Mark Sagi-Kazar
e230d9426d
test: use new Go features in tests
...
Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>
7 months ago
Wenxuan Zhao
be868b9f7c
fix: join issuer URL with discovery path without extra slash after issuer URL
...
Signed-off-by: Wenxuan Zhao <viz@linux.com>
7 months ago
Julius Foitzik
e7ea9d769c
fix: fork was outdated for some reason
...
Signed-off-by: Julius Foitzik <info@accountr.eu>
8 months ago
Julius Foitzik
9791d86e9a
chore: add minor comment
...
Signed-off-by: Julius Foitzik <info@accountr.eu>
8 months ago
Julius Foitzik
e7b151c386
feat: grpc api list clients
...
refers to https://github.com/dexidp/dex/issues/3496
Signed-off-by: Julius Foitzik <info@accountr.eu>
8 months ago
Doug Goldstein
d6237a8a6e
fix: device code should not require scope
...
As per RFC8628 section 3.1, https://datatracker.ietf.org/doc/html/rfc8628#section-3.1
the scope is optional. Since dex always requires at least 'openid',
default the value to comply with the RFC.
Signed-off-by: Doug Goldstein <cardoe@cardoe.com>
9 months ago
Doug Goldstein
fbcc76f779
fix: device code pending HTTP response
...
As per RFC8628 section 3.5, https://datatracker.ietf.org/doc/html/rfc8628#section-3.5
the authorization_pending response should extend RFC6749 section 5.2,
https://datatracker.ietf.org/doc/html/rfc6749#section-5.2 which
specifies that the HTTP response code should be 400, Bad Request.
Signed-off-by: Doug Goldstein <cardoe@cardoe.com>
9 months ago
Manoj Vivek
87ec9e077e
Allow server startup with partial connector failures ( #4159 )
...
Signed-off-by: Manoj Vivek <p.manoj.vivek@gmail.com>
9 months ago
Oleksandr Redko
9891daa585
refactor: simplify tests by using slog.DiscardHandler ( #4058 )
...
Signed-off-by: Oleksandr Redko <oleksandr.red+github@gmail.com>
12 months ago
Massimiliano Filacchioni
6e0cbdf972
Generate access tokens for implicit & hybrid flows only when needed ( #3857 )
...
Avoid access token generation when response_type is either "id_token"
(for implicit flow) or "code id_token" (for hybrid flow).
Signed-off-by: Massimiliano Filacchioni <m.filacchioni@gmail.com>
1 year ago
Mark Sagi-Kazar
76de7b3920
build: update Go to 1.24
...
Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>
1 year ago
Bob Maertz
ad31b5d6f7
Passing context storage ( #3941 )
...
Signed-off-by: Bob Maertz <1771054+bobmaertz@users.noreply.github.com>
1 year ago
Mark Sagi-Kazar
c7fd9620aa
chore: fix linter config and violations
...
Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>
1 year ago
Nicholas Wiersma
d521051e33
feat: set resource revision for connectors ( #3868 )
...
Signed-off-by: Nicholas Wiersma <nick@wiersma.co.za>
1 year ago
Maksim Nabokikh
bb985ca0ea
Create offline sessions if approval is skipped ( #3828 )
...
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
1 year ago
Maksim Nabokikh
4bb97c73a9
Handle root path better (than nothing) ( #3747 )
...
Signed-off-by: maksim.nabokikh <max.nabokih@gmail,com>
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
1 year ago
Daniël Sonck
e7c0682e45
feat: also allow localhost equivalent IP addresses ( #3778 )
...
Instead of only checking for "localhost", also validate through
net.ParseIP + IsLoopback whether the host is numerically localhost
Signed-off-by: Daniel Sonck <daniel@sonck.nl>
1 year ago
IvoGoman
1a16aa4889
feat(metrics): add response_size, request_duration histograms ( #3748 )
...
replaces felixge/httpsnoop with prometheus/client_golang instrumentation
adds histograms for response_size_bytes & request_duration_seconds
Signed-off-by: Ivo Gosemann <ivo.gosemann@sap.com>
2 years ago
Koen de Laat
d0f1777c41
Added Discovery to grpc ( #3598 )
...
Signed-off-by: Koen de Laat <koen.de.laat@philips.com>
2 years ago
Maksim Nabokikh
81af48862b
Remove additional features and add a feature flag instead ( #3663 )
...
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
2 years ago
Maksim Nabokikh
225660785c
Enrich Dex logs with real IP and request ID ( #3661 )
...
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
Signed-off-by: Maksim Nabokikh <max.nabokih@gmail.com>
Co-authored-by: Márk Sági-Kazár <sagikazarmark@users.noreply.github.com>
2 years ago
Giovanni Campeol
b07e1bc9f1
gRPC Connectors API ( #3245 )
...
Signed-off-by: Giovanni Campeol <giovanni.campeol.95@gmail.com>
Signed-off-by: Maksim Nabokikh <maksim.nabokikh@flant.com>
Co-authored-by: Maksim Nabokikh <maksim.nabokikh@flant.com>
2 years ago
Sean Liao
0b6a78397e
use slog for structured logging ( #3502 )
...
Signed-off-by: Sean Liao <sean+git@liao.dev>
2 years ago
Maksim Nabokikh
caae8a8f82
Bump google.golang.org/grpc to v1.64.0 ( #3553 )
...
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
2 years ago
Romain Caire
86e92aaf1a
fix: wrong error code returned in case of inactive token ( #3441 )
...
Signed-off-by: Romain Caire <super.cairos@gmail.com>
2 years ago
Romain Caire
8755308759
[RFC7662] Add introspect endpoint to introspect access & refresh token ( #3404 )
...
Signed-off-by: Romain Caire <super.cairos@gmail.com>
2 years ago
Maksim Nabokikh
088339fc28
Add headers control to dex web server ( #3339 )
...
Customization of headers in the authentication server is crucial for enforcing stringent security measures by allowing the inclusion of specific headers required for authentication protocols and compliance standards. This customization ensures that authentication requests are processed securely, mitigating potential vulnerabilities and ensuring adherence to security policies.
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
2 years ago
Maksim Nabokikh
60ddd188c0
Update go-jose to v4.0.1 ( #3409 )
...
Signed-off-by: Matthias Loibl <mail@matthiasloibl.com>
Signed-off-by: Maksim Nabokikh <maksim.nabokikh@flant.com>
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
Co-authored-by: Matthias Loibl <mail@matthiasloibl.com>
2 years ago
Mark Sagi-Kazar
70b32eeccc
chore: regenerate proto
...
Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>
2 years ago
i-amelia
457e133d39
Log failed login attempt ( #2454 )
...
Signed-off-by: i312042 <viktoria.lyomcheva@sap.com>
Co-authored-by: i312042 <viktoria.lyomcheva@sap.com>
2 years ago
MM53
a0cf8b2dc2
fix: Do not evaluate skipApproval on approval page ( #3086 )
...
Signed-off-by: MM53 <28218664+MM53@users.noreply.github.com>
2 years ago
Ferenc Fabian
2377b0a0cd
Add context to storage's Create endpoints ( #2935 )
...
* Initial commit
Signed-off-by: PumpkinSeed <qwer.kocka@gmail.com>
* Finish the syntex fixes
Signed-off-by: PumpkinSeed <qwer.kocka@gmail.com>
* Add fixes after running the tests
Signed-off-by: PumpkinSeed <qwer.kocka@gmail.com>
* Change background context to request context
Signed-off-by: PumpkinSeed <qwer.kocka@gmail.com>
---------
Signed-off-by: PumpkinSeed <qwer.kocka@gmail.com>
2 years ago
Maksim Nabokikh
4f307d70c6
Fix lint errors after merging AllowedHeaders feature ( #3247 )
...
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
2 years ago
Josiah Evans
dce31d82ea
feat: Add configurable CORS Headers ( #3114 )
...
Signed-off-by: Josiah Evans <josiah.evans@lunit.io>
2 years ago
MM53
efc2fdb102
Store offline sessions only if they were requested by the user ( #3125 )
...
Signed-off-by: MM53 <2821Signed-off-by: MM53 <28218664+MM53@users.noreply.github.com>
2 years ago
Cedric-Magnan
139845c0a5
fix: linting with gofmt
...
Signed-off-by: Cedric-Magnan <cedric.magnan@artefact.com>
Signed-off-by: Oded Ben-Ozer <obenozer@wayfair.com>
3 years ago
Cedric-Magnan
a72413dd47
Update server.go
...
Signed-off-by: Cedric-Magnan <cedric.magnan@artefact.com>
Signed-off-by: Oded Ben-Ozer <obenozer@wayfair.com>
3 years ago
Cedric-Magnan
6c00fe0580
Update oauth2.go
...
Signed-off-by: Cedric-Magnan <cedric.magnan@artefact.com>
Signed-off-by: Oded Ben-Ozer <obenozer@wayfair.com>
3 years ago
Marco Franssen
895b166681
Implement GetClient gRPC endpoint ( #2972 )
...
Signed-off-by: Marco Franssen <marco.franssen@gmail.com>
3 years ago
Sean Liao
dcf7b18510
OAuth 2.0 Token Exchange ( #2806 )
...
Signed-off-by: Sean Liao <sean+git@liao.dev>
Co-authored-by: Maksim Nabokikh <max.nabokih@gmail.com>
3 years ago
Cedric-Magnan
7e4798a7a4
fix: linting with gofmt
...
Signed-off-by: Cedric-Magnan <cedric.magnan@artefact.com>
3 years ago
Cedric-Magnan
791657276e
Update server.go
...
Signed-off-by: Cedric-Magnan <cedric.magnan@artefact.com>
3 years ago
Cedric-Magnan
212df8e0ee
Update oauth2.go
...
Signed-off-by: Cedric-Magnan <cedric.magnan@artefact.com>
3 years ago
Josh Soref
e15b599e6a
spelling: programmatically
...
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>
3 years ago
Josh Soref
a1a05c4a65
spelling: nonexistent
...
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>
3 years ago
Josh Soref
6af340af94
spelling: in spite
...
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>
3 years ago
Josh Soref
542cb4cb65
spelling: data with
...
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>
3 years ago
Maksim Nabokikh
28aaa8f511
fix: Do not skip approval screen by default ( #2897 )
...
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
3 years ago
Mark Sagi-Kazar
d8f2628a84
chore: regenerate proto
...
Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>
3 years ago
Maksim Nabokikh
fc0e2e9383
feat: Add default robots.txt ( #2834 )
...
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
3 years ago