mirror/dex - dex - xhrpb gitea

Commit Graph

Author	SHA1	Message	Date
rithu leena john	aae9bb6477	Merge pull request #922 from gambtho/patch-1 Update kubernetes.md	9 years ago
Tom Gamble	0edd0b2fb4	Update kubernetes.md fixed typo	9 years ago
Eric Chiang	47f48658c2	Merge pull request #917 from ericchiang/add-using-dex-doc Documentation: add a doc describing how to use dex	9 years ago
Eric Chiang	a4cb57ab5d	Documentation: add a doc describing how to use dex	9 years ago
rithu leena john	4507e99ae3	Merge pull request #919 from ericchiang/update-maintainers *: update maintainers	9 years ago
rithu leena john	5c56fb76df	Merge pull request #909 from AirHelp/master Dex on Kubernetes with RBAC authorization - documentation updated	9 years ago
Eric Chiang	49e05b95c0	*: update maintainers	9 years ago
Eric Chiang	2b8caf9b39	Merge pull request #906 from ericchiang/fix-saml-test connector/saml/testdata: fix bad status test case	9 years ago
Eric Chiang	2edfec5d45	Merge pull request #916 from ericchiang/readme-security-diclosure README: add section about reporting security vulnerabilities	9 years ago
Eric Chiang	a12d2f85a8	README: add section about reporting security vulnerabilities It was pointed out by @davidillsley that we don't point this out anywhere in our docs.	9 years ago
rithu leena john	521dbff7cf	Merge pull request #912 from zhuguihua/fix_typo Fix two typos	9 years ago
zhuguihua	4e99ec3eeb	Fix two typos Signed-off-by: zhuguihua <zhuguihua@cmss.chinamobile.com> Change storace to storage in cmd/dex/config.go, change userSearch to groupSearch in connector/ldap/ldap.go	9 years ago
Eric Chiang	5859fe1091	Merge pull request #910 from ericchiang/update-grpc *: update grpc and correct protobuf generation	9 years ago
Eric Chiang	ba1660ae1f	*: revendor and regenerate protobuf files	9 years ago
Eric Chiang	ef376b9c69	*: update grpc and correct protobuf generation Turns out that manually setting PATH in the Makefile doesn't work so we've been using the protobuf plugins installed on the host. Fix this by specifying plugins by path.	9 years ago
Filip Haftek	2e10e5a9b1	Merge pull request #1 from AirHelp/dex_on_k8s_rbac_doc Updated documentation for dex on k8s when RBAC authorization is used	9 years ago
Filip	57aa32562b	Updated documentation for dex on k8s when RBAC authorization is used	9 years ago
Eric Chiang	e609de5018	Merge pull request #908 from ericchiang/start-tls connector/ldap: support the StartTLS flow for secure connections	9 years ago
Eric Chiang	74f5eaf47e	connector/ldap: support the StartTLS flow for secure connections When connecting to an LDAP server, there are three ways to connect: 1. Insecurely through port 389 (LDAP). 2. Securely through port 696 (LDAPS). 3. Insecurely through port 389 then negotiate TLS (StartTLS). This PR adds support for the 3rd flow, letting dex connect to the standard LDAP port then negotiating TLS through the LDAP protocol itself. See a writeup here: http://www.openldap.org/faq/data/cache/185.html	9 years ago
Eric Chiang	00b5c99ffc	connector/saml/testdata: fix bad status test case Notice this when inspecting the code coverage results. For some reason this test wasn't triggering the bad status code path, maybe due to signature validation. Removing the comment fixed the code coverage.	9 years ago
rithu leena john	9b0af83604	Merge pull request #905 from rithujohn191/error-msg server/rotation.go: avoid displaying the "keys already rotated" error	9 years ago
Eric Chiang	3d7b1477e7	Merge pull request #903 from ericchiang/ldap-groups-on-user connector/ldap: fix case where groups are listed on the user entity	9 years ago
rithu john	dd1e901dd9	server/rotation.go: avoid displaying the "keys already rotated" error	9 years ago
Eric Chiang	c3cafc8f39	Merge pull request #902 from ericchiang/saml-stable *: promote SAML to stable	9 years ago
Eric Chiang	5f377f07d4	*: promote SAML to stable This means we no longer refer to it as "experimental" and wont make breaking changes.	9 years ago
rithu leena john	d4274eb0ff	Merge pull request #901 from rithujohn191/github-api connector/github: add support for github enterprise.	9 years ago
rithu leena john	43ad9cc37c	Merge pull request #904 from ericchiang/add-gitlab-to-readme *: add GitLab connector to README	9 years ago
rithu john	76b9eb1db9	connector/github: add support for github enterprise.	9 years ago
Eric Chiang	cf089025ae	*: add GitLab connector to README	9 years ago
Eric Chiang	97813ff4fc	connector/ldap: fix case where groups are listed on the user entity Support schemas that determine membership by having fields on the user entity, instead of listing users on a groups entity. E.g. the following schema is now supported when it wasn't previously: cn=eric,cn=user,dn=exapmle,dn=com objectClass=myPerson cn: eric uid: eric email: eric@example.com memberOf: foo memberOf: bar cn=foo,cn=group,dn=exapmle,dn=com objectClass=myGroup cn: foo cn=bar,cn=group,dn=exapmle,dn=com objectClass=myGroup cn: bar	9 years ago
Eric Chiang	7395f05e95	Merge pull request #900 from ericchiang/ldap-tests connector/ldap: add LDAP integration tests	9 years ago
Eric Chiang	b8ba59d7f6	*: run LDAP tests in travis	9 years ago
Eric Chiang	0ac11d93e6	connector/ldap/testdata: add LDAP schema files	9 years ago
Eric Chiang	4a93b55c8b	connector/ldap: add LDAP integration tests	9 years ago
Eric Chiang	943253fece	Merge pull request #898 from ericchiang/saml-cleanup connector/saml: clean up SAML verification logic and comments	9 years ago
Eric Chiang	362e0798a4	connector/saml: clean up SAML verification logic and comments	9 years ago
Eric Chiang	258ec4ff4b	Merge pull request #897 from Calpicow/issuer_typo Fix entityIssuer -> ssoIssuer typo	9 years ago
Phu Kieu	bd754e2b2d	Fix entityIssuer -> ssoIssuer typo	9 years ago
Eric Chiang	53acaa9e7c	Merge pull request #896 from Calpicow/audience_validate_fix Validate audience with entityIssuer if present, use redirectURI otherwise	9 years ago
Phu Kieu	47897f73fa	Validate audience with entityIssuer if present, use redirectURI otherwise	9 years ago
Eric Chiang	40f0265ab4	Merge pull request #885 from Calpicow/saml_issuer_fix Add ssoIssuer to fix Response issuer checking	9 years ago
Phu Kieu	8c0eb67ecd	Update documentation	9 years ago
Phu Kieu	217b5ca2c7	Add ssoIssuer to fix Response issuer checking Rename issuer to entityIssuer	9 years ago
Eric Chiang	207d20777b	Merge pull request #893 from ericchiang/fix-saml-validation connector/saml: fix validation bug with multiple Assertion elements	9 years ago
Eric Chiang	a97cffcd52	connector/saml: refactor tests and add self-signed responses Introduces SAML tests which execute full response processing and compare user attributes. tesdata now includes a full, self-signed CA and documents signed using xmlsec1. Adds deprication notices to existing tests, but don't remove them since they still provide coverage.	9 years ago
Eric Chiang	e0709dc2ac	connector/saml: fix validation bug with multiple Assertion elements When a SAML response provided multiple Assertion elements, only the first one is checked for a valid signature. If the Assertion is verified, the original Assertion is removed and the canonicalized version is prepended to the Response. However, if there were multiple assertions, the second assertion could end up first in the list of Assertions, even if it was unsigned. For example this: <Response> <!-- Response unsigned. According to SAML spec must check assertion signature. --> <Assertion> <Signature> <!-- Correrctly signed assertion --> </Signature> </Assertion> <Assertion> <!-- Unsigned assertion inserted by attacker--> </Assertion> </Response> could be verified then re-ordered to the following: <Response> <!-- Response unsigned. According to SAML spec must check assertion signature. --> <Assertion> <!-- Unsigned assertion inserted by attacker--> </Assertion> <Assertion> <!-- Canonicalized, correrctly signed assertion --> </Assertion> </Response> Fix this by removing all unverified child elements of the Response, not just the original assertion.	9 years ago
Lucas Servén	a7d443ea2b	Merge pull request #891 from squat/garbage_log_info server/server.go: make successful garbage collection log at info level	9 years ago
Lucas Serven	f3d9bd5008	server/server.go: make successful garbage collection log at info level	9 years ago
rithu leena john	f4865a354c	Merge pull request #886 from rithujohn191/error-msg-update storage/static.go: correct the error message that gets displayed.	9 years ago
rithu john	5abb4b3df6	storage/static.go: correct the error message that gets displayed.	9 years ago

1 2 3 4 5 ...

516 Commits (aae9bb64778a98700488aa185c623eafeafe6a63) All Branches Search

516 Commits (aae9bb64778a98700488aa185c623eafeafe6a63)

All Branches