OpenID Connect (OIDC) identity and OAuth 2.0 provider with pluggable connectors
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
 
 
 
Eric Chiang a52e324f68 *: readme updates for v2 9 years ago
Documentation *: readme updates for v2 9 years ago
api api: add gRPC endpoints for creating, updating and deleting passwords 10 years ago
cmd cmd/dex: expose IDTokensValidFor and RotateKeysAfter server options in config. 10 years ago
connector connector: accept base64 encoded CA and add convience open method 10 years ago
examples *: readme updates for v2 9 years ago
scripts *: travis tests and build scripts should use Go 1.7.3. 10 years ago
server Merge pull request #658 from ericchiang/dev-dont-error-on-invalid-username 10 years ago
storage *: switch to github.com/ghodss/yaml for more consistent YAML parsing 10 years ago
vendor vendor: revendor 10 years ago
version *: determine version from git 10 years ago
web/templates *: rename internally used "state" form value to "req" 10 years ago
.gitignore *: prepare build scripts for a release 10 years ago
.travis.yml *: travis tests and build scripts should use Go 1.7.3. 10 years ago
DCO *: add DCO and LICENSE 10 years ago
Dockerfile *: prepare build scripts for a release 10 years ago
LICENSE *: add DCO and LICENSE 10 years ago
Makefile *: build aci at the correct path including version, OS, and arch 10 years ago
README.md *: readme updates for v2 9 years ago
TODO.md *: switch to github.com/ghodss/yaml for more consistent YAML parsing 10 years ago
glide.lock *: switch to github.com/ghodss/yaml for more consistent YAML parsing 10 years ago
glide.yaml glide.yaml: add new yaml package 10 years ago
glide_test.go initial commit 10 years ago

README.md

dex - A federated OpenID Connect provider

GoDoc

logo

Dex is an OpenID Connect server that allows users to login through upstream identity providers. Clients use a standards-based OAuth2 flow to login users, while the actual authentication is performed by established user management systems such as Google, GitHub, FreeIPA, etc.

OpenID Connect is a flavor of OAuth that builds on top of OAuth2 using the JOSE standards. This allows dex to provide:

  • Short-lived, signed tokens with standard fields (such as email) issued on behalf of users.
  • "well-known" discovery of OAuth2 endpoints.
  • OAuth2 mechanisms such as refresh tokens and revocation for long term access.
  • Automatic signing key rotation.

Standards-based token responses allows applications to interact with any OpenID Connect server instead of writing backend specific "access_token" dances. Systems that can already consume ID Tokens issued by dex include:

Documentation