bobbyrullo
7f49efd873
Merge pull request #109 from bobbyrullo/yes_we_DO_have_TLS
...
Documentation: remove outdated TLS info
11 years ago
Bobby Rullo
bfe6cd2817
Documentation: remove outdated TLS info
11 years ago
bobbyrullo
507649750c
Merge pull request #108 from coreos/bobbyrullo-patch-1
...
Update README.md
11 years ago
bobbyrullo
1cde31af7d
Update README.md
11 years ago
bobbyrullo
0ec24a17bd
Merge pull request #104 from bobbyrullo/flags_are_good
...
cmd,server,static/html: Configurable name, logo
11 years ago
Bobby Rullo
f1820cda14
cmd,server,static/html: Configurable name, logo
...
fixes #47
11 years ago
Yifan Gu
e077803e93
Merge pull request #105 from yifan-gu/tests
...
refresh: bcrypt raw bytes rather than base64 encoded string.
11 years ago
Yifan Gu
44c6cb44f5
refresh: bcrypt raw bytes rather than base64 encoded string.
...
This enables us to control the length of the bytes that will be bcrypted,
by default it's 64.
Also changed the token's stored form from string('text') to []byte('bytea')
and added some test cases for different types of invalid tokens.
11 years ago
bobbyrullo
ff71593cd7
Merge pull request #106 from bobbyrullo/shadow_stevens
...
cmd/dex-overlord: was using the wrong err
11 years ago
Bobby Rullo
62aa12fa6c
cmd/dex-overlord: was using the wrong err
11 years ago
Yifan Gu
081bfdd13d
Merge pull request #103 from yifan-gu/offline
...
return refresh token only when scope contains 'offline_access'
11 years ago
Yifan Gu
fb72e6074a
Documentation: Update the notes on 'offline access'.
11 years ago
Yifan Gu
93a0830ae0
server: check scope in requests.
...
Require 'openid' in scope for all requests.
Require 'offline_access' for returning refresh token.
11 years ago
Yifan Gu
066fd859ec
session: add 'scope' field in session.
11 years ago
bobbyrullo
d87b5c9bfe
Merge pull request #102 from bobbyrullo/we_are_your_overlords
...
cmd/dex-overlord: bind admin API on 127.0.0.1
11 years ago
Bobby Rullo
9b64ecb2d7
cmd/dex-overlord: bind admin API on 127.0.0.1
...
Instead of 0.0.0.0; this is safer, since the admin API is very powerful.
fixes #97
11 years ago
bobbyrullo
40a0a63a3e
Merge pull request #101 from bobbyrullo/rename
...
Documentation: mv security_guide.md tls-setup.md
11 years ago
Bobby Rullo
1dd0d13ee0
Documentation: mv security_guide.md tls-setup.md
11 years ago
Yifan Gu
f1fb00efdd
Merge pull request #92 from yifan-gu/ssl
...
dex-worker: add TLS support.
11 years ago
Yifan Gu
783fa364f6
Documentation: add serity_guide.md to show how to establish TLS.
...
Also add example tls-setup configs that can be used to generate
TLS CA, server certs, key files using 'cfssl'.
11 years ago
Yifan Gu
01f95db3ca
examples: also print raw token in the result.
11 years ago
Yifan Gu
3da456efa8
dex-worker: add TLS support.
...
Add two new flags '--cert-file' and '--key-file'.
If scheme == 'https', then we will use the two new flags to get
the cert/key pair for TLS connection.
Also add '--ca-file' to the example app to allow TLS connection to the
dex-worker using a specified ca file.
11 years ago
bobbyrullo
1c85071705
Update README.md
11 years ago
bobbyrullo
7356265d68
Merge pull request #95 from bobbyrullo/fix_example
...
examples/static: various changes to fix examples
11 years ago
Bobby Rullo
abc1d365ac
examples/static: various changes to fix examples
11 years ago
bobbyrullo
8fc076af9e
Merge pull request #93 from bobbyrullo/oidc
...
OIDC Compliance Notes
11 years ago
Bobby Rullo
6d0e7e268e
Documentation: add notes on OIDC
11 years ago
bobbyrullo
9b4a264c1a
Merge pull request #89 from bobbyrullo/server_fix
...
server: make reset password pass tests
11 years ago
Bobby Rullo
bbcffde0a5
server: make reset password pass tests
...
Handler wants a password value even when its blank
11 years ago
bobbyrullo
ed0696f16b
Merge pull request #79 from bobbyrullo/intro_page
...
README.md/Documentation: Get Docs up-to-date.
11 years ago
Bobby Rullo
eb65555fe7
build-docker-push: allow override of quay repo
11 years ago
Bobby Rullo
fa96fb3a33
contrib: get standup up-to-date
...
* key_secret -> key_secrets
* make sure overlord starts up before other operations since it creates
the db
* remove race conditions by blocking on /health being up for worker and overlord
11 years ago
Bobby Rullo
5ecad3470b
Documentation: bring dev-guide up to date.
11 years ago
Bobby Rullo
3bbafaf3fe
README.md/Documentation: Get Docs up-to-date.
...
* Fix up README
* Create getting started guide.
* Start dev guide
* Start deploy guide
11 years ago
bobbyrullo
5abc7633fb
Merge pull request #87 from bobbyrullo/keyspace
...
Base64 Encode secrets, and allow >1 of them
11 years ago
Bobby Rullo
d0c199b62c
cmd, server: base64 encode multiple secrets
...
Two things here:
* key secrets are now base64 encoded strings, so we get the full key
space
* we can pass >1 of them in so we can rotate them
11 years ago
Bobby Rullo
93f4ae2ba6
pkg/crypto: Don't modify ciphertext in place.
...
mmmkay?
11 years ago
Bobby Rullo
0feb1dd719
pkg/flag: add new Base64, Base64List flag.Values
...
Allows setting of []byte's with base64 encoded strings and [][]bytes
with comma-separated base64 encoded strings.
11 years ago
Bobby Rullo
c8feb5c33d
db: PrivateKeySetRepo now takes >1 secrets
...
The first secret is used to encrypt, the rest are for decryption; if the
first doesn't work, the rest are tried in order.
The makes it possible to rotate keys.
11 years ago
Ed Rooth
8cfffcc98a
Merge pull request #85 from sym3tri/update-templates
...
static: update all static templates to be generic & prettier
11 years ago
Ed Rooth
627a4f8805
static: update all templates to be generic
11 years ago
bobbyrullo
ba7c5d5cd7
Merge pull request #84 from bobbyrullo/gorpy
...
Move gorp to its new location.
11 years ago
Bobby Rullo
74df09acb6
db: gorp moved to github.com/go-gorp/gorp
11 years ago
Bobby Rullo
50c568b9d2
godep: add github.com/go-gorp/gorp
11 years ago
bobbyrullo
72c3b0c31a
Merge pull request #82 from philips/dex-origin-story
...
README: explain the name dex
11 years ago
Brandon Philips
827a63f458
README: explain the name dex
...
People are going to ask, might as well get it out there.
11 years ago
bobbyrullo
2b23798366
Merge pull request #80 from polvi/nit
...
bug: remote whitespace so eval works
11 years ago
Alex Polvi
c7d2393add
bug: remote whitespace so eval works
11 years ago
bobbyrullo
fdce57513a
Merge pull request #77 from coreos/bobbyrullo-patch-1
...
Update Quay link, remove semaphore link
11 years ago
bobbyrullo
35d3f95bb7
Update Quay link, remove semaphore link
11 years ago