh Soref
12d043c7d9
spelling: into
...
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>
3 years ago
Josh Soref
255d5ecfb7
spelling: characters
...
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>
3 years ago
Mark Sagi-Kazar
bbed8a056a
chore: regenerate ent
...
Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>
3 years ago
m.nabokikh
96637cf0f7
feat: Bump dependencies and Makefile refactoring
...
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
3 years ago
Maksim Nabokikh
5d7850eae5
feat: Verify generated files ( #2833 )
...
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
3 years ago
Maksim Nabokikh
e2ce0b6fca
chore: Add a comment about config/email JSON tag bug ( #2830 )
...
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
3 years ago
Daniel Lipovetsky
07d7913049
chore: Upgrade golangci-lint to v1.50.1 from v1.46.0 ( #2790 )
3 years ago
Maksim Nabokikh
1e116f66ca
fix: prevent server side request forgery using Kubernetes storage ( #2479 )
...
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
3 years ago
m.nabokikh
4b5f1d5289
fix: refresh token only once for all concurrent requests
...
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
4 years ago
Bob Callaway
07e0904923
fix: supply HMACKey in test case ( #2683 )
...
Signed-off-by: Bob Callaway <bcallaway@google.com>
4 years ago
Bob Callaway
793bcc4b61
address review comments
...
Signed-off-by: Bob Callaway <bcallaway@google.com>
4 years ago
Maksim Nabokikh
7efe1e28a8
chore: Bump ent to 0.11.2 ( #2640 )
...
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
4 years ago
Bob Callaway
fcfbb1ecb0
Add HMAC protection on /approval endpoint
...
Signed-off-by: Bob Callaway <bcallaway@google.com>
4 years ago
Bob Callaway
83e2df821e
add PKCE support to device code flow ( #2575 )
...
Signed-off-by: Bob Callaway <bobcallaway@users.noreply.github.com>
4 years ago
Michael Kelly
9079c31637
Fix formatting
...
Signed-off-by: Michael Kelly <mkelly@arista.com>
4 years ago
Michael Kelly
a51d12056f
Tweaks based on review comments
...
Signed-off-by: Michael Kelly <mkelly@arista.com>
4 years ago
Michael Kelly
6c99a9b99d
s/getUrl/getURL
...
golang prefers URL not Url
Signed-off-by: Michael Kelly <mkelly@arista.com>
4 years ago
Mark Sagi-Kazar
a02f2e8fac
chore: fix lint violations
...
Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>
4 years ago