Ivan Zviagintsev
9e377718dc
feat: add name and emailVerified fields for static passwords ( #4526 )
...
Signed-off-by: Ivan Zvyagintsev <ivan.zvyagintsev@flant.com>
3 months ago
Ivan Zviagintsev
d1b2722e39
feat: support groups and preferred_username for staticPasswords ( #4456 )
...
Signed-off-by: Ivan Zvyagintsev <ivan.zvyagintsev@flant.com>
4 months ago
Mark Sagi-Kazar
e230d9426d
test: use new Go features in tests
...
Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>
9 months ago
Bob Maertz
ad31b5d6f7
Passing context storage ( #3941 )
...
Signed-off-by: Bob Maertz <1771054+bobmaertz@users.noreply.github.com>
1 year ago
Maksim Nabokikh
bb985ca0ea
Create offline sessions if approval is skipped ( #3828 )
...
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
1 year ago
Romain Caire
8755308759
[RFC7662] Add introspect endpoint to introspect access & refresh token ( #3404 )
...
Signed-off-by: Romain Caire <super.cairos@gmail.com>
2 years ago
Ferenc Fabian
2377b0a0cd
Add context to storage's Create endpoints ( #2935 )
...
* Initial commit
Signed-off-by: PumpkinSeed <qwer.kocka@gmail.com>
* Finish the syntex fixes
Signed-off-by: PumpkinSeed <qwer.kocka@gmail.com>
* Add fixes after running the tests
Signed-off-by: PumpkinSeed <qwer.kocka@gmail.com>
* Change background context to request context
Signed-off-by: PumpkinSeed <qwer.kocka@gmail.com>
---------
Signed-off-by: PumpkinSeed <qwer.kocka@gmail.com>
2 years ago
MM53
efc2fdb102
Store offline sessions only if they were requested by the user ( #3125 )
...
Signed-off-by: MM53 <2821Signed-off-by: MM53 <28218664+MM53@users.noreply.github.com>
3 years ago
Sean Liao
dcf7b18510
OAuth 2.0 Token Exchange ( #2806 )
...
Signed-off-by: Sean Liao <sean+git@liao.dev>
Co-authored-by: Maksim Nabokikh <max.nabokih@gmail.com>
3 years ago
Maksim Nabokikh
28aaa8f511
fix: Do not skip approval screen by default ( #2897 )
...
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
3 years ago
Maksim Nabokikh
7016a82589
fix: return 401 if password is invalid ( #2796 )
...
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
3 years ago
nobuyo
9f70c7da43
Add test for skipping approval
...
Signed-off-by: nobuyo <longzechangsheng@gmail.com>
3 years ago
Bob Callaway
8fd69c16f5
correctly handle path escaping for connector IDs
...
Signed-off-by: Bob Callaway <bob.callaway@gmail.com>
5 years ago
Henning
138364ceeb
handlePasswordGrant: insert connectorData into OfflineSession ( #2199 )
...
* handlePasswordGrant: insert connectorData into OfflineSession
This change will insert the ConnectorData from the initial Login
into the OfflineSession, as already done in handlePasswordLogin.
Signed-off-by: Henning Surmeier <h.surmeier@mittwald.de>
5 years ago
Mark Sagi-Kazar
0bef10ef80
chore(deps): update gosundheit
...
Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>
5 years ago
Alastair Houghton
cd0c24ec4d
fix: add an extra endpoint to avoid refresh generating AuthRequests.
...
By adding an extra endpoint and a redirect, we can avoid a situation
where it's trivially easy to generate a large number of AuthRequests
by hitting F5/refresh in the browser.
Signed-off-by: Alastair Houghton <alastair@alastairs-place.net>
5 years ago
Alastair Houghton
030a6459d6
fix: reinstate TestHandleAuthCode.
...
Reinstating this test as it shouldn't have been removed.
Signed-off-by: Alastair Houghton <alastair@alastairs-place.net>
5 years ago
Alastair Houghton
88025b3d7c
fix: remove some additional dependencies.
...
Accidentally added some of these back during merge.
Signed-off-by: Alastair Houghton <alastair@alastairs-place.net>
5 years ago
Alastair Houghton
cdbb5dd94d
fix: defer creation of auth request.
...
Rather than creating the auth request when the user hits /auth, pass
the arguments through to /auth/{connector} and have the auth request
created there. This prevents a database error when using the "Select
another login method" link, and also avoids a few other error cases.
Fixes #1849 , #646 .
Signed-off-by: Alastair Houghton <alastair@alastairs-place.net>
5 years ago
Rui Yang
4e569024fd
use go 1.16 new package io/fs
...
Unify the interface for reading web statics. Now it could read an
OS directory or get the content on live
One could use
//go:embed static
var webFiles embed.FS
anywhere and config dex server to take the file system by setting
WebConfig{WebFS: webFiles}
Signed-off-by: Rui Yang <ruiya@vmware.com>
Co-authored-by: Aidan Oldershaw <aoldershaw@pivotal.io>
5 years ago
Rui Yang
7b50cbf0ac
use pkger for embedding static contents
...
Co-authored-by: Vikram Yadav <vyadav@pivotal.io>
Signed-off-by: Rui Yang <ruiya@vmware.com>
5 years ago
Rui Yang
10e9054811
Use http.FileSystem for web assets
...
5 years ago
Mark Sagi-Kazar
316da70545
refactor: use new health checker
...
Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>
5 years ago
m.nabokikh
d6b5105d9b
fix: check code presence
...
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
5 years ago
m.nabokikh
123185c456
fix: return invalid_grant error for invalid or expired auth codes
...
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
5 years ago
Josh Soref
5d659a108c
spelling: templates
...
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
5 years ago
Tomasz Kleczek
b1311baa3c
abort connector login if connector was already set #1707
...
Signed-off-by: Tomasz Kleczek <tomasz.kleczek@gmail.com>
6 years ago
Mark Sagi-Kazar
f141f2133b
Fix whitespace
6 years ago
Mike O
43d1a044bd
Add tests for some callback handler error conditions
7 years ago
Eric Chiang
8935a1479c
server: update health check endpoint to query storage periodically
...
Instead of querying the storage every time a health check is performed
query it periodically and save the result.
7 years ago
Eric Chiang
777eeafabc
*: update go-oidc and use standard library's context package
9 years ago
Simon HEGE
415a68f977
Allow CORS on keys and token endpoints
9 years ago
Simon HEGE
b4c47910e4
Allow CORS on discovery endpoint
9 years ago
Eric Chiang
96440e4cc5
*: fix linting
10 years ago
Eric Chiang
4296604f11
{cmd,server}: move garbage collection logic to server
10 years ago
Eric Chiang
9243a092cf
server: add a test for the health check handler
10 years ago
Eric Chiang
cab271f304
initial commit
10 years ago