Eric Chiang
60f47c4228
Merge pull request #1427 from yann-soubeyrand/static-client-log-name
...
cmd/dex/serve.go: log static client name instead of ID
7 years ago
Yann Soubeyrand
c5f2871ab5
cmd/dex/serve.go: log static client name instead of ID
...
Signed-off-by: Yann Soubeyrand <yann.soubeyrand@gmx.fr>
7 years ago
Eric Chiang
29d8428387
Merge pull request #1426 from justaugustus/image
...
Update Docker build/image
7 years ago
Stephen Augustus
56f02b95c6
Update Docker build/image
...
- Update build container to golang:1.12.4-alpine
- Update dex image to alpine:3.9
- Run dex as non-root user
Signed-off-by: Stephen Augustus <saugustus@vmware.com>
7 years ago
Eric Chiang
f6741d1837
Merge pull request #1417 from gezb/feature/odic_add_email_verfied_override
...
Add option to OIDC connecter to override email_verified to true
7 years ago
Gerald Barker
fc723af0fe
Add option to OIDC connecter to override email_verified to true
7 years ago
Eric Chiang
83a0326b88
Merge pull request #1412 from okamototk/typo
...
Fix typo.
7 years ago
Takashi Okamoto
ac290f77aa
Fix typo.
7 years ago
Eric Chiang
c113df2730
Merge pull request #1408 from sagikazarmark/logger-interface
...
Add logger interface and stop relying on Logrus directly
7 years ago
Mark Sagi-Kazar
d877fca092
Fix coding style
7 years ago
Mark Sagi-Kazar
06521ffa49
Remove the logrus logger wrapper
7 years ago
Mark Sagi-Kazar
aec2edb441
Match the interface to logrus implementation
7 years ago
Mark Sagi-Kazar
d1c8f8d095
Remove structured logging from the logger interface
7 years ago
Eric Chiang
e913a252cd
Merge pull request #1410 from sagikazarmark/fix-typo
...
Fix typo
7 years ago
Mark Sagi-Kazar
c48cb36e8f
Fix typo
7 years ago
Eric Chiang
8b4a9bf5ee
Merge pull request #1409 from bonifaido/production-users-banzaicloud
...
production users: add Banzai Cloud
7 years ago
Nandor Kracser
6c71b330a8
production users: add Banzai Cloud
7 years ago
Mark Sagi-Kazar
be581fa7ff
Add logger interface and stop relying on Logrus directly
7 years ago
Stephan Renatus
ca66289077
Merge pull request #1402 from lstoll/lstoll-mod-fix
...
Update modules for go 1.11.4+
7 years ago
Lincoln Stoll
b96b02e506
Update modules for go 1.11.4+
...
Go 1.11.3 changed how checksums are created in some cases, which caused
failures building via modules. (ref golang/go#29278 )
Update the checksums for the failing modules.
To catch this is the future, a modules build was added to the build matrix. I
also noted that we were pinning the `.0` patchlevel of each go version which
wouldn't have picked this up, updated it to build with the latest patch
release.
7 years ago
Stephan Renatus
7bd4071b4c
Merge pull request #1396 from jtnord/useLoginId-dexidp
...
Use github login as the id
7 years ago
Stephan Renatus
815311fa19
Merge pull request #1397 from ericchiang/health-check-endpoint
...
server: update health check endpoint to query storage periodically
7 years ago
Eric Chiang
8935a1479c
server: update health check endpoint to query storage periodically
...
Instead of querying the storage every time a health check is performed
query it periodically and save the result.
7 years ago
James Nord
fe247b106b
remove blank line that tripped up `make verify-proto`
7 years ago
James Nord
9840fccdbb
rename useLoginAsId -> useLoginAsID
7 years ago
Stephan Renatus
be171a2a53
Merge pull request #1395 from hainesc/master
...
Display access token in example app
7 years ago
Joel Speed
8f113548a5
Merge pull request #1249 from srenatus/sr/add-ldap-filter-test
...
ldap_test: add filter tests
7 years ago
Stephan Renatus
b6f4740a15
Merge pull request #1390 from okamototk/activedirectory
...
Add Active Directory and kubelogin integration sample.
7 years ago
Stephan Renatus
df18cb0c22
ldap_test: add filter tests
...
The filters for user and group searches hadn't been included in our LDAP
tests. Now they are.
The concrete test cases are somewhat contrived, but that shouldn't
matter too much. Also note that the example queries I've used are not
supported in AD: https://stackoverflow.com/a/10043452
Signed-off-by: Stephan Renatus <srenatus@chef.io>
7 years ago
James Nord
5822a5ce9e
fix formatting of connector/github/github_test.go
7 years ago
James Nord
1911b52c6b
Add documentation for the new GitHub useLoginAsId option
7 years ago
James Nord
03ffd0798c
Allow an option to use the github user handle rather than an id.
...
For downstream apps using a github handle is much simpler than working
with numbers.
WHilst the number is stable and the handle is not - GitHUb does give you
a big scary wanring if you try and change it that bad things may happen
to you, and generally few users ever change it.
This can be enabled with a configuration option `useLoginAsId`
7 years ago
Haines Chan
18b6b34b67
Display access token in example app
7 years ago
Stephan Renatus
b5826e66f0
Merge pull request #1394 from srenatus/sr/docs/maintainers
...
update MAINTAINERS, mirror guidelines into dev doc
7 years ago
Stephan Renatus
81f155882a
Merge pull request #1392 from stevendanna/tls-configuration
...
Bump minimum TLS protocol to TLSv1.2
7 years ago
Steven Danna
59f8b02d47
Set minimum TLS protocol version to TLSv1.2, set PreferServerCipherSuites
...
Some environments are subject to strict rules about the permitted TLS
protocol verion and available ciphers. Setting TLSv1.2 as the minimum
version ensures we do not use weaker protocols. We've opted against
making this configurable given the age of TLSv1.2 and the increasing
push to deprecate TLSv1.1 and older.
The PreferServerCipherSuites setting is also commonly flagged by SSL
quality scanning tools. Since Go provides a relatively modern set of
default ciphers by default, defaulting this to true is unlikely to
make much practical difference.
Signed-off-by: Steven Danna <steve@chef.io>
7 years ago
Stephan Renatus
4abf3b2102
docs: mirror resolution of #1281 in dev doc
...
Signed-off-by: Stephan Renatus <srenatus@chef.io>
7 years ago
Stephan Renatus
2cfadcd95a
MAINTAINERS: add @JoelSpeed
...
Signed-off-by: Stephan Renatus <srenatus@chef.io>
7 years ago
Takashi Okamoto
337bbe5f09
fix typos.
7 years ago
Takashi Okamoto
1b7b3515d7
Add Active Directory instruction.
7 years ago
Takashi Okamoto
fbdb55aba9
Add doc for kubelogin and Active Directory ingtegration sample.
7 years ago
Takashi Okamoto
2d7de4ec70
Add Active Directory and kubeloing integration sample.
7 years ago
Stephan Renatus
5ae094206b
Merge pull request #1389 from ericchiang/bump-go
...
Dockerfile: update Go to 1.11.5
7 years ago
Eric Chiang
86eeee2ae2
Dockerfile: update Go to 1.11.5
7 years ago
Stephan Renatus
f1581ff873
Merge pull request #1374 from kbalka/keystone-connector
...
PR contains connector for openstack keystone.
Features:
access tokens
refresh tokens
groups
Requirements:
access to openstack keystone instance
keystone administrative account credentials
Enabling keystone connector specific tests:
make sure docker is running
export DEX_TEST_KEYSTONE=1
make tests
7 years ago
Krzysztof Balka
e8ba848907
keystone: fetching groups only if requested, refactoring.
7 years ago
joannano
88d1e2b041
keystone: test cases, refactoring and cleanup
7 years ago
Krzysztof Balka
a965365a2b
keystone: refresh token and groups
7 years ago
knangia
0774a89066
keystone: squashed changes from knangia/dex
7 years ago
Stephan Renatus
2d1ac74ec0
Merge pull request #1380 from dkess/emailsuffix
...
LDAP connector - add emailSuffix config option
7 years ago