mirror
/
dex
mirror of https://github.com/dexidp/dex.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
OpenID Connect (OIDC) identity and OAuth 2.0 provider with pluggable connectors
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
477 Commits
34 Branches
98 Tags
73 MiB
 
 
 
 
 
 
Tree: 47897f73fa
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from '47897f73fa'
${ noResults }
Phu Kieu 47897f73fa
Validate audience with entityIssuer if present, use redirectURI otherwise 		9 years ago
Documentation Validate audience with entityIssuer if present, use redirectURI otherwise 9 years ago
api api: Update timestamp type for RefreshTokenRef to int64. 9 years ago
cmd cmd/example-app: fix custom CA behavior 9 years ago
connector Validate audience with entityIssuer if present, use redirectURI otherwise 9 years ago
examples examples/grpc-client: clean up the example and add tlsClientCA to ConfigMap. 9 years ago
scripts *: fix spelling using github.com/client9/misspell 9 years ago
server server/server.go: make successful garbage collection log at info level 9 years ago
storage storage/static.go: correct the error message that gets displayed. 9 years ago
vendor vendor: revendor 9 years ago
version *: determine version from git 10 years ago
web web/static/main.css: fix typo. 9 years ago
.dockerignore *: only use docker when releasing, update to Go 1.8, remove aci scripts 9 years ago
.gitignore *: prepare build scripts for a release 10 years ago
.travis.yml *: only use docker when releasing, update to Go 1.8, remove aci scripts 9 years ago
DCO *: add DCO and LICENSE 10 years ago
Dockerfile *: add theme based frontend configuration 9 years ago
LICENSE *: add DCO and LICENSE 10 years ago
Makefile *: only use docker when releasing, update to Go 1.8, remove aci scripts 9 years ago
README.md Documentation: document dex scopes, claims, and client features 9 years ago
glide.lock vendor: revendor 9 years ago
glide.yaml glide.yaml: update goxmldsig 9 years ago
glide_test.go *: add 'make revendor' and tests to catch incorrect glide usage 9 years ago

README.md

dex - A federated OpenID Connect provider

Travis GoDoc Go Report Card

logo

Dex is an OpenID Connect server that connects to other identity providers. Clients use a standards-based OAuth2 flow to login users, while the actual authentication is performed by established user management systems such as Google, GitHub, FreeIPA, etc.

OpenID Connect is a flavor of OAuth that builds on top of OAuth2 using the JOSE standards. This allows dex to provide:

  • Short-lived, signed tokens with standard fields (such as email) issued on behalf of users.
  • "well-known" discovery of OAuth2 endpoints.
  • OAuth2 mechanisms such as refresh tokens and revocation for long term access.
  • Automatic signing key rotation.

Standards-based token responses allows applications to interact with any OpenID Connect server instead of writing backend specific "access_token" dances. Systems that can already consume ID Tokens issued by dex include:

Kubernetes + dex

Dex's main production use is as an auth-N addon in CoreOS's enterprise Kubernetes solution, Tectonic. Dex runs natively on top of any Kubernetes cluster using Third Party Resources and can drive API server authentication through the OpenID Connect plugin. Clients, such as the Tectonic Console and kubectl, can act on behalf users who can login to the cluster through any identity provider dex supports.

More docs for running dex as a Kubernetes authenticator can be found here.

Documentation

Getting help

  • For bugs and feature requests (including documentation!), file an issue.
  • For general discussion about both using and developing dex, join the dex-dev mailing list.
  • For more details on dex development plans, check out the GitHub milestones.