mirror/dex - dex - xhrpb gitea

Commit Graph

Author	SHA1	Message	Date
joannano	88d1e2b041	keystone: test cases, refactoring and cleanup	7 years ago
knangia	0774a89066	keystone: squashed changes from knangia/dex	7 years ago
Haines Chan	b78b8aeee0	Replace "GET", "POST" to http.MethodGet and http.MethodPost	7 years ago
Stephan Renatus	73fdf4f75b	storage/sql/postgres: expose stdlib tunables, set them for tests - adapted TestUnmarshalConfig to ensure the fields are read in - added a test to see that at least MaxOpenConns works: - this is only exposed through (*db).Stats() in go 1.11, so this test has a build tag - the other two configurables can't be read back, so we've got to trust that the mechanism works given the one instance that's tested.. Signed-off-by: Stephan Renatus <srenatus@chef.io>	7 years ago
Stephan Renatus	8f3cca7ba4	Revert "retry on serialization errors"	7 years ago
Alex Suraci	85dd0684ba	extract and document serialization failure check	7 years ago
Alex Suraci	587081a643	postgres: refactor error handling to fix retrying prior to this change, many of the functions in the ExecTx callback would wrap the error before returning it. this made it impossible to check for the error code. instead, the error wrapping has been moved to be external to the `ExecTx` callback, so that the error code can be checked and serialization failures can be retried.	7 years ago
Alex Suraci	aa068b667a	postgres: improve readability of error check	7 years ago
Alex Suraci	9b9013a560	postgres: use stdlib to set serializable tx level also use a context for the rollback, which is a bit cleaner since it only results in one 'defer', rather than N from the loop	7 years ago
Alex Suraci	7e96021428	retry on serialization errors	7 years ago
Stephan Renatus	6182f213ef	storage/conformance: remove old build tags Signed-off-by: Stephan Renatus <srenatus@chef.io>	7 years ago
Stephan Renatus	0740c2370d	storage/etcd: remove standup.sh Signed-off-by: Stephan Renatus <srenatus@chef.io>	7 years ago
Stephan Renatus	1d0568efe9	storage/sql: remove standup.sh Signed-off-by: Stephan Renatus <srenatus@chef.io>	7 years ago
Alex Suraci	0b856d1a75	pg: support host:port for backwards-compatibility	7 years ago
Divya Dadlani	f82b904d05	postgres: use connection string instead of url otherwise it's impossible to use a Unix socket, as the path gets escaped awkwardly. Signed-off-by: Ciro S. Costa <cscosta@pivotal.io> Signed-off-by: Alex Suraci <suraci.alex@gmail.com>	7 years ago
Alex Suraci	7c63be4104	remove incomplete mysql and cockroachdb support	7 years ago
Alex Suraci	dcca427592	fix bogus conformance failure due to time zones this failed on my machine due to the unexported 'loc' field of the time structure - it was nil in one and set to a ton of tiemzone data in the other. instead let's just compare the unix timestamp value and zero it out for the struct comparison.	7 years ago
Song.Jin	5f0a03a06b	modify log msg as per suggested	7 years ago
Song.Jin	9b5bec1ddf	check if crd exist before try creating them	7 years ago
Song.Jin	d2daa4e2ac	allow it to disable CRD creation	7 years ago
Stephan Renatus	b9f6594bf0	*: github.com/coreos/dex -> github.com/dexidp/dex Signed-off-by: Stephan Renatus <srenatus@chef.io>	8 years ago
Gabe Conradi	94bd948aac	fix timeout bug for etcd3 client connect	8 years ago
Daniel Dao	e617197871	storage/etcd: document struct tag in code This explicitly adds struct tags for etcd storage instead of implicitly depends on yaml/json config serialization.	8 years ago
Eric Chiang	3d2d92b31b	*: run kubernetes tests in travis	9 years ago
Daniel Dao	ca114f7812	storage: add etcd storage This patch adds etcd storage implementation. This should be useful in environments where - we dont want to depends on a separate, hard to maintain SQL cluster - we dont want to incur the overhead of talking to kubernetes apiservers - kubernetes is not available yet, or if kubernetes depends on dex to perform authentication and the operator would like to remove any circular dependency if possible.	9 years ago
Daniel Dao	2b13bdd12d	storage: fix list connector test The previous test doesnt actually testing ListConnectors code. For example the following pseudocode will pass the test: ``` ListConnectors() { return nil, nil } ``` Instead change to actually fetch and compare list of connectors, ordering by name	9 years ago
Ryan Phillips	0318cd99b0	add client request timeout and dialer deadline	9 years ago
Chance Zibolski	9d7b0b59bd	storage/kubernetes: Log before registering custom resources Logging before attempting to make any connection to Kubernetes is useful when the connection hangs and dex is killed before it can log any errors.	9 years ago
rithu john	d2706fcab8	storage/kubernetes: Correct the OfflineSession object CRD definition	9 years ago
rithu john	1311caf864	storage/kubernetes: add CRD support	9 years ago
rithu john	146481375e	[WIP]: add CRD support	9 years ago
rithu john	fd4f57b5f3	storage/static.go: storage backend should not explicitly lower-case email ids.	9 years ago
Eric Stroczynski	4a88d0641a	: update {S->s}irupsen/logrus	9 years ago
Kazumasa Kohtaka	cc314690f4	Avoid generating an identifer which starts with a number because it may be used as a SAML's ID attribute	9 years ago
rithu john	8c9c2518f5	server: account for dynamically changing connector object in storage.	9 years ago
rithu john	5abb4b3df6	storage/static.go: correct the error message that gets displayed.	9 years ago
rithu john	bc55b86d0d	storage: add connector object to backend storage.	9 years ago
Eric Chiang	4c39bc20ae	storage: make static storages query real storages for some actions If dex is configured with static passwords or clients, let the API still add or modify objects in the backing storage, so long as their IDs don't conflict with the static ones. List options now aggregate resources from the static list and backing storage.	9 years ago
rithu john	9e88924577	storage/conformance: update conformance tests with multiple entries per resource	9 years ago
Eric Chiang	6cb38604d9	storage/kubernetes: log INFO level if TPR already exists, not ERROR	9 years ago
Eric Chiang	0481fccd76	storage/sql: add missing WHERE statement to refresh token update	9 years ago
Eric Chiang	777eeafabc	*: update go-oidc and use standard library's context package	9 years ago
Eric Chiang	38c77e0f33	storage/kubernetes: enable HTTP/2 support	9 years ago
Eric Chiang	a7b8e52b92	storage/kubernetes: fix conflict error detection in TRP creation PR #815 fixed the Kubernetes storage implementation by correctly returning storage.ErrAlreadyExists on POST conflicts. This caused a regression in TPR creation (#822) when some, but not all, of the resources already existed. E.g. for users upgrading from old versions of dex. Fixes #822	9 years ago
Eric Chiang	1da2ae279c	storage/kubernetes: fix hash initialization bug	9 years ago
Eric Chiang	4be029c6c1	storage/kubernetes: fix kubernetes storage conformance test failures	9 years ago
rithu john	3df1db1864	storage: Surface "already exists" errors.	9 years ago
rithu john	d928ac0677	storage: Add OfflineSession object to backend storage.	9 years ago
Eric Chiang	1eda382789	server: add at_hash claim support The "at_hash" claim, which provides hash verification for the "access_token," is a required claim for implicit and hybrid flow requests. Previously we did not include it (against spec). This PR implements the "at_hash" logic and adds the claim to all responses. As a cleanup, it also moves some JOSE signing logic out of the storage package and into the server package. For details see: https://openid.net/specs/openid-connect-core-1_0.html#ImplicitIDToken	9 years ago
Eric Chiang	312ca7491e	storage: add extra fields to refresh token and update method	9 years ago

1 2 3

113 Commits (fbdb55aba9e7a6cc4e69ce4bfa2e652278b445a3)