dex/web/templates/login.html

{{ template "header.html" . }}

<div class="theme-panel">
  <h2 class="theme-heading">Log in to {{ issuer }} </h2>
  <div>
    {{ range $c := .Connectors }}
      <div class="theme-form-row">
        <a href="{{ $c.URL }}" target="_self">
          <button class="dex-btn theme-btn-provider">
            <span class="dex-btn-icon dex-btn-icon--{{ $c.Type }}"></span>
            <span class="dex-btn-text">Log in with {{ $c.Name }}</span>
          </button>
        </a>
      </div>
    {{ end }}
  </div>
</div>

{{ template "footer.html" . }}
web/templates: port templates from v1 2016-08-25 20:03:41 +00:00			`{{ template "header.html" . }}`

web: Updates classes in templates 2016-12-01 20:18:12 +00:00			`<div class="theme-panel">`
			`<h2 class="theme-heading">Log in to {{ issuer }} </h2>`
web/templates: port templates from v1 2016-08-25 20:03:41 +00:00			`<div>`
			`{{ range $c := .Connectors }}`
web: Updates classes in templates 2016-12-01 20:18:12 +00:00			`<div class="theme-form-row">`
{web,server}: use html/template and reduce use of auth request ID Switch from using "text/template" to "html/template", which provides basic XSS preventions. We haven't identified any particular place where unsanitized user data is rendered to the frontend. This is just a preventative step. At the same time, make more templates take pure URL instead of forming an URL themselves using an "authReqID" argument. This will help us stop using the auth req ID in certain places, preventing garbage collection from killing login flows that wait too long at the login screen. Also increase the login session window (time between initial redirect and the user logging in) from 30 minutes to 24 hours, and display a more helpful error message when the session expires. How to test: 1. Spin up dex and example with examples/config-dev.yaml. 2. Login through both the password prompt and the direct redirect. 3. Edit examples/config-dev.yaml removing the "connectors" section. 4. Ensure you can still login with a password. (email/password is "admin@example.com" and "password") 2017-02-02 18:29:57 +00:00			`<a href="{{ $c.URL }}" target="_self">`
Address PR comments 2016-12-01 22:06:08 +00:00			`<button class="dex-btn theme-btn-provider">`
Pick icons on login screen by connector type instead of ID Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com> 2019-10-29 23:33:52 +00:00			`<span class="dex-btn-icon dex-btn-icon--{{ $c.Type }}"></span>`
web: Updates classes in templates 2016-12-01 20:18:12 +00:00			`<span class="dex-btn-text">Log in with {{ $c.Name }}</span>`
web/templates: port templates from v1 2016-08-25 20:03:41 +00:00			`</button>`
			`</a>`
			`</div>`
			`{{ end }}`
			`</div>`
			`</div>`

			`{{ template "footer.html" . }}`