Maksim Nabokikh
2ea1a80c86
fix: propagate http client to userInfo requests for OIDC connector ( #2781 )
...
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
3 years ago
Daniel Lipovetsky
07d7913049
chore: Upgrade golangci-lint to v1.50.1 from v1.46.0 ( #2790 )
3 years ago
Matt H
c167276b07
Move unique functionality into getGroups to reduce calls to google ( #2628 )
...
Signed-off-by: Matt Hoey <matt.hoey@missionlane.com>
3 years ago
Nobuo Takizawa
c91b87faf1
Add preferredEmailDomain config option for GitHub connector ( #2740 )
...
Signed-off-by: nobuyo <longzechangsheng@gmail.com>
Signed-off-by: Nobuo Takizawa <nobuyo@users.noreply.github.com>
Co-authored-by: Maksim Nabokikh <max.nabokih@gmail.com>
3 years ago
Rui Yang
54345b6331
TLS configure for OIDC connector ( #1632 )
...
Signed-off-by: Rui Yang <ruiya@vmware.com>
3 years ago
Mark Sagi-Kazar
cadce3cc35
fix(connector/google): only initialize admin service if necessary
...
Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>
4 years ago
Mark Sagi-Kazar
9bcce63352
fix(connector/google): make admin email optional for default creds
...
Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>
4 years ago
Mark Sagi-Kazar
6a59f08e4e
Revert "fix: check for no serviceAccountFilePath and no email ( #2679 )"
...
This reverts commit 49477729ce .
Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>
4 years ago
Bob Callaway
49477729ce
fix: check for no serviceAccountFilePath and no email ( #2679 )
...
Signed-off-by: Bob Callaway <bcallaway@google.com>
4 years ago
Erwin van Eyk
d96f384f2a
Reduce HTTP client creations in the Keystone connector ( #2659 )
...
Signed-off-by: erwinvaneyk <erwinvaneyk@gmail.com>
4 years ago
Hoang Quoc Trung
a1a3ed5b25
Implement Application Default Credentials for the google connector ( #2530 )
...
Signed-off-by: Trung <trung.hoang@pricehubble.com>
4 years ago
Marcelo Clavel
29b3523e07
feat(connector/authproxy): support multiple groups ( #2643 )
...
Signed-off-by: Marcelo Clavel <mclavel00@gmail.com>
4 years ago
Joost Buskermolen
72dd3c60c0
fix: Fallback when group claim is a string instead of an array of strings ( #2639 )
...
Signed-off-by: Joost Buskermolen <joost@buskervezel.nl>
Co-authored-by: Michiel van Pouderoijen <michiel@pouderoijen.nl>
4 years ago
Bob Callaway
e1a407830d
add config to explicitly set scopes for microsoft connector ( #2582 )
...
Signed-off-by: Bob Callaway <bcallaway@google.com>
4 years ago
Joe Knight
27c25d00be
Add domainHint parameter to Microsoft Connector ( #2586 )
...
Signed-off-by: Joe Knight <josephtknight@users.noreply.github.com>
4 years ago
dhaus67
100246328b
Use GitLab's refresh_token during Refresh. ( #2352 )
...
Signed-off-by: Daniel Haus <dhaus@redhat.com>
4 years ago
Mark Sagi-Kazar
a02f2e8fac
chore: fix lint violations
...
Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>
4 years ago
Anthony Brandelli
5fe1647fc7
Fix issues to make the linter happy
...
Signed-off-by: Anthony Brandelli <abrandel@cisco.com>
4 years ago
Anthony Brandelli
7c335e9337
Add support for IDPs that do not send ID tokens in the reply when using a refresh grant. Add tests for the aforementioned functionality.
...
Signed-off-by: Anthony Brandelli <abrandel@cisco.com>
4 years ago
Anthony Brandelli
f07a58a7f1
Remove google specific hd / hosted domain claim config
...
Signed-off-by: Anthony Brandelli <abrandel@cisco.com>
4 years ago
Shuanglei Tao
691f8be785
Fix unparam lint error in oauth_test
...
Signed-off-by: Shuanglei Tao <tsl0922@gmail.com>
4 years ago
Shuanglei Tao
7b75e1e0cc
Add numeric user ID support for oauth connector
...
Signed-off-by: Shuanglei Tao <tsl0922@gmail.com>
4 years ago
techknowlogick
1067641e53
Feature: groups in Gitea
...
Signed-off-by: techknowlogick <techknowlogick@gitea.io>
4 years ago
Daniel Haus
4088d4f897
Remove external setting, enable injection of HTTP client to config.
...
Signed-off-by: Daniel Haus <dhaus@redhat.com>
4 years ago
Daniel Haus
2b262ff5d6
Create setting to allow to trust the system root CAs
...
Previously, when rootCA was set, the trusted system root CAs were ignored. Now, allow for both being able to be configured and used
Signed-off-by: Daniel Haus <dhaus@redhat.com>
4 years ago
Engin Diri
5d9d68106a
feat: Add acr_values support for OIDC
...
Signed-off-by: Engin Diri <engin.diri@mail.schwarz>
4 years ago
seuf
4ee9658dfe
[authproxy] Allow configuration of returned groups
...
Via HTTP Header if present and with manually configured staticGroups in authproxy connector
Signed-off-by: seuf <seuf76@gmail.com>
4 years ago
Rahul M Chheda
2bc4ad6b56
[fix] Replace /teams API w/ /workspaces endpoints
...
Signed-off-by: Rahul M Chheda <rahul.chheda@accurics.com>
4 years ago
Happy2C0de
419db81c67
Remove overrideWithMissingCustomEmailClaim
...
Signed-off-by: Happy2C0de <46957159+Happy2C0de@users.noreply.github.com>
4 years ago
Happy2C0de
55605751f5
Add overrideWithMissingCustomEmailClaim test
...
Signed-off-by: Happy2C0de <46957159+Happy2C0de@users.noreply.github.com>
4 years ago
Happy2C0de
b28098dde8
Revert querying preferrredUsernameKey
...
Signed-off-by: Happy2C0de <46957159+Happy2C0de@users.noreply.github.com>
4 years ago
Happy2C0de
1608b473eb
Remove false failed errors.
...
Signed-off-by: Happy2C0de <46957159+Happy2C0de@users.noreply.github.com>
4 years ago
Happy2C0de
2b6bb1997c
Revert ClaimMapping struct
...
Signed-off-by: Happy2C0de <46957159+Happy2C0de@users.noreply.github.com>
4 years ago
Happy2C0de
14a0aecc81
Move claimMapping.enforce to overrideClaimMapping
...
Signed-off-by: Happy2C0de <46957159+Happy2C0de@users.noreply.github.com>
4 years ago
Happy2C0de
45143c98b3
Add claimMapping enforcement
...
Signed-off-by: Happy2C0de <46957159+Happy2C0de@users.noreply.github.com>
4 years ago
Daniel Haus
6256b863b0
Fix linting issues.
...
Signed-off-by: Daniel Haus <dhaus@redhat.com>
4 years ago
Daniel Haus
6d55fe1c80
Add support for refresh tokens for openshift connector.
...
Signed-off-by: Daniel Haus <dhaus@redhat.com>
4 years ago
Rui Yang
539e08ba50
small refactors and cleanup
...
Signed-off-by: Rui Yang <ruiya@vmware.com>
4 years ago
Rui Yang
8b865169bd
fix minor compilation error for group claim
...
us 'os' insteak of 'io/ioutil'
Signed-off-by: Rui Yang <ruiya@vmware.com>
4 years ago
Vlad Safronov
7c80e44caf
Add a test case
...
Signed-off-by: Vlad Safronov <vladislav.safronov@oracle.com>
4 years ago
Vlad Safronov
45932bd38a
skymarshal: behaviour: Handle groups as maps
...
There are cases when groups are represented as a list
of maps, not strings e.g. "groups":[{"id":"1",
"name":"gr1"},{"id": "2", "name":"gr2"}]. Handle groups
represented as a list of maps.
concourse/dex#23
Signed-off-by: Vlad Safronov <vladislav.safronov@oracle.com>
4 years ago
Rui Yang
f980d3e0a7
cleanup and optimization
...
Signed-off-by: Rui Yang <ruiya@vmware.com>
4 years ago
Rui Yang
8ea121b45a
move oauth connector doc to dex website repo
...
move default key values configure to connector construct function
Signed-off-by: Rui Yang <ruiya@vmware.com>
4 years ago
Rui Yang
02860da8b6
use claim mappings when retrieving user identity
...
Signed-off-by: Rui Yang <ruiya@vmware.com>
4 years ago
Rui Yang
60b8875780
use testify in oauth tests
...
Signed-off-by: Rui Yang <ruiya@vmware.com>
4 years ago
Rui Yang
9952851cc4
add configurable preferred_username key
...
Signed-off-by: Rui Yang <ruiya@vmware.com>
4 years ago
Rui Yang
930b331a5b
use PreferredUsername
...
Signed-off-by: Rui Yang <ryang@pivotal.io>
4 years ago
Josh Winters
a087c05ebf
Make oauth user name and user id configurable
...
Signed-off-by: Josh Winters <jwinters@pivotal.io>
Co-authored-by: Mark Huang <mhuang@pivotal.io>
4 years ago
Joshua Winters
9284ffb8c0
Add generic oauth connector
...
Co-authored-by: Shash Reddy <sreddy@pivotal.io>
Signed-off-by: Joshua Winters <jwinters@pivotal.io>
4 years ago
Matt Hoey
ee5b5b25bd
Resolves #2111 Option to fetch transitive group membership
...
Signed-off-by: Matt Hoey <matt.hoey@missionlane.com>
5 years ago