mirror of https://github.com/dexidp/dex.git
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
Eric Chiang
d313e5d493
|
10 years ago | |
|---|---|---|
| Documentation/proposals | 10 years ago | |
| cmd | 10 years ago | |
| connector | 10 years ago | |
| example | 10 years ago | |
| scripts | 10 years ago | |
| server | 10 years ago | |
| storage | 10 years ago | |
| vendor | 10 years ago | |
| version | 10 years ago | |
| .gitignore | 10 years ago | |
| Dockerfile | 10 years ago | |
| Makefile | 10 years ago | |
| README.md | 10 years ago | |
| glide.lock | 10 years ago | |
| glide.yaml | 10 years ago | |
| glide_test.go | 10 years ago | |
README.md
dex - A federated OpenID Connect provider
dex is an OAuth2 server that presents clients with a low overhead framework for identifying users while leveraging existing identity services such as Google Accounts, FreeIPA, GitHub, etc, for actual authentication. dex sits between your applications and an identity service, providing a backend agnostic flavor of OAuth2 called OpenID Connect, a spec will allows dex to support:
- Short-lived, signed tokens with predefined fields (such as email) issued on behalf of users.
- Well known discovery of OAuth2 endpoints.
- OAuth2 mechanisms such as refresh tokens and revocation for long term access.
- Automatic signing key rotation.
Any system which can query dex can cryptographically verify a users identity based on these tokens, allowing authentication events to be passed between backend services.
One such application that consumes OpenID Connect tokens is the Kubernetes API server, allowing dex to provide identity for any Kubernetes clusters.