mirror/dex - dex - xhrpb gitea

Commit Graph

Author	SHA1	Message	Date
Maksim Nabokikh	81af48862b	Remove additional features and add a feature flag instead (#3663 ) Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	2 years ago
Maksim Nabokikh	225660785c	Enrich Dex logs with real IP and request ID (#3661 ) Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com> Signed-off-by: Maksim Nabokikh <max.nabokih@gmail.com> Co-authored-by: Márk Sági-Kazár <sagikazarmark@users.noreply.github.com>	2 years ago
Giovanni Campeol	b07e1bc9f1	gRPC Connectors API (#3245 ) Signed-off-by: Giovanni Campeol <giovanni.campeol.95@gmail.com> Signed-off-by: Maksim Nabokikh <maksim.nabokikh@flant.com> Co-authored-by: Maksim Nabokikh <maksim.nabokikh@flant.com>	2 years ago
Nicolas Lamirault	bd73825eda	new Prometheus metrics build_info (#3558 ) Signed-off-by: Nicolas Lamirault <nicolas.lamirault@gmail.com>	2 years ago
Richard Gomez	6fca251dc1	Gracefully handle no args being passed to entrypoint (#3589 ) Signed-off-by: Richard Gomez <rmgomez368@gmail.com>	2 years ago
Maksim Nabokikh	203b084e17	Fix slog nil pointer error (#3563 ) The problem caused by the mistake in the newLogger function. The nil value is returned even with the valid log format. Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	2 years ago
Sean Liao	0b6a78397e	use slog for structured logging (#3502 ) Signed-off-by: Sean Liao <sean+git@liao.dev>	2 years ago
Maksim Nabokikh	088339fc28	Add headers control to dex web server (#3339 ) Customization of headers in the authentication server is crucial for enforcing stringent security measures by allowing the inclusion of specific headers required for authentication protocols and compliance standards. This customization ensures that authentication requests are processed securely, mitigating potential vulnerabilities and ensuring adherence to security policies. Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	2 years ago
Tuomo Tanskanen	5bbdb44202	feat: add TLS versions configuration Add configuration options for TLSMinVersion and TLSMaxVersion. This enables setting TLS 1.3 as minimum version for example for both GRPC and Web, or enforcing TLS 1.2 only for easier debugging of secure connections. Signed-off-by: Tuomo Tanskanen <tuomo.tanskanen@est.tech>	2 years ago
m.nabokikh	08348242a7	Introduce a dedicated pkg for featureflags Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	2 years ago
Tuomo Tanskanen	8cf9094871	bug: return initialConfig instead of empty tlsConfig When TLS certificate reloading functionality was implemented and released in Dex 2.37.0, added newTLSReloader() returns empty tlsConfig and discards the provided, already configured tlsConfig. Server's with empty tlsConfig override Go's sensible defaults, and starts serving Dex over TLS 1.0 and TLS 1.1 in addition to Go's defaults TLS 1.2+. TLS 1.0 and 1.1 are long deprecated and vulnerable, making this a security risk. Server and its secrets are vulnerable to attackers.	2 years ago
Maksim Nabokikh	4f307d70c6	Fix lint errors after merging AllowedHeaders feature (#3247 ) Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	2 years ago
Josiah Evans	dce31d82ea	feat: Add configurable CORS Headers (#3114 ) Signed-off-by: Josiah Evans <josiah.evans@lunit.io>	2 years ago
Sean Liao	dcf7b18510	OAuth 2.0 Token Exchange (#2806 ) Signed-off-by: Sean Liao <sean+git@liao.dev> Co-authored-by: Maksim Nabokikh <max.nabokih@gmail.com>	3 years ago
Sean Liao	074ee4f964	TLS certs reloader (#2964 ) Signed-off-by: Sean Liao <sean+git@liao.dev>	3 years ago
m.nabokikh	6822ad950f	feat: enable profiling endpoints Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	4 years ago
Andrew Keesler	764ce711b6	distroless: rewrite docker-entrypoint.sh in go See go doc ./cmd/docker-entrypoint for why. Signed-off-by: Andrew Keesler <akeesler@vmware.com>	4 years ago
iam-veeramalla	528ef18c2f	feat: print dex version in the logs Signed-off-by: iam-veeramalla <abhishek.veeramalla@gmail.com>	4 years ago
Eng Zer Jun	f0186ff265	refactor: move from io/ioutil to io and os package The io/ioutil package has been deprecated as of Go 1.16, see https://golang.org/doc/go1.16#ioutil. This commit replaces the existing io/ioutil functions with their new definitions in io and os packages. Signed-off-by: Eng Zer Jun <engzerjun@gmail.com>	5 years ago
m.nabokikh	eae3219e4d	feat: Add MySQL ent-based storage driver Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	5 years ago
Mark Sagi-Kazar	a207238491	chore: fix lint issues Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>	5 years ago
Mark Sagi-Kazar	0bef10ef80	chore(deps): update gosundheit Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>	5 years ago
Maksim Nabokikh	20875c972e	Discard package "version" (#2107 ) * Discard package "version" Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com> * Inject api version Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com> * Pass version arg to the dex API Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	5 years ago
m.nabokikh	19884d92ac	feat: Add ent-based postgres storage Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	5 years ago
m.nabokikh	11859166d0	feat: Add ent-based sqlite3 storage Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	5 years ago
Mark Sagi-Kazar	a050f3228a	feat: add DEX_FRONTEND_DIR env var for setting the frontend dir Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>	5 years ago
Rui Yang	4e569024fd	use go 1.16 new package io/fs Unify the interface for reading web statics. Now it could read an OS directory or get the content on live One could use //go:embed static var webFiles embed.FS anywhere and config dex server to take the file system by setting WebConfig{WebFS: webFiles} Signed-off-by: Rui Yang <ruiya@vmware.com> Co-authored-by: Aidan Oldershaw <aoldershaw@pivotal.io>	5 years ago
Rui Yang	7b50cbf0ac	use pkger for embedding static contents Co-authored-by: Vikram Yadav <vyadav@pivotal.io> Signed-off-by: Rui Yang <ruiya@vmware.com>	5 years ago
Rui Yang	10e9054811	Use http.FileSystem for web assets	5 years ago
Maksim Nabokikh	568fc06520	Update server/refreshhandlers.go Co-authored-by: Joel Speed <Joel.speed@hotmail.co.uk> Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	5 years ago
Mark Sagi-Kazar	24a1103f11	refactor: rename gr to group Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>	5 years ago
Mark Sagi-Kazar	9cffca70f2	refactor: relocate run group initialization Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>	5 years ago
m.nabokikh	87ebbaf834	fix: close storage on shutdown Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	5 years ago
Mark Sagi-Kazar	316da70545	refactor: use new health checker Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>	5 years ago
Mark Sagi-Kazar	d77147f7cf	refactor: fix router variable name Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>	5 years ago
Mark Sagi-Kazar	024f69b2c7	feat: add health check to telemetry server Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>	5 years ago
m.nabokikh	06c8ab5aa7	Fixes of naming and code style Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	5 years ago
m.nabokikh	91de99d57e	feat: Add refresh token expiration and rotation settings Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	5 years ago
Maksim Nabokikh	6664b5702d	Apply suggestions from code review Co-authored-by: Márk Sági-Kazár <sagikazarmark@users.noreply.github.com> Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	5 years ago
Maksim Nabokikh	65a8bf2af3	feat: graceful shutdown fixes Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	5 years ago
m.nabokikh	f82c217e12	feat: graceful shutdown Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	5 years ago
Mark Sagi-Kazar	6742008fc2	refactor: version command Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>	5 years ago
Mark Sagi-Kazar	c55d84b5d2	feat: add flags for bind address config options Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>	5 years ago
Mark Sagi-Kazar	cdefd1f788	refactor: serve command Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>	5 years ago
Martin Heide	4cb5577e11	Allow to disable os.ExpandEnv for storage + connector configs by env variable DEX_EXPAND_ENV = false Signed-off-by: Martin Heide <martin.heide@faro.com>	5 years ago
Mark Sagi-Kazar	349832b380	Run fixer Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>	5 years ago
m.nabokikh	1d83e4749d	Add gocritic Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>	5 years ago
Mark Sagi-Kazar	6dadc26ca2	Move the example app to th examples folder Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>	6 years ago
justin-slowik	1ea2892b79	fix merge error in config.go Signed-off-by: justin-slowik <justin.slowik@thermofisher.com>	6 years ago
Justin Slowik	9bbdc721d5	Device flow token code exchange (#2 ) * Added /device/token handler with associated business logic and storage tests. Perform user code exchange, flag the device code as complete. Moved device handler code into its own file for cleanliness. Cleanup * Removed PKCE code * Rate limiting for /device/token endpoint based on ietf standards * Configurable Device expiry Signed-off-by: justin-slowik <justin.slowik@thermofisher.com>	6 years ago

1 2 3 4

153 Commits (v2.41.0)