mirror/dex - dex - xhrpb gitea

Commit Graph

Author	SHA1	Message	Date
Daniel Dao	e617197871	storage/etcd: document struct tag in code This explicitly adds struct tags for etcd storage instead of implicitly depends on yaml/json config serialization.	9 years ago
Eric Chiang	3d2d92b31b	*: run kubernetes tests in travis	9 years ago
Daniel Dao	ca114f7812	storage: add etcd storage This patch adds etcd storage implementation. This should be useful in environments where - we dont want to depends on a separate, hard to maintain SQL cluster - we dont want to incur the overhead of talking to kubernetes apiservers - kubernetes is not available yet, or if kubernetes depends on dex to perform authentication and the operator would like to remove any circular dependency if possible.	9 years ago
Daniel Dao	2b13bdd12d	storage: fix list connector test The previous test doesnt actually testing ListConnectors code. For example the following pseudocode will pass the test: ``` ListConnectors() { return nil, nil } ``` Instead change to actually fetch and compare list of connectors, ordering by name	9 years ago
Ryan Phillips	0318cd99b0	add client request timeout and dialer deadline	9 years ago
Chance Zibolski	9d7b0b59bd	storage/kubernetes: Log before registering custom resources Logging before attempting to make any connection to Kubernetes is useful when the connection hangs and dex is killed before it can log any errors.	9 years ago
rithu john	d2706fcab8	storage/kubernetes: Correct the OfflineSession object CRD definition	9 years ago
rithu john	1311caf864	storage/kubernetes: add CRD support	9 years ago
rithu john	146481375e	[WIP]: add CRD support	9 years ago
rithu john	fd4f57b5f3	storage/static.go: storage backend should not explicitly lower-case email ids.	9 years ago
Eric Stroczynski	4a88d0641a	: update {S->s}irupsen/logrus	9 years ago
Kazumasa Kohtaka	cc314690f4	Avoid generating an identifer which starts with a number because it may be used as a SAML's ID attribute	9 years ago
rithu john	8c9c2518f5	server: account for dynamically changing connector object in storage.	9 years ago
rithu john	5abb4b3df6	storage/static.go: correct the error message that gets displayed.	9 years ago
rithu john	bc55b86d0d	storage: add connector object to backend storage.	9 years ago
Eric Chiang	4c39bc20ae	storage: make static storages query real storages for some actions If dex is configured with static passwords or clients, let the API still add or modify objects in the backing storage, so long as their IDs don't conflict with the static ones. List options now aggregate resources from the static list and backing storage.	9 years ago
rithu john	9e88924577	storage/conformance: update conformance tests with multiple entries per resource	9 years ago
Eric Chiang	6cb38604d9	storage/kubernetes: log INFO level if TPR already exists, not ERROR	9 years ago
Eric Chiang	0481fccd76	storage/sql: add missing WHERE statement to refresh token update	9 years ago
Eric Chiang	777eeafabc	*: update go-oidc and use standard library's context package	9 years ago
Eric Chiang	38c77e0f33	storage/kubernetes: enable HTTP/2 support	9 years ago
Eric Chiang	a7b8e52b92	storage/kubernetes: fix conflict error detection in TRP creation PR #815 fixed the Kubernetes storage implementation by correctly returning storage.ErrAlreadyExists on POST conflicts. This caused a regression in TPR creation (#822) when some, but not all, of the resources already existed. E.g. for users upgrading from old versions of dex. Fixes #822	9 years ago
Eric Chiang	1da2ae279c	storage/kubernetes: fix hash initialization bug	9 years ago
Eric Chiang	4be029c6c1	storage/kubernetes: fix kubernetes storage conformance test failures	9 years ago
rithu john	3df1db1864	storage: Surface "already exists" errors.	9 years ago
rithu john	d928ac0677	storage: Add OfflineSession object to backend storage.	9 years ago
Eric Chiang	1eda382789	server: add at_hash claim support The "at_hash" claim, which provides hash verification for the "access_token," is a required claim for implicit and hybrid flow requests. Previously we did not include it (against spec). This PR implements the "at_hash" logic and adds the claim to all responses. As a cleanup, it also moves some JOSE signing logic out of the storage package and into the server package. For details see: https://openid.net/specs/openid-connect-core-1_0.html#ImplicitIDToken	9 years ago
Eric Chiang	312ca7491e	storage: add extra fields to refresh token and update method	9 years ago
rithu john	2c03693972	storage: Add ConnectorData to storage RefreshToken.	9 years ago
Eric Chiang	fd20b213bb	storage: fix postgres timezone handling Dex's Postgres client currently uses the `timestamp` datatype for storing times. This lops of timezones with no conversion, causing times to lose locality information. We could convert all times to UTC before storing them, but this is a backward incompatible change for upgrades, since the new version of dex would still be reading times from the database with no locality. Because of this intrinsic issue that current Postgres users don't save any timezone data, we chose to treat any existing installation as corrupted and change the datatype used for times to `timestamptz`. This is a breaking change, but it seems hard to offer an alternative that's both correct and backward compatible. Additionally, an internal flag has been added to SQL flavors, `supportsTimezones`. This allows us to handle SQLite3, which doesn't support timezones, while still storing timezones in other flavors. Flavors that don't support timezones are explicitly converted to UTC.	9 years ago
Eric Chiang	fe196864c0	*: fix comment typos found with github.com/client9/misspell	9 years ago
rithu john	9949a1313c	server: modify error messages to use logrus.	9 years ago
rithu john	2e22a948cf	cmd/dex: add logging config and serve logger for different modules.	9 years ago
Eric Chiang	879e018f74	storage/kubernetes: remove unused method	9 years ago
rithu john	ee9738d663	api: adding a gRPC call for listing passwords.	9 years ago
rithu john	19c22807a7	api: adding ListPasswords() method to the storage interface.	9 years ago
Eric Chiang	aa7f304bc1	: switch to github.com/ghodss/yaml for more consistent YAML parsing ghodss/yaml converts from YAML to JSON before attempting to unmarshal. This allows us to: Get the correct behavor when decoding base64'd []byte slices. * Use json.RawMessage. Not have to support extravagant YAML features. * Let our structs use `json:` tags	10 years ago
rithu leena john	ed7e943406	api: add gRPC endpoints for creating, updating and deleting passwords	10 years ago
Eric Chiang	786e12b15e	storage/conformance: expand transaction test suite	10 years ago
Eric Chiang	52e2a1668c	storage/sql: use isolation level "serializable" for transactions	10 years ago
Eric Chiang	c0aa63ac97	storage: update godocs	10 years ago
Eric Chiang	d7a75c5b5d	storage/kubernetes: allow arbitrary client IDs Use a hash algorithm to match client IDs to Kubernetes object names. Because cryptographic hash algorithms produce sums larger than a Kubernetes name can fit, a non-cryptographic hash is used instead. Hash collisions are checked and result in errors.	10 years ago
Eric Chiang	4ab78d0ded	storage/kubernetes: run transactional conformance tests	10 years ago
Eric Chiang	5720ecf412	storage/conformance: add tests for transactional guarantees	10 years ago
rithu leena john	9de16f2c45	storage/kubernetes: set CurrentContext when the Kubeconfig file contains only one context	10 years ago
Eric Chiang	bc16de0b58	storage/kubernetes: don't guess the kubeconfig location and change test env Using the default KUBECONFIG environment variable to indicate that the Kubernetes tests should be run lead to cases where developers accidentally ran the tests. This has now been changed to "DEX_KUBECONFIG" and documentation hsa been added detailing how to run these tests. Additionally, no other storage reads environment variables for its normal configuration (outside of tests) so the Kubernetes storage no longer does. Overall, be less surprising.	10 years ago
Eric Chiang	138ff96c00	storage/kubernetes: don't automatically print errors on bad HTTP status codes These status codes spam the error logs for events like key rotation and third party resource creation. In these cases "bad" status codes are expected and shouldn't be automatically printed.	10 years ago
Eric Chiang	8c9c5160b6	storage/kubernetes: guess namespace from the service account token The in cluster kubernetes client currently requires using the downward API to determine its namespace. However this value can be determine by inspecting the service account token mounted into the pod. As a fallback, use this to guess the current namespace.	10 years ago
Eric Chiang	fe320c1928	storage/sql: fix typo in keys query	10 years ago
Eric Chiang	0a3aabc8ff	storage/conformace: add conformance tests for keys	10 years ago

1 2

90 Commits (b746ab4975262bbba6cf5d4792b82875f2bee916)