mirror/dex - dex - xhrpb gitea

Commit Graph

Author	SHA1	Message	Date
Krzysztof Balka	e8ba848907	keystone: fetching groups only if requested, refactoring.	7 years ago
joannano	88d1e2b041	keystone: test cases, refactoring and cleanup	7 years ago
Krzysztof Balka	a965365a2b	keystone: refresh token and groups	7 years ago
knangia	0774a89066	keystone: squashed changes from knangia/dex	7 years ago
Daniel Kessler	ee54a50956	LDAP connector - add emailSuffix config option	7 years ago
Josh Winters	bb11a1ebee	github: add 'both' team name field option this will result in both the team name and the team slug being returned for each team, allowing a bit more flexibility in auth validation. Signed-off-by: Topher Bullock <tbullock@pivotal.io> Signed-off-by: Alex Suraci <suraci.alex@gmail.com>	8 years ago
gypsydiver	f21e6a0f00	gypsydiver/1347-pr-gitlab-groups	8 years ago
Alexander Matyushentsev	7bd084bc07	Issue #1102 - Add config to explicitly enable loading all github groups	8 years ago
Alexander Matyushentsev	20bc6cd353	Full list of groups should include group names as well as group_name:team_name	8 years ago
Alexander Matyushentsev	ce3cd53a11	Bug fix: take into account 'teamNameField' settings while fetching all user groups	8 years ago
Alexander Matyushentsev	e876353128	Rename variables to stop shadowing package name	8 years ago
Alexander Matyushentsev	a9f71e378f	Update getPagination method comment	8 years ago
Alexander Matyushentsev	e10b8232d1	Apply reviewer notes: style changes, make sure unit test verifies pagination	8 years ago
Alexander Matyushentsev	51d9b3d3ca	Issue #1184 - Github connector now returns a full group list when no org is specified	8 years ago
Stephan Renatus	c14b2fd5a5	connector/ldap: slightly improve error output Signed-off-by: Stephan Renatus <srenatus@chef.io>	8 years ago
Ed Tan	50afa921b5	Remove unused DisplayName	8 years ago
Ed Tan	6ffc8fcd8d	Rename bitbucket to bitbucketcloud	8 years ago
Ed Tan	d26e23c16f	Make suggested code changes	8 years ago
Ed Tan	2c024d8caf	Fix golint issues	8 years ago
Ed Tan	8c75d85b60	Add Bitbucket connector	8 years ago
Stephan Renatus	26c0206627	connector/saml: make unparsable (trailing, non-space/newline) data an error Fixes #1304, if we want to be harsh. However, I think if it was the user's intention to pass two certs, and the second one couldn't be read, that shouldn't just disappear. After all, when attempting to login later, that might fail because the expected IdP cert data isn't there. Signed-off-by: Stephan Renatus <srenatus@chef.io>	8 years ago
veily	317f433a14	support self-signed certificates ldap Format ldap.go Format ldap.go: with a space for golint with a space Rename clientCA is to clientCert Update ldap.go modified the ldap client certificate file comments. modified load ldap client cert error. modified load ldap client cert error: fmt.Errorf("ldap: load client cert failed: %v", err)	8 years ago
Scott Reisor	2707302054	add Refresh() to mock passwordConnector	8 years ago
Taras Burko	bf39130bab	Configurable team name field for GitHub connector	8 years ago
Stephan Renatus	b9f6594bf0	*: github.com/coreos/dex -> github.com/dexidp/dex Signed-off-by: Stephan Renatus <srenatus@chef.io>	8 years ago
Stephan Renatus	6a2d4ab6b4	connectors/ldap: treat 'constraint violation' on bind as bad credentials Some directory servers (I think it's Oracle) return Constraint Violation: Exceed password retry limit. Account locked. when attempting to login too many times. While constraint violation can mean many things, we're checking this as an error on BIND, so it's more likely that something like this has happened than any other thing. Hence, we should treat it as an "incorrect password" situation, not an internal error. It would of course be preferrable to surface more information about this precise error (and similar ones), but I think this is beyond this small change. Signed-off-by: Stephan Renatus <srenatus@chef.io>	8 years ago
Anian Z	5454a4729f	fix default baseURL for gitlab connector	8 years ago
silenceshell	468b5e3f0a	fix typo Should `pulic` be `public`?	8 years ago
Stephan Renatus	608260d0f1	saml: add tests case covering tampered NameID field (comment) As sketched here: https://developer.okta.com/blog/2018/02/27/a-breakdown-of-the-new-saml-authentication-bypass-vulnerability Thought it was interesting to see how our SAML connector behaved. And it seems to be behaving well. :) Signed-off-by: Stephan Renatus <srenatus@chef.io>	8 years ago
pmcgrath	4aec353aec	1170 - Fix comment typos BsaeDN should be BaseDN	8 years ago
Pavel Borzenkov	47df6ea2ff	connector/microsoft: add support for groups Microsoft connector now provides support for 'groups' claim in case 'tenant' is configured in Dex config for the connector. It's possible to deny user authentication if the user is not a member of at least one configured groups. Signed-off-by: Pavel Borzenkov <pavel.borzenkov@gmail.com>	9 years ago
Pavel Borzenkov	6193bf5566	connector: implement Microsoft connector connector/microsoft implements authorization strategy via Microsoft's OAuth2 endpoint + Graph API. It allows to choose what kind of tenants are allowed to authenticate in Dex via Microsoft: * common - both personal and business/school accounts * organizations - only business/school accounts * consumers - only personal accounts * <tenant uuid> - only account of specific tenant Signed-off-by: Pavel Borzenkov <pavel.borzenkov@gmail.com>	9 years ago
Stephan Renatus	b09a13458f	password connectors: allow overriding the username attribute (password prompt) This allows users of the LDAP connector to give users of Dex' login prompt an idea of what they should enter for a username. Before, irregardless of how the LDAP connector was set up, the prompt was Username [_________________] Password [_________________] Now, this is configurable, and can be used to say "MyCorp SSO Login" if that's what it is. If it's not configured, it will default to "Username". For the passwordDB connector (local users), it is set to "Email Address", since this is what it uses. Signed-off-by: Stephan Renatus <srenatus@chef.io>	9 years ago
Eric Chiang	6475ce1f62	connector/oidc: remove test that talks to the internet	9 years ago
Pavel Borzenkov	3b5df52c0f	connector/linkedin: implement RefreshConnector interface Do Refresh() by querying user's profile data. Since LinkedIn doesn't provide refresh tokens at all, and the access tokens have 60 days expiration, refresh tokens issued by Dex will fail to update after 60 days. Signed-off-by: Pavel Borzenkov <pavel.borzenkov@gmail.com>	9 years ago
Pavel Borzenkov	ab06119431	connector: implement LinkedIn connector connector/linkedin implements authorization strategy via LinkedIn's OAuth2 endpoint + profile API. It doesn't implement RefreshConnector as LinkedIn doesn't provide any refresh token at all (https://developer.linkedin.com/docs/oauth2, Step 5 — Refresh your Access Tokens) and recommends ordinary AuthCode exchange flow when token refresh is required. Signed-off-by: Pavel Borzenkov <pavel.borzenkov@gmail.com>	9 years ago
Eric Chiang	d099145921	authproxy: update docs and set a userID	9 years ago
Michael Stapelberg	a41d93db4a	Implement the “authproxy” connector (for Apache2 mod_auth etc.)	9 years ago
Eric Chiang	fcf00019de	connector/ldap: add test for InsecureSkipVerify option	9 years ago
Lars Sjöström	4605fdd551	connector/gitlab: Fix regexp in Link parser	9 years ago
Eric Chiang	980400db0b	Makefile: error out if go files aren't correctly formatted Noticed in #1058 that our gofmt make target isn't actually erroring if someone commits misformatted code.	9 years ago
Eric Stroczynski	ce9ac761a6	connector/github: abstract scope check and group getter	9 years ago
Chien Huey	99370b5880	Updated comment to include reference to GitHub Enterprise not supporting verified emails	9 years ago
Eric Stroczynski	e92f38f38f	connector/github: error if no groups scope without orgs We should always check if a user is in any orgs or teams specified in config, and whether the groups scope is also included in client requests. If not, return an error, because dex wouldn't have required permissions to do the request anyway (need read:org).	9 years ago
Chien Huey	98f6a217d3	When connecting to GitHub Enterprise, force email verified field to true	9 years ago
Eric Stroczynski	5894d017d5	connector/github: debug->info logging, more informative userInOrg msg	9 years ago
Eric Stroczynski	484327fd5f	connector/github: only user users' login name in API reqs	9 years ago
Eric Stroczynski	ca75470ae3	connector/gitlab: correct scope strings, better default	9 years ago
Eric Chiang	aad328bb35	*: add log events for login, LDAP queries, and SAML responses	9 years ago
Eric Stroczynski	26527011ab	connector/github: enable private, primary emails; refactor API calls Documentation: removed private emails caveats section	9 years ago

1 2 3

120 Commits (e8ba848907a656d32b856c7a2d892dc96de0fca1)