Commit Graph

  • 8e135a4744 fix(deviceflow): update redirect URIs to use absolute paths for non-root URLs maksim.nabokikh 2026-02-27 17:51:24 +0100
  • 99c423364e
    fix: fix typo in grpc listener error message (#4598) kt 2026-02-28 23:20:33 +0900
  • d4a6476e6b fix: fix typo in grpc listener error message kanywst 2026-02-28 11:50:20 +0900
  • e1d6c38ca2
    fix: Invert condition for unknown fields in config unmarshaller (#4596) Maksim Nabokikh 2026-02-27 09:04:29 +0100
  • 7b61a2257c
    fix: Invert condition for unknown fields in config unmarshaller Maksim Nabokikh 2026-02-27 08:56:07 +0100
  • e5c14f1c7c
    build(deps): bump distroless/static-debian13 from `01e550f` to `f512d81` (#4593) dependabot[bot] 2026-02-27 08:13:58 +0100
  • e5e64c64c0
    build(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0 (#4594) dependabot[bot] 2026-02-27 08:13:41 +0100
  • 8ab16cfe02
    build(deps): bump actions/attest-build-provenance from 4.0.0 to 4.1.0 (#4595) dependabot[bot] 2026-02-27 08:06:59 +0100
  • 7cd9d6c4b2
    build(deps): bump actions/attest-build-provenance from 4.0.0 to 4.1.0 dependabot[bot] 2026-02-27 04:02:59 +0000
  • 59957b7e9e
    build(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0 dependabot[bot] 2026-02-27 04:02:44 +0000
  • 572b084491
    build(deps): bump distroless/static-debian13 from `01e550f` to `f512d81` dependabot[bot] 2026-02-27 04:02:42 +0000
  • 0b94f61ea4 feat: add per-client and connector-level allowedGroups Dmitiy Gushchin 2026-02-27 00:45:04 +0300
  • 47e84dba69
    feat(connector): add compile-time checks for connector interfaces (#4591) Maksim Nabokikh 2026-02-26 16:43:17 +0100
  • 3146569432 feat(connector): add compile-time checks for connector interfaces maksim.nabokikh 2026-02-26 16:33:38 +0100
  • ef8cbcfaf4 feat: add integration tests for authproxy connector with nginx configuration maksim.nabokikh 2026-02-26 16:10:00 +0100
  • 09a47180ba feat: add integration tests for authproxy connector with nginx configuration maksim.nabokikh 2026-02-26 15:57:47 +0100
  • 44e27490be
    fix(connector): update authproxy and oauth to match CallbackConnector interface (#4589) Mathias Gebbe 2026-02-26 16:09:07 +0100
  • 4cdfc8c3d0
    fix(connector): update authproxy and oauth to match CallbackConnector interface Mathias Gebbe 2026-02-26 15:26:37 +0100
  • 1ce63cc03f
    Merge branch 'master' into feat/add-client-credential-flow Maksim Nabokikh 2026-02-26 15:35:36 +0100
  • 4311931881
    feat: saml support refresh tokens (#4565) Ivan Zviagintsev 2026-02-26 17:27:47 +0300
  • ed0b5e5319
    Apply suggestions from code review Maksim Nabokikh 2026-02-26 15:15:46 +0100
  • 898fb26d36
    Merge branch 'master' into feat/add-client-credential-flow Maksim Nabokikh 2026-02-26 15:09:04 +0100
  • d78d744468
    feat: Disallow unknown config fields (#4531) Maksim Nabokikh 2026-02-26 13:35:50 +0100
  • 49dcb4d863
    fix: clean up in-memory connector before create (#4529) Andy Lo-A-Foe 2026-02-26 13:19:11 +0100
  • 875fdf0516
    Fix formatting Andy Lo-A-Foe 2026-02-26 10:13:24 +0100
  • 3295c72066
    build(deps): bump actions/attest-build-provenance from 3.2.0 to 4.0.0 (#4585) dependabot[bot] 2026-02-26 08:09:54 +0100
  • c0daa71ec7
    build(deps): bump golang.org/x/net from 0.50.0 to 0.51.0 (#4586) dependabot[bot] 2026-02-26 08:09:31 +0100
  • 9cd6668f40
    build(deps): bump anchore/sbom-action from 0.22.2 to 0.23.0 (#4587) dependabot[bot] 2026-02-26 08:09:12 +0100
  • 4c3dffdb94
    build(deps): bump actions/setup-go from 6.2.0 to 6.3.0 (#4584) dependabot[bot] 2026-02-26 08:08:55 +0100
  • b8c8555841
    build(deps): bump anchore/sbom-action from 0.22.2 to 0.23.0 dependabot[bot] 2026-02-26 04:02:55 +0000
  • c4605d8f99
    build(deps): bump golang.org/x/net from 0.50.0 to 0.51.0 dependabot[bot] 2026-02-26 04:02:53 +0000
  • 319a4f19fc
    build(deps): bump actions/attest-build-provenance from 3.2.0 to 4.0.0 dependabot[bot] 2026-02-26 04:02:49 +0000
  • 1175a65a4a
    build(deps): bump actions/setup-go from 6.2.0 to 6.3.0 dependabot[bot] 2026-02-26 04:02:43 +0000
  • 959e1b6cf7
    fix: clean up in-memory connector after delete. Andy Lo-A-Foe 2026-02-11 22:22:21 +0100
  • 2dcd9b937d
    docs(example): modify comment for client_credentials Mathias Gebbe 2026-02-25 22:51:11 +0100
  • 2f3c5a5314
    refactor(oauth2): remove dead feature flag check from server.go Mathias Gebbe 2026-02-25 22:46:17 +0100
  • 36ea47c0f0
    fix(cmd): include client_credentials in default grants when feature flag is enabled Mathias Gebbe 2026-02-25 22:16:01 +0100
  • afc02eecc6
    feat(oauth2): gate client_credentials behind feature flag Mathias Gebbe 2026-02-25 21:55:52 +0100
  • 3c10d71ed7
    fix(oauth2): use empty connector ID and pass nonce for client_credentials Mathias Gebbe 2026-02-25 21:55:34 +0100
  • d9d679930d
    revert(api): remove reserved connector ID prefix check Mathias Gebbe 2026-02-25 21:54:56 +0100
  • 21d7739692
    style: fix gci formatting in handlers and handlers_test Mathias Gebbe 2026-02-25 21:09:13 +0100
  • 0f246405a6
    docs: comment out oauth2 section in example config Mathias Gebbe 2026-02-25 17:55:18 +0100
  • 259e785529
    feat(api): reject connector IDs with reserved __ prefix Mathias Gebbe 2026-02-25 17:51:29 +0100
  • b652d5b2a0
    fix(oauth2): scope-conditional claims and reserved connector ID for client_credentials Mathias Gebbe 2026-02-25 17:49:31 +0100
  • a2d713a13c
    refactor(oauth2): gate client_credentials via grantTypes instead of config flag Mathias Gebbe 2026-02-25 17:49:19 +0100
  • aaac9998ce
    style: fix unnecessary whitespace changes in constants and test config Mathias Gebbe 2026-02-25 13:51:09 +0100
  • 0778edeb45
    fix(oauth2): restore client_credentials in default grant types list Mathias Gebbe 2026-02-25 13:20:18 +0100
  • b3c62556a0
    docs: add clientCredentialsEnabled option to example config Mathias Gebbe 2026-02-25 13:03:41 +0100
  • e5c8e6d0ef
    feat(oauth2): add client_credentials grant with opt-in config flag Mathias Gebbe 2026-02-25 12:19:35 +0100
  • 26afa1de8f
    merge upstream changes Nik Ogura 2026-02-25 10:06:57 -0800
  • 2ecf64e8b8
    build(deps): bump google.golang.org/api from 0.268.0 to 0.269.0 (#4582) dependabot[bot] 2026-02-25 07:00:31 +0100
  • 4873b2fb6a
    build(deps): bump google.golang.org/api from 0.268.0 to 0.269.0 dependabot[bot] 2026-02-25 04:03:06 +0000
  • de7b03ad48
    Merge fcedca4429 into a6962a8ba4 ByteBaker 2026-02-24 15:56:06 -0700
  • a6962a8ba4
    fix(mysql): quote `groups` reserved word in query replacer (#4580) Michiel De Backker 2026-02-24 13:56:32 +0100
  • 02d27c96df fix(mysql): quote `groups` reserved word in query replacer Michiel De Backker 2026-02-24 13:20:26 +0100
  • adadffd330 remove slo Ivan Zvyagintsev 2026-02-24 11:14:18 +0300
  • 02f6ec5e19 feat: add Dex Enhancement Proposal for external connectors architecture maksim.nabokikh 2026-02-24 09:02:55 +0100
  • 0963bbe780
    build(deps): bump google.golang.org/api from 0.267.0 to 0.268.0 (#4577) dependabot[bot] 2026-02-24 06:34:55 +0100
  • 15fda6881d
    build(deps): bump google.golang.org/api from 0.267.0 to 0.268.0 dependabot[bot] 2026-02-24 04:03:00 +0000
  • b2c4a84fbc
    Merge 2a81398656 into bcc2283694 Denis Khachyan 2026-02-23 22:20:33 +0200
  • d6c0ac68a1
    Merge 1c2cdaceb8 into bcc2283694 Phan Trung Thanh 2026-02-23 22:19:06 +0200
  • 1b38d793e1
    Merge c42cba8bd0 into bcc2283694 Marwan Ahmed 2026-02-23 22:18:37 +0200
  • 2523940d3f fix: upgrade Go to 1.26.0 to resolve CVE-2025-68121 WSandboxedOCCodeBot 2026-02-23 16:26:06 +0000
  • 2e2c0dc32f Fix tests in TestServerSupportedGrants for client credentials Rui Yang 2022-08-02 13:48:38 -0400
  • 4a38fb13e4 Fix issues in existing client credentials change Michael Kelly 2021-12-03 10:17:21 -0800
  • 0c08f20da9 add client crendential grant type Rui Yang 2021-11-10 14:43:22 -0500
  • bcc2283694
    feat: enhance test commands to support GitHub Actions formatting (#4575) v2.45.0 Maksim Nabokikh 2026-02-23 15:34:51 +0100
  • b3d6048152 DEP: Auth Sessions - Introduce ssoSharedWith configuration for SSO session sharing maksim.nabokikh 2026-02-23 12:57:31 +0100
  • c9a73ade3b feat: enhance test commands to support GitHub Actions formatting maksim.nabokikh 2026-02-23 12:27:52 +0100
  • ec26e19e79
    build(deps): bump github/codeql-action from 4.32.3 to 4.32.4 (#4573) dependabot[bot] 2026-02-23 06:47:59 +0100
  • 51c66d2523
    build(deps): bump aquasecurity/trivy-action from 0.34.0 to 0.34.1 (#4574) dependabot[bot] 2026-02-23 06:47:30 +0100
  • 2bd519a041
    build(deps): bump aquasecurity/trivy-action from 0.34.0 to 0.34.1 dependabot[bot] 2026-02-23 04:03:06 +0000
  • be20c5ec6e
    build(deps): bump github/codeql-action from 4.32.3 to 4.32.4 dependabot[bot] 2026-02-23 04:03:01 +0000
  • 8db7699e0f
    feat: implement device code flow in example-app (#4570) Maksim Nabokikh 2026-02-22 23:06:03 +0100
  • cf17fc68c8
    test: update HandleCallback after merging OIDC PKCE (#4572) Maksim Nabokikh 2026-02-22 22:55:17 +0100
  • 6d012dcb81 test: update HandleCallback after merging OIDC PKCE maksim.nabokikh 2026-02-22 22:45:38 +0100
  • 83697b06a6
    fix(server): respond with forbidden if failed to authenticate (#4200) Aljoscha Bollmann 2026-02-22 22:41:35 +0100
  • 25591eeaf4
    Add support to PKCE in OIDC connector (#3777) Giovanni Vella 2026-02-22 22:37:10 +0100
  • 1ec99e604e
    test(microsoft): test if the correct error is returned if the user is not in any of the required groups Aljoscha Bollmann 2026-02-21 10:31:10 +0100
  • 6ae53b7c75
    feat(microsoft): return the correct error if user is not in any of the required groups Aljoscha Bollmann 2026-02-21 10:29:54 +0100
  • 3329120250
    feat: introduce and handle error if a user is not in any of the required groups Aljoscha Bollmann 2026-02-21 10:28:22 +0100
  • 09ae3b9833
    chore: remove replace directive for github.com/dexidp/dex/api/v2 Joonas Bergius 2025-10-23 17:46:46 -0500
  • 66eca87e6c feat: implement device code flow in example-app maksim.nabokikh 2026-02-21 18:45:18 +0100
  • 5d27abc117
    feat: refactor example-app with a new config (#4569) Maksim Nabokikh 2026-02-21 15:34:03 +0100
  • 9ba261a818 feat: update renderToken function to accept context for improved request handling maksim.nabokikh 2026-02-21 13:31:47 +0100
  • 004a869af0 feat: enhance login flow with structured login result and connector data handling maksim.nabokikh 2026-02-21 13:28:16 +0100
  • f2c05ea973 feat: refactor example-app with a new config maksim.nabokikh 2026-02-21 12:11:02 +0100
  • 67e0308a64
    Merge e3ff28af8d into 08079303c9 steigr 2026-02-20 22:09:14 -0600
  • f60b9e7667
    fix(connector/microsoft): use least-privilege scope for group membership Geethree 2026-02-20 19:27:46 -0500
  • ea4278f123 DEP: Auth Sessions - Enhance ClientAuthState documentation to clarify session expiration and idle timeout behavior maksim.nabokikh 2026-02-20 21:32:20 +0100
  • 6c9df9313b
    Merge 3ed6931edf into 08079303c9 lorissenneca 2026-02-20 16:01:19 +0300
  • 08079303c9
    feat: add debug step to check image metadata in workflow (#4566) Maksim Nabokikh 2026-02-20 12:54:23 +0100
  • 45930499a3 feat: remove debug step for checking image metadata in workflow maksim.nabokikh 2026-02-20 12:42:42 +0100
  • 5f2f4e8715 feat: add debug step to check image metadata in workflow maksim.nabokikh 2026-02-20 12:00:47 +0100
  • 69b2193923 add xml validating Ivan Zvyagintsev 2026-02-20 13:43:33 +0300
  • 49c8228d30
    build(deps): bump actions/dependency-review-action from 4.8.2 to 4.8.3 (#4563) dependabot[bot] 2026-02-20 11:36:46 +0100
  • c9b8a48c15 feat(saml): support refresh tokens and SLO Ivan Zvyagintsev 2026-02-20 13:14:44 +0300
  • 92d1ed3b59
    build(deps): bump actions/dependency-review-action from 4.8.2 to 4.8.3 dependabot[bot] 2026-02-20 10:02:06 +0000
  • 0108be9e9f
    feat: add skopeo copy command to transfer image from OCI layout (#4564) Maksim Nabokikh 2026-02-20 10:59:33 +0100
  • bbcd9b6081 feat: streamline OCI image extraction and copying process maksim.nabokikh 2026-02-20 10:51:58 +0100