mirror/dex - dex - xhrpb gitea

Commit Graph

Author	SHA1	Message	Date
Eric Stroczynski	ce9ac761a6	connector/github: abstract scope check and group getter	9 years ago
Chien Huey	99370b5880	Updated comment to include reference to GitHub Enterprise not supporting verified emails	9 years ago
Eric Stroczynski	e92f38f38f	connector/github: error if no groups scope without orgs We should always check if a user is in any orgs or teams specified in config, and whether the groups scope is also included in client requests. If not, return an error, because dex wouldn't have required permissions to do the request anyway (need read:org).	9 years ago
Chien Huey	98f6a217d3	When connecting to GitHub Enterprise, force email verified field to true	9 years ago
Eric Stroczynski	5894d017d5	connector/github: debug->info logging, more informative userInOrg msg	9 years ago
Eric Stroczynski	484327fd5f	connector/github: only user users' login name in API reqs	9 years ago
Eric Stroczynski	26527011ab	connector/github: enable private, primary emails; refactor API calls Documentation: removed private emails caveats section	9 years ago
Eric Stroczynski	9d154802a2	connector/github: multiple orgs, query by teams Documentation: examples of GitHub `orgs` field with multiple orgs and org with teams; note legacy behavior	9 years ago
Eric Stroczynski	4a88d0641a	: update {S->s}irupsen/logrus	9 years ago
rithu john	682d78f527	connector: improve error message for callback URL mismatch	9 years ago
rithu john	76b9eb1db9	connector/github: add support for github enterprise.	9 years ago
Eric Chiang	777eeafabc	*: update go-oidc and use standard library's context package	9 years ago
Ali Javadi	98bfa4fbb1	Fixes #706	9 years ago
rithu john	2e22a948cf	cmd/dex: add logging config and serve logger for different modules.	9 years ago
Eric Chiang	952e0f81f5	connector: add RefreshConnector interface	9 years ago
Eric Chiang	aa7f304bc1	: switch to github.com/ghodss/yaml for more consistent YAML parsing ghodss/yaml converts from YAML to JSON before attempting to unmarshal. This allows us to: Get the correct behavor when decoding base64'd []byte slices. * Use json.RawMessage. Not have to support extravagant YAML features. * Let our structs use `json:` tags	10 years ago
Eric Chiang	a3235d022a	*: verify "state" field before passing request to callback connectors Let the server handle the state token instead of the connector. As a result it can throw out bad requests earlier. It can also use that token to determine which connector was used to generate the request allowing all connectors to share the same callback URL. Callbacks now all look like: https://dex.example.com/callback Instead of: https://dex.example.com/callback/(connector id) Even when multiple connectors are being used.	10 years ago
Eric Chiang	a11db557b4	*: expand environment variables in config Allow users to define config values which are read form environemnt variables. Helpful for sensitive variables such as OAuth2 client IDs or LDAP credentials.	10 years ago
Eric Chiang	bfe560ee21	rename	10 years ago
Eric Chiang	f4c5722e42	*: connectors use a different identity object than storage	10 years ago
Eric Chiang	cab271f304	initial commit	10 years ago

24 Commits (e10fddee2e79f7a0cdeba511fd5936cf19511bc9)