Stephan Renatus
fd53c0a3bb
Merge pull request #1496 from srenatus/sr/add-connector-id-to-example-app
...
add connector_id to example app
7 years ago
Stephan Renatus
8561a66365
server/{handler,oauth2}: cleanup error returns
...
Now, we'll return a standard error, and have the caller act upon this
being an instance of authErr.
Also changes the storage.AuthRequest return to a pointer, and returns
nil in error cases.
Signed-off-by: Stephan Renatus <srenatus@chef.io>
7 years ago
Stephan Renatus
d7c7d42466
cmd/example-app: check all errors, pass claims as string to renderToken
...
Signed-off-by: Stephan Renatus <srenatus@chef.io>
7 years ago
Stephan Renatus
c4e0587df1
cmd/example-app: expose connector_id
...
As a piece of "living documentation" for #1481 .
Signed-off-by: Stephan Renatus <srenatus@chef.io>
7 years ago
Joel Speed
20a858da3b
Merge pull request #1495 from pbochynski/patch-1
...
Update ADOPTERS.md
7 years ago
Piotr
74023ba9ad
Update ADOPTERS.md
...
Add Kyma project as an adopter.
7 years ago
Stephan Renatus
9c211132b2
Merge pull request #1494 from tanmaykm/patch-1
...
Update Adopters.md
7 years ago
Tanmay Mohapatra
56f8e60545
Update Adopters.md
...
Adding JuliaBox to the list of production adopters of Dex.
7 years ago
Stephan Renatus
e3203382fc
Merge pull request #1493 from srenatus/sr/adopters
...
ADOPTERS: replace Documentation/production-users.md, add Chef
7 years ago
Stephan Renatus
7409d16541
ADOPTERS: add pusher
...
Co-Authored-By: Joel Speed <Joel.speed@hotmail.co.uk>
7 years ago
Stephan Renatus
bc27a617c5
Merge pull request #1485 from bonifaido/mysql-storage
...
MySQL storage - Take 2
7 years ago
Stephan Renatus
b8cdc88803
Merge pull request #1492 from srenatus/sr/add-bonifaido-to-maintainers
...
MAINTAINERS: add @bonifaido
7 years ago
Nandor Kracser
a572ad8fec
storage/sql: rework of the original MySQL PR
7 years ago
Pavel Borzenkov
e53bdfabb9
storage/sql: initial MySQL storage implementation
...
It will be shared by both Postgres and MySQL configs.
Signed-off-by: Pavel Borzenkov <pavel.borzenkov@gmail.com>
7 years ago
Stephan Renatus
447f24a81b
ADOPTERS: replace Documentation/production-users.md, add Chef
...
Signed-off-by: Stephan Renatus <srenatus@chef.io>
7 years ago
Stephan Renatus
af81297d4e
MAINTAINERS: add @bonifaido
...
Signed-off-by: Stephan Renatus <srenatus@chef.io>
7 years ago
Stephan Renatus
421c26fdf5
Merge pull request #1481 from LanceH/master
...
Added "connector_id" to skip straight to a connector (similar to when len(connector) is 1.
7 years ago
LanceH
07a77e0dac
Use connector_id param to skip directly to a specific connector
7 years ago
Stephan Renatus
6379403a68
Merge pull request #1486 from AlbanSeurat/tc/add-verify-password-api
...
Add VerifyPassword to API
7 years ago
Tyler Cloke
dd84e73c0e
Add VerifyPassword to API
...
It takes in an email and plain text password to verify. If it fails to find a password stored for email, it returns not_found. If it finds the password hash stored but that hash doesn't match the password passed via the API, it returns verified = false, else it returns verified = true.
Co-authored-by: Alban Seurat <alban.seurat@me.com>
7 years ago
Stephan Renatus
92920c86ea
Merge pull request #1480 from srenatus/sr/deduplicate-filter-groups
...
connectors: refactor filter code into a helper package
7 years ago
Stephan Renatus
10611f3156
deps: revendor (github.com/stretchr/testify)
...
Signed-off-by: Stephan Renatus <srenatus@chef.io>
7 years ago
Stephan Renatus
51f50fcad8
connectors: refactor filter code into a helper package
...
I hope I didn't miss any :D
Signed-off-by: Stephan Renatus <srenatus@chef.io>
7 years ago
Eric Chiang
39dc5dcfb7
Merge pull request #1478 from ericchiang/maintainers
...
MAINTAINERS: remove ericchiang@
7 years ago
Eric Chiang
645a441527
MAINTAINERS: remove ericchiang@
...
I haven't had time to contribute to dex recently and it's been over a
year since I've worked on Kubernetes. Going to make this official and
remove myself from the MAINTAINERS list. I'll still be around if you
need to know why any of the code is so crazy :)
7 years ago
Stephan Renatus
8b4dbb9fe7
Merge pull request #1473 from alindeman/add-user-endpoint
...
Add UserInfo endpoint
7 years ago
Andy Lindeman
5b66bf05c8
Fixed shadowed variable declaration
7 years ago
Andy Lindeman
59b6595c37
userinfo_endpoint is required
7 years ago
Andy Lindeman
8959dc4275
ctx is not used
7 years ago
Andy Lindeman
21174c06a1
Remove comment
...
We have a story around user info now
7 years ago
Andy Lindeman
840065faaf
Assert something about the returned userinfo
7 years ago
Andy Lindeman
46f5726d11
Use oidc.Verifier to verify tokens
7 years ago
Andy Lindeman
157c359f3e
Bump go-oidc to latest v2
7 years ago
mdbraber
3dd1bac821
Fix comments
7 years ago
Maarten den Braber
74f4e749b9
Formatting
7 years ago
Maarten den Braber
d7750b1e26
Fix changes
7 years ago
Maarten den Braber
a8d059a237
Add userinfo endpoint
...
Co-authored-by: Yuxing Li <360983+jackielii@users.noreply.github.com>
Co-authored-by: Francisco Santiago <1737357+fjbsantiago@users.noreply.github.com>
7 years ago
Stephan Renatus
d6fad19d95
Merge pull request #1459 from flarno11/master
...
make userName configurable
7 years ago
Stephan Renatus
c19ada3236
Merge pull request #1460 from tanmaykm/tan/linkedin
...
Update LinkedIn connector to use v2 APIs
This updates LinkedIn connector to use the more recent v2 APIs. Necessary because v1 APIs are not able to retrieve email ids any more with the default permissions.
The API URLs are now different. Fetching the email address is now a separate call, made after fetching the profile details. The r_basicprofile permission is not needed any more, and r_liteprofile (which seems to be the one assigned by default) is sufficient.
The relevant API specifications are at:
https://docs.microsoft.com/en-us/linkedin/shared/integrations/people/profile-api
https://docs.microsoft.com/en-us/linkedin/shared/integrations/people/primary-contact-api
https://docs.microsoft.com/en-us/linkedin/consumer/integrations/self-serve/migration-faq#how-do-i-retrieve-the-members-email-address
7 years ago
tan
8613c78863
update LinkedIn connector to use v2 APIs
...
This updates LinkedIn connector to use the more recent v2 APIs. Necessary because v1 APIs are not able to retrieve email ids any more with the default permissions.
The API URLs are now different. Fetching the email address is now a separate call, made after fetching the profile details. The `r_basicprofile` permission is not needed any more, and `r_liteprofile` (which seems to be the one assigned by default) is sufficient.
The relevant API specifications are at:
- https://docs.microsoft.com/en-us/linkedin/shared/integrations/people/profile-api
- https://docs.microsoft.com/en-us/linkedin/shared/integrations/people/primary-contact-api
- https://docs.microsoft.com/en-us/linkedin/consumer/integrations/self-serve/migration-faq#how-do-i-retrieve-the-members-email-address
7 years ago
flarno11
8c1716d356
make userName configurable
7 years ago
Stephan Renatus
dfb2dfd333
Merge pull request #1456 from srenatus/sr/post-1448/fix-1455/restore-error-semantics
...
connectors/oidc: truely ignore "email_verified" claim if configured that way
7 years ago
Stephan Renatus
4e8cbf0f61
connectors/oidc: truely ignore "email_verified" claim if configured that way
...
Fixes #1455 , I hope.
Signed-off-by: Stephan Renatus <srenatus@chef.io>
7 years ago
Stephan Renatus
e137db978d
Merge pull request #1457 from srenatus/sr/travis/use-go-1.1{1,2}.x
...
travis: replace golang 1.10 and 1.11 with 1.12
7 years ago
Stephan Renatus
11913a28c6
travis: replace golang 1.{10,11}.x with 1.12.x
...
This is because I suspect the gofmt rules change between these versions to
make half the travis CI tests fail sometimes?
Signed-off-by: Stephan Renatus <srenatus@chef.io>
7 years ago
Stephan Renatus
49e59fb54f
Merge pull request #1448 from cappyzawa/user-id-key
...
oidc: Make userID configurable
7 years ago
cappyzawa
9650836851
make userID configurable
7 years ago
Eric Chiang
59560c9919
Merge pull request #1433 from jacksontj/userinfo
...
Add option in oidc to hit the optional userinfo endpoint
7 years ago
Thomas Jackson
52d09a2dfa
Add option in oidc to hit the optional userinfo endpoint
...
Some oauth providers return "thin tokens" which won't include all of the
claims requested. This simply adds an option which will make the oidc
connector use the userinfo endpoint to fetch all the claims.
7 years ago
Eric Chiang
cd3c6983da
Merge pull request #1429 from tsuna/master
...
server: add metrics for CORS handlers.
7 years ago