Mark Sagi-Kazar
a050f3228a
feat: add DEX_FRONTEND_DIR env var for setting the frontend dir
...
Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>
5 years ago
Mark Sagi-Kazar
3b80d480e5
feat!: move web assets to /srv in Dockerfile
...
Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>
5 years ago
Mark Sagi-Kazar
d1e8b085e2
feat: use embedded assets by default
...
Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>
5 years ago
Mark Sagi-Kazar
78fcac7568
feat: embed web assets
...
Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>
5 years ago
Márk Sági-Kazár
3f0ca9b361
Merge pull request #1416 from concourse/pr/http-filesystem
...
Use http.FileSystem for web assets
5 years ago
Rui Yang
2f28fc7451
default to ./web when Dir and WebFS are not set
...
5 years ago
Rui Yang
4e569024fd
use go 1.16 new package io/fs
...
Unify the interface for reading web statics. Now it could read an
OS directory or get the content on live
One could use
//go:embed static
var webFiles embed.FS
anywhere and config dex server to take the file system by setting
WebConfig{WebFS: webFiles}
Signed-off-by: Rui Yang <ruiya@vmware.com>
Co-authored-by: Aidan Oldershaw <aoldershaw@pivotal.io>
5 years ago
Rui Yang
7b50cbf0ac
use pkger for embedding static contents
...
Co-authored-by: Vikram Yadav <vyadav@pivotal.io>
Signed-off-by: Rui Yang <ruiya@vmware.com>
5 years ago
Rui Yang
1eab25f89f
use web host url for asset hosting
...
5 years ago
Rui Yang
10e9054811
Use http.FileSystem for web assets
...
5 years ago
Rui Yang
d658c24e8f
add dex config flag for enabling client secret encryption
...
* if enabled, it will make sure client secret is bcrypted correctly
* if not, it falls back to old behaviour that allowing empty client
secret and comparing plain text, though now it will do
ConstantTimeCompare to avoid a timing attack.
So in either way it should provide more secure of client secret
verification.
Co-authored-by: Alex Surraci <suraci.alex@gmail.com>
Signed-off-by: Rui Yang <ruiya@vmware.com>
5 years ago
Josh Winters
ec6f3a2f19
use bcrypt when comparing client secrets
...
5 years ago
Márk Sági-Kazár
a1adf86e53
Merge pull request #2053 from dexidp/fix-gomplate-slim
...
fix: stop using slim version of gomplate
5 years ago
Mark Sagi-Kazar
27dfbc0344
fix: stop using slim version of gomplate
...
See hairyhenderson/gomplate#1085
Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>
5 years ago
dependabot[bot]
83ad7bc4e3
Merge pull request #2037 from dexidp/dependabot/docker/golang-1.16.2-alpine3.13
5 years ago
dependabot[bot]
8fee3cd212
build(deps): bump golang from 1.16.1-alpine3.13 to 1.16.2-alpine3.13
...
Bumps golang from 1.16.1-alpine3.13 to 1.16.2-alpine3.13.
Signed-off-by: dependabot[bot] <support@github.com>
5 years ago
m.nabokikh
6be747142a
chore: add keystone connector icon and bump tests dependencies
...
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
5 years ago
dependabot[bot]
dab9f98a15
Merge pull request #2035 from dexidp/dependabot/docker/golang-1.16.1-alpine3.13
5 years ago
dependabot[bot]
d93a238a42
build(deps): bump golang from 1.16.0-alpine3.13 to 1.16.1-alpine3.13
...
Bumps golang from 1.16.0-alpine3.13 to 1.16.1-alpine3.13.
Signed-off-by: dependabot[bot] <support@github.com>
5 years ago
Márk Sági-Kazár
3ae53f7434
Make OpenShift an alpha connector
...
I'm not sure why this was ever marked as stable.
5 years ago
dependabot[bot]
b9ff4dd9ae
Merge pull request #2032 from dexidp/dependabot/go_modules/github.com/sirupsen/logrus-1.8.1
5 years ago
dependabot[bot]
04b2f655e6
build(deps): bump github.com/sirupsen/logrus from 1.8.0 to 1.8.1
...
Bumps [github.com/sirupsen/logrus](https://github.com/sirupsen/logrus ) from 1.8.0 to 1.8.1.
- [Release notes](https://github.com/sirupsen/logrus/releases )
- [Changelog](https://github.com/sirupsen/logrus/blob/master/CHANGELOG.md )
- [Commits](https://github.com/sirupsen/logrus/compare/v1.8.0...v1.8.1 )
Signed-off-by: dependabot[bot] <support@github.com>
5 years ago
Maksim Nabokikh
568fc06520
Update server/refreshhandlers.go
...
Co-authored-by: Joel Speed <Joel.speed@hotmail.co.uk>
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
5 years ago
dependabot[bot]
72d11017ce
Merge pull request #2030 from dexidp/dependabot/go_modules/github.com/lib/pq-1.10.0
5 years ago
dependabot[bot]
08647537e2
Bump github.com/lib/pq from 1.9.0 to 1.10.0
...
Bumps [github.com/lib/pq](https://github.com/lib/pq ) from 1.9.0 to 1.10.0.
- [Release notes](https://github.com/lib/pq/releases )
- [Commits](https://github.com/lib/pq/compare/v1.9.0...v1.10.0 )
Signed-off-by: dependabot[bot] <support@github.com>
5 years ago
Márk Sági-Kazár
f7d1405cfd
Merge pull request #2019 from dexidp/refactor-run-groups
...
Refactor run groups
5 years ago
Mark Sagi-Kazar
24a1103f11
refactor: rename gr to group
...
Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>
5 years ago
Mark Sagi-Kazar
9cffca70f2
refactor: relocate run group initialization
...
Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>
5 years ago
m.nabokikh
3bd0e91a68
Make /device/token deprecation warning more concise
...
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
5 years ago
m.nabokikh
9ed5cc00cf
Add deprecation warning for /device/token endpoint
...
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
5 years ago
m.nabokikh
1211a86d58
fix: use /token endpoint to get tokens with device flow
...
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
5 years ago
Márk Sági-Kazár
3c5a631ce3
Merge pull request #2009 from flant/skip-ldap-tests
...
fix: do not run LDAP tests locally by default
5 years ago
Márk Sági-Kazár
c73057f93d
Merge pull request #2006 from flant/update-kubernetes-section-in-readme
...
chore: update Kubernetes section in README
5 years ago
m.nabokikh
84a07a7805
Do not run LDAP tests if DEX_LDAP_HOST is not set
...
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
5 years ago
m.nabokikh
796d4c1e6b
Remove tectonic links from the README
...
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
5 years ago
dependabot[bot]
c166257cf4
Merge pull request #2007 from dexidp/dependabot/docker/alpine-3.13.2
5 years ago
dependabot[bot]
ff60ac0c4f
Merge pull request #2008 from dexidp/dependabot/go_modules/github.com/sirupsen/logrus-1.8.0
5 years ago
m.nabokikh
1f2771b57e
fix: do not run LDAP tests locally by default
...
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
5 years ago
Steffen Pøhner Henriksen
0f68fadb9a
Allow public clients created with API to have no client_secret ( #1871 )
...
Signed-off-by: Steffen Pøhner Henriksen <str3sses@gmail.com>
5 years ago
dependabot[bot]
b4238886b3
chore(deps): bump github.com/sirupsen/logrus from 1.7.1 to 1.8.0
...
Bumps [github.com/sirupsen/logrus](https://github.com/sirupsen/logrus ) from 1.7.1 to 1.8.0.
- [Release notes](https://github.com/sirupsen/logrus/releases )
- [Changelog](https://github.com/sirupsen/logrus/blob/master/CHANGELOG.md )
- [Commits](https://github.com/sirupsen/logrus/compare/v1.7.1...v1.8.0 )
Signed-off-by: dependabot[bot] <support@github.com>
5 years ago
dependabot[bot]
9162eace7a
chore(deps): bump alpine from 3.13.1 to 3.13.2
...
Bumps alpine from 3.13.1 to 3.13.2.
Signed-off-by: dependabot[bot] <support@github.com>
5 years ago
m.nabokikh
df86a1faca
chore: update Kubernetes section in README
...
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
5 years ago
dependabot[bot]
86ea49173c
Merge pull request #2002 from dexidp/dependabot/go_modules/github.com/sirupsen/logrus-1.7.1
5 years ago
Márk Sági-Kazár
08a10b063f
Merge pull request #2003 from dexidp/go1.16
...
Upgrade Go to 1.16
5 years ago
Mark Sagi-Kazar
809ccaf4da
build: upgrade Go to 1.16
...
Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>
5 years ago
dependabot[bot]
02cf3db178
chore(deps): bump github.com/sirupsen/logrus from 1.7.0 to 1.7.1
...
Bumps [github.com/sirupsen/logrus](https://github.com/sirupsen/logrus ) from 1.7.0 to 1.7.1.
- [Release notes](https://github.com/sirupsen/logrus/releases )
- [Changelog](https://github.com/sirupsen/logrus/blob/master/CHANGELOG.md )
- [Commits](https://github.com/sirupsen/logrus/compare/v1.7.0...v1.7.1 )
Signed-off-by: dependabot[bot] <support@github.com>
5 years ago
Joel Speed
95d8a0cccb
Merge pull request #1997 from dexidp/rewrite-ldap-tests
...
Rewrite LDAP tests to use a single server instance
5 years ago
Mark Sagi-Kazar
6f70272bc3
test(connector/ldap): remove ldap test gate
...
Now that the ldap tests don't create containers on the fly
they can run the same way as other integration tests.
Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>
5 years ago
Mark Sagi-Kazar
f11db50369
test(connector/ldap): rewrite tests to use a single server instance
...
Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>
5 years ago
dependabot[bot]
447841f513
Merge pull request #1986 from dexidp/dependabot/go_modules/github.com/spf13/cobra-1.1.3
5 years ago