Kazumasa Kohtaka
cc314690f4
Avoid generating an identifer which starts with a number because it may be used as a SAML's ID attribute
9 years ago
rithu leena john
6f2af269a1
Merge pull request #980 from ericchiang/implicit-flow-config-example
...
examples: document explicit flow in example config
9 years ago
Eric Chiang
c1a7285711
examples: document explicit flow in example config
9 years ago
rithu leena john
92a988e4cc
Merge pull request #977 from Zakjholt/patch-1
...
Update using-dex.md
9 years ago
rithu leena john
842bd0ef00
Merge pull request #978 from Zakjholt/patch-2
...
Update using-dex.md
9 years ago
Zak Holt
43f0e8530b
Update using-dex.md
9 years ago
Zak Holt
41a20dbb2a
Update using-dex.md
9 years ago
rithu leena john
3493e30f43
Merge pull request #972 from rithujohn191/github-doc
...
Documentation/github-connector: warn user that GitHub email id should be public.
9 years ago
rithu john
d6c1b0f42b
Documentation/github-connector: warn user that GitHub email id should be public.
9 years ago
rithu leena john
15242a86b8
Merge pull request #967 from rithujohn191/err-msg
...
connector: improve error message for callback URL mismatch
9 years ago
rithu john
682d78f527
connector: improve error message for callback URL mismatch
9 years ago
rithu leena john
1d7abf8923
Merge pull request #949 from rithujohn191/add-docs
...
Documentation/ldap-connector.md: Warn about LDAP connector's bindPW restriction.
9 years ago
rithu john
081e68a16a
Documentation/ldap-connector.md: Warn about LDAP connector's bindPW restriction.
9 years ago
Eric Chiang
f4f7146f04
Merge pull request #941 from ericchiang/fix-public-client-localhost
...
server: fix localhost redirect validation for public clients
9 years ago
Eric Chiang
95334ad51d
Documentation: add docs on public clients
9 years ago
Eric Chiang
fcb9c5a1c4
server: fix localhost redirect validation for public clients
9 years ago
rithu leena john
583bf91ab4
Merge pull request #936 from rithujohn191/fix-comment
...
connector/ldap: correct a comment.
9 years ago
rithu john
0dd024d669
connector/ldap: correct a comment.
9 years ago
rithu leena john
a7097c80e3
Merge pull request #933 from rithujohn191/ldap-fix
...
connector/ldap: check for blank passwords and return error.
9 years ago
rithu john
6e3e174100
connector/ldap: check for blank passwords and return error.
9 years ago
rithu leena john
81d24f180e
Merge pull request #931 from rithujohn191/local-connector
...
cmd/dex/serve: add local connector directly to static connectors in storage
9 years ago
rithu john
dc4b97b851
cmd/dex/serve: add local connector directly to static connectors in storage
9 years ago
rithu leena john
951fb053a1
Merge pull request #929 from rithujohn191/api-resp-fix
...
server/api: return empty list of refresh tokens if user does not have any
9 years ago
rithu john
aefdd6e004
server/api: return empty list of refresh tokens if user does not have any
9 years ago
rithu leena john
9514bf9afe
Merge pull request #913 from rithujohn191/dynamic-connector
...
server: account for dynamically changing connector object in storage.
9 years ago
rithu john
8c9c2518f5
server: account for dynamically changing connector object in storage.
9 years ago
rithu leena john
52b121a470
Merge pull request #923 from ericchiang/update-readme
...
README.md: reorganize README
9 years ago
Eric Chiang
c400e860fe
Documentation: more diagrams
9 years ago
Eric Chiang
8a7665b5a1
README.md: reorganize README
...
* Highlights that dex is NOT a user-management system.
* Highlights ID Tokens as dex's primary feature.
* General cleanup.
9 years ago
rithu leena john
aae9bb6477
Merge pull request #922 from gambtho/patch-1
...
Update kubernetes.md
9 years ago
Tom Gamble
0edd0b2fb4
Update kubernetes.md
...
fixed typo
9 years ago
Eric Chiang
47f48658c2
Merge pull request #917 from ericchiang/add-using-dex-doc
...
Documentation: add a doc describing how to use dex
9 years ago
Eric Chiang
a4cb57ab5d
Documentation: add a doc describing how to use dex
9 years ago
rithu leena john
4507e99ae3
Merge pull request #919 from ericchiang/update-maintainers
...
*: update maintainers
9 years ago
rithu leena john
5c56fb76df
Merge pull request #909 from AirHelp/master
...
Dex on Kubernetes with RBAC authorization - documentation updated
9 years ago
Eric Chiang
49e05b95c0
*: update maintainers
9 years ago
Eric Chiang
2b8caf9b39
Merge pull request #906 from ericchiang/fix-saml-test
...
connector/saml/testdata: fix bad status test case
9 years ago
Eric Chiang
2edfec5d45
Merge pull request #916 from ericchiang/readme-security-diclosure
...
README: add section about reporting security vulnerabilities
9 years ago
Eric Chiang
a12d2f85a8
README: add section about reporting security vulnerabilities
...
It was pointed out by @davidillsley that we don't point this out
anywhere in our docs.
9 years ago
rithu leena john
521dbff7cf
Merge pull request #912 from zhuguihua/fix_typo
...
Fix two typos
9 years ago
zhuguihua
4e99ec3eeb
Fix two typos
...
Signed-off-by: zhuguihua <zhuguihua@cmss.chinamobile.com>
Change storace to storage in cmd/dex/config.go,
change userSearch to groupSearch in connector/ldap/ldap.go
9 years ago
Eric Chiang
5859fe1091
Merge pull request #910 from ericchiang/update-grpc
...
*: update grpc and correct protobuf generation
9 years ago
Eric Chiang
ba1660ae1f
*: revendor and regenerate protobuf files
9 years ago
Eric Chiang
ef376b9c69
*: update grpc and correct protobuf generation
...
Turns out that manually setting PATH in the Makefile doesn't work
so we've been using the protobuf plugins installed on the host. Fix
this by specifying plugins by path.
9 years ago
Filip Haftek
2e10e5a9b1
Merge pull request #1 from AirHelp/dex_on_k8s_rbac_doc
...
Updated documentation for dex on k8s when RBAC authorization is used
9 years ago
Filip
57aa32562b
Updated documentation for dex on k8s when RBAC authorization is used
9 years ago
Eric Chiang
e609de5018
Merge pull request #908 from ericchiang/start-tls
...
connector/ldap: support the StartTLS flow for secure connections
9 years ago
Eric Chiang
74f5eaf47e
connector/ldap: support the StartTLS flow for secure connections
...
When connecting to an LDAP server, there are three ways to connect:
1. Insecurely through port 389 (LDAP).
2. Securely through port 696 (LDAPS).
3. Insecurely through port 389 then negotiate TLS (StartTLS).
This PR adds support for the 3rd flow, letting dex connect to the
standard LDAP port then negotiating TLS through the LDAP protocol
itself.
See a writeup here:
http://www.openldap.org/faq/data/cache/185.html
9 years ago
Eric Chiang
00b5c99ffc
connector/saml/testdata: fix bad status test case
...
Notice this when inspecting the code coverage results. For some
reason this test wasn't triggering the bad status code path, maybe
due to signature validation. Removing the comment fixed the code
coverage.
9 years ago
rithu leena john
9b0af83604
Merge pull request #905 from rithujohn191/error-msg
...
server/rotation.go: avoid displaying the "keys already rotated" error
9 years ago