Nándor István Krácser
6d41541964
Merge pull request #1544 from kenperkins/saml-groups
...
Adding support for allowed groups in SAML Connector
6 years ago
Nándor István Krácser
f2590ee07d
Merge pull request #1545 from jacksontj/getUserInfo
...
Run getUserInfo prior to claim enforcement
6 years ago
Nándor István Krácser
d5d3abca6a
Merge pull request #1566 from dexidp/preferred_username
...
add preffered_username to idToken
6 years ago
Nándor István Krácser
0b56a47571
Merge pull request #1558 from aijingyc/fix_readme_branch
...
Fix URLs in curl cmd as stated in the overview doc.
6 years ago
Nándor István Krácser
799f29fdb5
Merge pull request #1571 from gosharplite/patch-1
...
Fix typo
6 years ago
Nándor István Krácser
a58d77a499
Merge pull request #1550 from dexidp/mysql-tx-isolation
...
storage/mysql: support pre-5.7.20 instances with tx_isolation only
6 years ago
Nándor István Krácser
0b55f121b4
Fix missing email in log message
...
Co-Authored-By: Felix Fontein <ff@dybuster.com>
6 years ago
Nándor István Krácser
3f8fd74185
Merge pull request #1568 from life1347/patch-1
...
Add note for redirect uri
6 years ago
Nandor Kracser
c1b421fa04
add preffered_username to idToken
...
Signed-off-by: Nandor Kracser <bonifaido@gmail.com>
6 years ago
Tony Hsu
6e35f24399
Fix typo
6 years ago
Ta-Ching Chen
76c76a0b39
Add note for redirect uri
7 years ago
Joel Speed
4bede5eb80
Merge pull request #1554 from yanniszark/feature-web-templates-use-relative-urls
...
server: templates: use relative URLs to refer to assets
7 years ago
Yannis Zarkadas
69d13b766d
gitignore: add .idea folder
...
Signed-off-by: Yannis Zarkadas <yanniszark@arrikto.com>
7 years ago
Yannis Zarkadas
59beb7425f
web: change header template to use new url function
...
Signed-off-by: Yannis Zarkadas <yanniszark@arrikto.com>
7 years ago
Yannis Zarkadas
27944d4f8f
templates: add new relativeURL function
...
Signed-off-by: Yannis Zarkadas <yanniszark@arrikto.com>
7 years ago
Yannis Zarkadas
839130f01c
handlers: change all handlers to pass down http request
...
Signed-off-by: Yannis Zarkadas <yanniszark@arrikto.com>
7 years ago
j.ai
2c52c52686
Fix URLs in curl cmd as stated in the overview doc.
7 years ago
Nandor Kracser
d2c33db8a8
storage/mysql: support pre-5.7.20 instances with tx_isolation only
7 years ago
Thomas Jackson
512cb3169e
Run getUserInfo prior to claim enforcement
...
If you have an oidc connector configured *and* that IDP provides thin
tokens (e.g. okta) then the majority of the requested claims come in the
getUserInfo call (such as email_verified). So if getUserInfo is
configured it should be run before claims are validated.
7 years ago
Ken Perkins
285c1f162e
connector/saml: Adding group filtering
...
- 4 new tests
- Doc changes to use the group filtering
7 years ago
Stephan Renatus
8427f0f15c
Merge pull request #1543 from wassan128/fix-typo
...
Fix typo
7 years ago
wassan128
42e8619830
Fix typo
7 years ago
Stephan Renatus
3b7292a08f
Merge pull request #1520 from dexidp/gitlab-groups-scope
...
gitlab: add groups scope by default when filtering is requested
7 years ago
Joel Speed
179cce36ef
Merge pull request #1540 from stevendanna/ssd/cipher-suites
...
Use a more conservative set of CipherSuites
7 years ago
Steven Danna
46f48b33a1
Use a more conservative set of CipherSuites
...
The default cipher suites used by Go include a number of ciphers that
have known weaknesses. In addition to leaving users open to these
weaknesses, the inclusion of these weaker ciphers causes problems with
various automated scanning tools.
This PR disables the CBC-mode, RC4, and 3DES ciphers included in the
Go standard library by passing an explicit cipher suite list.
The ciphers included here are more line with those recommended by
Mozilla for "Intermediate" compatibility. [0]
*Performance Implications*
The Go standard library does capability-based cipher ordering,
preferring AES ciphers if the underlying hardware has AES specific
instructions. [1] Since all of the relevant code is internal modules,
to do the same thing ourselves would require duplicating that
code. Here, I've placed AES based ciphers first.
*Compatibility Implications*
This does reduce the number of clients who will be able to communicate
with dex.
[0] https://ssl-config.mozilla.org/#server=nginx&server-version=1.17.0&config=intermediate&hsts=false&ocsp=false
[1] a8c2e5c6ad/src/crypto/tls/common.go (L1091)
Signed-off-by: Steven Danna <steve@chef.io>
7 years ago
Stephan Renatus
c854e760db
Merge pull request #1539 from erwinvaneyk/replace-context-import
...
Replace x/net/context with stdlib context
7 years ago
erwinvaneyk
3e2217b3f4
Replace x/net/context with context of stdlib
7 years ago
Stephan Renatus
4f3ab1efb7
Merge pull request #1534 from jthabet/master
...
Pydio Cells adopters list
7 years ago
Stephan Renatus
15ec95bca9
Merge pull request #1521 from erwinvaneyk/patch-1
...
Clarify the origin of the ca file in the Kubernetes guide
7 years ago
Erwin van Eyk
5c99525ed3
Clarify the origin of openid-ca
7 years ago
j
a48f73f14a
Pydio Cells adopters list
7 years ago
Stephan Renatus
133c2565be
Merge pull request #1530 from dexidp/ldap-error
...
connector/ldap: display login error
7 years ago
Stephan Renatus
1f31d1889a
Merge pull request #1529 from dkuerner/golang-update
...
Dockerfile: build with golang 1.12.9
7 years ago
Nandor Kracser
bd61535cb6
connector/ldap: display login error
7 years ago
Daniel Kürner
2dccdc2a1a
Dockerfile: build with golang 1.12.9
7 years ago
Joel Speed
ab08d7b3a4
Merge pull request #1517 from venezia/iss-1513
...
storage/kubernetes: Removing Kubernetes TPR support
7 years ago
Michael Venezia
395febf808
storage/kubernetes: Removing Kubernetes TPR support
...
Third Party Resources (TPR) have been removed from Kubernetes for
roughly 2 years. This commit removes the support dex had for them.
Documentation has been updated to reflect this and to instruct users
on how to migrate from TPR-powered dex environment to a Custom Resource
Defintion (CRD) based one that dex > v2.17 will support
7 years ago
Nandor Kracser
ef08ad8317
gitlab: add groups scope by default when filtering is requested
7 years ago
Stephan Renatus
aeb2861a40
Merge pull request #1519 from dexidp/sr/bump-deps-for-http2-issues
...
bump deps for http2 issues
https://github.com/grpc/grpc-go/releases/tag/v1.23.0
https://groups.google.com/forum/#!topic/golang-nuts/fCQWxqxP8aA
7 years ago
Stephan Renatus
6e5a2b5ea1
deps: bump go-grpc (1.22.1 -> 1.23.0)
...
Signed-off-by: Stephan Renatus <srenatus@chef.io>
7 years ago
Stephan Renatus
27b8426704
Dockerfile: build with golang 1.12.8
...
Signed-off-by: Stephan Renatus <srenatus@chef.io>
7 years ago
Stephan Renatus
d328a5ebaa
Merge pull request #1516 from tpdownes/doc/oauth2_config
...
Add examples for recent additions to oauth2 configuration options
7 years ago
Tom Downes
963b8e992d
Add examples for recent additions to oauth2 configuration options
7 years ago
Stephan Renatus
d9f6ab4a68
Merge pull request #1512 from venezia/add_reflection
...
Add reflection to gRPC API (configurable)
7 years ago
Michael Venezia
430357b14e
vendor: revendor
7 years ago
Michael Venezia
b65966d744
cmd/dex: adding reflection to grpc api, enabled through configuration
7 years ago
Stephan Renatus
e1afe771cb
Merge pull request #1505 from MarcDufresne/show-login-page
...
Add option to always display connector selection even if there's only one
7 years ago
Stephan Renatus
89e43c198b
Merge pull request #1504 from MarcDufresne/template-custom-data
...
Allow arbitrary data to be passed to templates
7 years ago
Marc-André Dufresne
0dbb642f2c
Add option to always display connector selection even if there's only one
7 years ago
Marc-André Dufresne
d458e882aa
Allow arbitrary data to be passed to templates
7 years ago