mirror/dex - dex - xhrpb gitea

Commit Graph

Author	SHA1	Message	Date
wassan128	42e8619830	Fix typo	7 years ago
Nandor Kracser	ef08ad8317	gitlab: add groups scope by default when filtering is requested	7 years ago
Stephan Renatus	d9487e553b	*: fix some lint issues Mostly gathered these using golangci-lint's deadcode and ineffassign linters. Signed-off-by: Stephan Renatus <srenatus@chef.io>	7 years ago
Nandor Kracser	ff34e570b4	connector/gitlab: implement useLoginAsID as in GitHub connector	7 years ago
Maxime Desrosiers	458585008b	microsoft: option for group UUIDs instead of name and group whitelist	7 years ago
Stephan Renatus	51f50fcad8	connectors: refactor filter code into a helper package I hope I didn't miss any :D Signed-off-by: Stephan Renatus <srenatus@chef.io>	7 years ago
tan	8613c78863	update LinkedIn connector to use v2 APIs This updates LinkedIn connector to use the more recent v2 APIs. Necessary because v1 APIs are not able to retrieve email ids any more with the default permissions. The API URLs are now different. Fetching the email address is now a separate call, made after fetching the profile details. The `r_basicprofile` permission is not needed any more, and `r_liteprofile` (which seems to be the one assigned by default) is sufficient. The relevant API specifications are at: - https://docs.microsoft.com/en-us/linkedin/shared/integrations/people/profile-api - https://docs.microsoft.com/en-us/linkedin/shared/integrations/people/primary-contact-api - https://docs.microsoft.com/en-us/linkedin/consumer/integrations/self-serve/migration-faq#how-do-i-retrieve-the-members-email-address	7 years ago
flarno11	8c1716d356	make userName configurable	7 years ago
Stephan Renatus	4e8cbf0f61	connectors/oidc: truely ignore "email_verified" claim if configured that way Fixes #1455, I hope. Signed-off-by: Stephan Renatus <srenatus@chef.io>	7 years ago
cappyzawa	9650836851	make userID configurable	7 years ago
Thomas Jackson	52d09a2dfa	Add option in oidc to hit the optional userinfo endpoint Some oauth providers return "thin tokens" which won't include all of the claims requested. This simply adds an option which will make the oidc connector use the userinfo endpoint to fetch all the claims.	7 years ago
Nandor Kracser	7b416b5a8e	gitlab: add tests	7 years ago
Nandor Kracser	a08a5811d4	gitlab: support for group whitelist	7 years ago
mkontani	6ae76662de	fix ssoURL	7 years ago
Gerald Barker	fc723af0fe	Add option to OIDC connecter to override email_verified to true	7 years ago
Mark Sagi-Kazar	06521ffa49	Remove the logrus logger wrapper	7 years ago
Mark Sagi-Kazar	be581fa7ff	Add logger interface and stop relying on Logrus directly	7 years ago
James Nord	fe247b106b	remove blank line that tripped up `make verify-proto`	7 years ago
James Nord	9840fccdbb	rename useLoginAsId -> useLoginAsID	7 years ago
Stephan Renatus	df18cb0c22	ldap_test: add filter tests The filters for user and group searches hadn't been included in our LDAP tests. Now they are. The concrete test cases are somewhat contrived, but that shouldn't matter too much. Also note that the example queries I've used are not supported in AD: https://stackoverflow.com/a/10043452 Signed-off-by: Stephan Renatus <srenatus@chef.io>	7 years ago
James Nord	5822a5ce9e	fix formatting of connector/github/github_test.go	7 years ago
James Nord	03ffd0798c	Allow an option to use the github user handle rather than an id. For downstream apps using a github handle is much simpler than working with numbers. WHilst the number is stable and the handle is not - GitHUb does give you a big scary wanring if you try and change it that bad things may happen to you, and generally few users ever change it. This can be enabled with a configuration option `useLoginAsId`	7 years ago
Krzysztof Balka	e8ba848907	keystone: fetching groups only if requested, refactoring.	7 years ago
joannano	88d1e2b041	keystone: test cases, refactoring and cleanup	7 years ago
Krzysztof Balka	a965365a2b	keystone: refresh token and groups	7 years ago
knangia	0774a89066	keystone: squashed changes from knangia/dex	7 years ago
Daniel Kessler	ee54a50956	LDAP connector - add emailSuffix config option	7 years ago
Josh Winters	bb11a1ebee	github: add 'both' team name field option this will result in both the team name and the team slug being returned for each team, allowing a bit more flexibility in auth validation. Signed-off-by: Topher Bullock <tbullock@pivotal.io> Signed-off-by: Alex Suraci <suraci.alex@gmail.com>	7 years ago
gypsydiver	f21e6a0f00	gypsydiver/1347-pr-gitlab-groups	7 years ago
Alexander Matyushentsev	7bd084bc07	Issue #1102 - Add config to explicitly enable loading all github groups	7 years ago
Alexander Matyushentsev	20bc6cd353	Full list of groups should include group names as well as group_name:team_name	7 years ago
Alexander Matyushentsev	ce3cd53a11	Bug fix: take into account 'teamNameField' settings while fetching all user groups	7 years ago
Alexander Matyushentsev	e876353128	Rename variables to stop shadowing package name	7 years ago
Alexander Matyushentsev	a9f71e378f	Update getPagination method comment	7 years ago
Alexander Matyushentsev	e10b8232d1	Apply reviewer notes: style changes, make sure unit test verifies pagination	7 years ago
Alexander Matyushentsev	51d9b3d3ca	Issue #1184 - Github connector now returns a full group list when no org is specified	7 years ago
Stephan Renatus	c14b2fd5a5	connector/ldap: slightly improve error output Signed-off-by: Stephan Renatus <srenatus@chef.io>	7 years ago
Ed Tan	50afa921b5	Remove unused DisplayName	8 years ago
Ed Tan	6ffc8fcd8d	Rename bitbucket to bitbucketcloud	8 years ago
Ed Tan	d26e23c16f	Make suggested code changes	8 years ago
Ed Tan	2c024d8caf	Fix golint issues	8 years ago
Ed Tan	8c75d85b60	Add Bitbucket connector	8 years ago
Stephan Renatus	26c0206627	connector/saml: make unparsable (trailing, non-space/newline) data an error Fixes #1304, if we want to be harsh. However, I think if it was the user's intention to pass two certs, and the second one couldn't be read, that shouldn't just disappear. After all, when attempting to login later, that might fail because the expected IdP cert data isn't there. Signed-off-by: Stephan Renatus <srenatus@chef.io>	8 years ago
veily	317f433a14	support self-signed certificates ldap Format ldap.go Format ldap.go: with a space for golint with a space Rename clientCA is to clientCert Update ldap.go modified the ldap client certificate file comments. modified load ldap client cert error. modified load ldap client cert error: fmt.Errorf("ldap: load client cert failed: %v", err)	8 years ago
Scott Reisor	2707302054	add Refresh() to mock passwordConnector	8 years ago
Taras Burko	bf39130bab	Configurable team name field for GitHub connector	8 years ago
Stephan Renatus	b9f6594bf0	*: github.com/coreos/dex -> github.com/dexidp/dex Signed-off-by: Stephan Renatus <srenatus@chef.io>	8 years ago
Stephan Renatus	6a2d4ab6b4	connectors/ldap: treat 'constraint violation' on bind as bad credentials Some directory servers (I think it's Oracle) return Constraint Violation: Exceed password retry limit. Account locked. when attempting to login too many times. While constraint violation can mean many things, we're checking this as an error on BIND, so it's more likely that something like this has happened than any other thing. Hence, we should treat it as an "incorrect password" situation, not an internal error. It would of course be preferrable to surface more information about this precise error (and similar ones), but I think this is beyond this small change. Signed-off-by: Stephan Renatus <srenatus@chef.io>	8 years ago
Anian Z	5454a4729f	fix default baseURL for gitlab connector	8 years ago
silenceshell	468b5e3f0a	fix typo Should `pulic` be `public`?	8 years ago

1 2 3

145 Commits (d2c33db8a8ff688d2be91c2edf3cc99baca3dc8b)