k-space/dex
Archived
10
0
Fork 0
Code Issues Pull Requests Packages Projects Activity
969 Commits 1 Branch 0 Tags 18 MiB
458585008b
Commit Graph

163 Commits

Author SHA1 Message Date
Eric Chiang
74f5eaf47e connector/ldap: support the StartTLS flow for secure connections 
When connecting to an LDAP server, there are three ways to connect:

1. Insecurely through port 389 (LDAP).
2. Securely through port 696 (LDAPS).
3. Insecurely through port 389 then negotiate TLS (StartTLS).

This PR adds support for the 3rd flow, letting dex connect to the
standard LDAP port then negotiating TLS through the LDAP protocol
itself.

See a writeup here:

http://www.openldap.org/faq/data/cache/185.html
 2017-04-12 15:25:42 -07:00
Eric Chiang
c3cafc8f39 Merge pull request #902 from ericchiang/saml-stable 
*: promote SAML to stable
 2017-04-11 10:13:22 -07:00
Eric Chiang
5f377f07d4 *: promote SAML to stable 
This means we no longer refer to it as "experimental" and wont make
breaking changes.
 2017-04-11 10:09:48 -07:00
rithu john
76b9eb1db9 connector/github: add support for github enterprise. 2017-04-11 10:04:59 -07:00
Phu Kieu
47897f73fa Validate audience with entityIssuer if present, use redirectURI otherwise 2017-04-06 14:40:56 -07:00
Phu Kieu
8c0eb67ecd Update documentation 2017-04-06 11:06:30 -07:00
Eric Chiang
5e34f0d1a6 Documentation: document dex scopes, claims, and client features 2017-03-28 16:53:06 -07:00
Eric Chiang
50b223a9db *: validate InResponseTo SAML response field and make issuer optional 2017-03-22 13:02:44 -07:00
Eric Chiang
f503ff7950 *: add documentation for the OpenID Connect provider 2017-03-20 08:47:02 -07:00
Derek McQuay
9b052f37c9
clearified redirect-uri and make cmd location 2017-03-09 22:36:37 -08:00
Derek McQuay
a6ab82d6c0
update kubernetes example-app explanation 
Clarify some potentially confusing issues with how to run and build the
example-app binary.
 2017-03-09 17:17:07 -08:00
Eric Chiang
ee27a4f9f4 *: only use docker when releasing, update to Go 1.8, remove aci scripts 
This change modifies our release process to only require Docker
when building a release and updates our released binary to use Go
1.8. It also removes our .aci scripts, which we've not been
regularly building.

A nice consequence is that OSX users can now build a release image.
 2017-03-09 10:46:09 -08:00
Paul Burt
a660e7cd7a Added produciton-users and integrations pages 2017-03-03 13:49:22 -05:00
rithu john
fa2f76bcdb examples: adding a gRPC client example. 2017-02-28 12:06:44 -08:00
Jeff Schroeder
58d80547ef [storage.md] Fix the ThirdPartyResource syntax 
This makes manually creating the `o-auth2-client.oidc.coreos.com` actually work.
 2017-02-24 15:35:29 -06:00
Carlos Alexandro Becker
f57e19e6ab simplified clone: using go get 2017-02-22 09:33:01 -03:00
Eric Chiang
adf3703962 Documentation: warn admins not to edit dex ThirdPartyResources manually 2017-02-06 10:35:27 -08:00
rithu john
fecd596ae2 Documentation: Minor changes to SAML connector doc. 2017-02-01 11:28:46 -08:00
rithu leena john
27224cdc98 Merge pull request #788 from givia/gitlab-connector 
connector: add GitLab connecor
 2017-02-01 09:39:37 -08:00
Ali Javadi
e623ad4d35 connector: add GitLab connector 2017-01-28 01:36:02 +03:30
rithu john
d114b8ffc7 Documentation/proposals: Add a proposal for refresh token revocation. 2017-01-27 09:37:01 -08:00
rithu john
31e8009441 cmd/dex: make connector name field mandatory in dex configuration. 2017-01-23 15:14:41 -08:00
Eric Chiang
613d160ad9 Merge pull request #782 from marians/patch-1 
Docs: Added a name to the LDAP connector
 2017-01-23 09:07:24 -08:00
Marian Steinbach
38a2e41e0a Added a name to the connector 
Without a name, the example app's login form will only show `Log in with` as a button label.
 2017-01-23 10:46:29 +01:00
Andrew Johnstone
b10c0a1c87 Update kubernetes.md 2017-01-23 06:28:21 +00:00
rithu john
265cfacd17 Documentation: add docs on patch release process. 2017-01-17 11:49:09 -08:00
y2kenny
4d4cb99459 Removed extra o typo 2017-01-11 15:47:55 -05:00
Eric Chiang
0f4a1f69c5 *: wire up SAML POST binding 2017-01-09 18:30:58 -08:00
Eric Chiang
d87a4c35b9 *: add 'make revendor' and tests to catch incorrect glide usage 
Introducing glide-vc caused us to unknowingly removed our Go
protobuf compiler (since it's a main). Add flags to glide-vc usage
to remedy this.

Since we now require several glide and glide-vc flags, add a Makfile
target and tests to catch when PRs don't use the correct flags.
 2016-12-22 11:52:24 -08:00
Eric Chiang
566bb2d1af Documentation: add notes on patch release branches 2016-12-12 15:29:00 -08:00
Eric Chiang
6dbe6e8ab5 Documentation: add examples of mapping LDAP schema to a search 2016-12-09 09:42:28 -08:00
Eric Chiang
e2aa095680 Documentation: add document on managing dependencies 2016-12-07 13:23:19 -08:00
Eric Chiang
e267dbd236 Merge pull request #708 from ericchiang/ldap-security-docs 
Documentation: clarify difference between LDAP ports and security guarentees
 2016-11-28 17:07:24 -08:00
Ev
5144ef643b Updated openid-connect.md: small typo 
Protocol is written protocl.
 2016-11-24 14:01:47 -05:00
Eric Chiang
8b8c076ecf Documentation: clarify difference between LDAP ports and security guarantees 
Now that LDAP supports an `insecureSkipVerify` option, clarify that
`insecureNoTLS` is an extremely bad choice and as such we may drop
support for 389 in the future.

However, since we send plain text passwords from our frontend to our
backend, this probably gets us into a bigger conversation about dex's
TLS story. For example when terminiation is approporate. cc'ing
@dghubble for thoughts on how that might apply to our internal uses.

We probably want an overaching security doc at some point, but that
can be another PR.
 2016-11-23 12:26:44 -08:00
Eric Chiang
6980920a3a *: document the GitHub connector 2016-11-22 12:53:46 -08:00
Phu Kieu
d4aba443ac Allow getAttr to return DN 
Specify "DN" as attribute name to return, but will only work if not present in ldap.Entry.Attributes
Use when full DN is stored in groupSearch's userAttr
 2016-11-18 13:51:47 -08:00
Eric Chiang
e6b54250db Merge pull request #684 from ericchiang/examples-k8s-fixup 
examples/k8s: update kubernetes examples
 2016-11-17 15:28:00 -08:00
Eric Chiang
3ecfaf700e examples/k8s: update kubernetes examples 2016-11-17 14:10:55 -08:00
Eric Chiang
2e74b48492 Merge pull request #690 from rithujohn191/connector-docs 
Documentation: LDAP connector documentation.
 2016-11-16 16:11:44 -08:00
rithu john
8589650605 Documentation: LDAP connector documentation. 2016-11-16 15:29:17 -08:00
Jeff Schroeder
da6cd9687d Documentation: fix a typo in the storage documentation 2016-11-15 15:14:11 -06:00
Jason Vanderhoof
80770df520 Small spelling fix. 2016-11-11 14:24:17 -07:00
Eric Chiang
674bec0468 Merge pull request #674 from ericchiang/readme-docs-v2 
*: readme updates for v2
 2016-11-08 15:20:51 -08:00
Eric Chiang
a52e324f68 *: readme updates for v2 2016-11-08 14:36:29 -08:00
Eric Chiang
2417fc9154 Documentation/logos: add logos 2016-11-08 11:51:47 -08:00
Eric Chiang
c9889683b4 Documentation: add doc describing v2 changes 2016-11-04 16:56:21 -07:00
rithu leena john
42dfd3ecec cmd/dex: add option for gRPC client auth CA. 2016-11-02 14:51:22 -07:00
Eric Chiang
2a9051c864 Merge pull request #654 from ericchiang/dev-sql-optimistic-concurrency 
storage/sql: use isolation level "serializable" for transactions
 2016-11-01 10:16:23 -07:00
Eric Chiang
8debe68314 Documentation: remove caveat about running multiple instances 2016-10-31 23:18:40 -07:00
Eric Chiang
fe1d27586e Documentation: add document on the dex API 2016-10-31 15:25:52 -07:00
rithu leena john
27880dba59 Documentation: adding documentation for running ldap tests locally 2016-10-27 13:20:32 -07:00
Eric Chiang
99e312eadd Merge pull request #632 from ericchiang/dev-docs-storage-options 
Documentation: add a document on storage options
 2016-10-26 12:33:37 -07:00
Eric Chiang
6c4839860e Documentation: add a document on storage options 2016-10-26 12:32:45 -07:00
Eric Chiang
bc16de0b58 storage/kubernetes: don't guess the kubeconfig location and change test env 
Using the default KUBECONFIG environment variable to indicate that
the Kubernetes tests should be run lead to cases where developers
accidentally ran the tests. This has now been changed to
"DEX_KUBECONFIG" and documentation hsa been added detailing how to
run these tests.

Additionally, no other storage reads environment variables for its
normal configuration (outside of tests) so the Kubernetes storage
no longer does.

Overall, be less surprising.
 2016-10-23 20:53:29 -07:00
Eric Chiang
774242f750 Documentation/proposals: added a caveats section to upstream refreshing proposal 2016-10-17 11:54:10 -07:00
Eric Chiang
1e5133a98d Documentation/proposals: add a proposal for keeping data in-sync during refreshes 2016-10-08 11:45:55 -07:00
Eric Chiang
0fc8879da1 *: prepare build scripts for a release 2016-10-05 23:43:44 -07:00
Eric Chiang
877eb3dc7b *: add standup script to run DB tests locally and hook up travis 2016-10-03 12:48:26 -07:00
Eric Chiang
bfe560ee21 rename 2016-08-10 22:31:42 -07:00
Eric Chiang
1cbb7700d8 *: add warning to README 2016-08-10 22:26:36 -07:00
Eric Chiang
e377d476ae Documentation: add incomplete intro to OpenID Connect 2016-08-10 22:25:15 -07:00
Eric Chiang
5385ca517a proposals: user objects for revoking refresh tokens and merging accounts 2016-08-08 10:31:59 -07:00