k-space/dex
Archived
11
0
Fork 0
Code Issues Pull Requests Packages Projects Activity
2,246 Commits 1 Branch 0 Tags
54c9e8231fb8305875f4ee0f7bf1f5090e82e4ad
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
m.nabokikh ccbc86e373 fix: Update gomplate version to 3.11.3 fix CVE-2022-27665 
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
 2022-10-10 13:25:48 +02:00
m.nabokikh 4b5f1d5289 fix: refresh token only once for all concurrent requests 
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
 2022-10-02 23:37:27 +02:00
Maksim Nabokikh d33e994805 chore: Bump Go 1.19 (#2641) 
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
 2022-08-29 15:03:26 +04:00
Maksim Nabokikh 7efe1e28a8 chore: Bump ent to 0.11.2 (#2640) 
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
 2022-08-29 11:16:12 +04:00
Maksim Nabokikh f90318ea1d Merge pull request #2633 from dexidp/dependabot/go_modules/google.golang.org/api-0.93.0 
build(deps): bump google.golang.org/api from 0.89.0 to 0.93.0
 2022-08-23 23:00:13 +04:00
Maksim Nabokikh d016f5c277 Merge pull request #2635 from dexidp/dependabot/github_actions/aquasecurity/trivy-action-0.7.1 
build(deps): bump aquasecurity/trivy-action from 0.7.0 to 0.7.1
 2022-08-20 08:00:36 +04:00
Maksim Nabokikh 148417d675 Merge pull request #2634 from dexidp/dependabot/go_modules/github.com/mattn/go-sqlite3-1.14.15 
build(deps): bump github.com/mattn/go-sqlite3 from 1.14.11 to 1.14.15
 2022-08-18 10:06:36 +04:00
Maksim Nabokikh ea18fc22fa Merge pull request #2632 from dexidp/dependabot/github_actions/aquasecurity/trivy-action-0.7.0 
build(deps): bump aquasecurity/trivy-action from 0.6.1 to 0.7.0
 2022-08-17 19:23:13 +04:00
Maksim Nabokikh 2081f7d057 Merge pull request #2620 from mayurwaghmode/master 
Signed-off-by: mayurwaghmode <waghmodemayur17@gmail.com>
 2022-08-15 13:39:07 +04:00
Maksim Nabokikh d564cc7200 Merge pull request #2591 from chancez/patch-1 
Add expiry.refreshToken settings to config.yaml.dist
 2022-07-18 23:23:16 +04:00
Maksim Nabokikh f49e7bc218 Merge pull request #2560 from dexidp/dependabot/go_modules/github.com/spf13/cobra-1.5.0 
build(deps): bump github.com/spf13/cobra from 1.4.0 to 1.5.0
 2022-07-04 23:03:15 +04:00
Maksim Nabokikh 9ebcd651ff Merge pull request #2574 from dexidp/dependabot/go_modules/google.golang.org/api-0.86.0 
build(deps): bump google.golang.org/api from 0.82.0 to 0.86.0
 2022-07-04 22:27:42 +04:00
Maksim Nabokikh c561318baa Merge pull request #2565 from dexidp/dependabot/github_actions/mheap/github-action-required-labels-2 
build(deps): bump mheap/github-action-required-labels from 1 to 2
 2022-07-04 22:21:19 +04:00
Maksim Nabokikh 5066414735 Merge pull request #2576 from dexidp/dependabot/github_actions/aquasecurity/trivy-action-0.5.1 
build(deps): bump aquasecurity/trivy-action from 0.4.0 to 0.5.1
 2022-07-04 22:20:59 +04:00
Maksim Nabokikh 731d0d7d9d Merge pull request #2577 from dexidp/dependabot/go_modules/github.com/stretchr/testify-1.8.0 
build(deps): bump github.com/stretchr/testify from 1.7.2 to 1.8.0
 2022-07-04 22:20:20 +04:00
Maksim Nabokikh b6c4112c88 Merge pull request #2555 from dexidp/dependabot/github_actions/helm/kind-action-1.3.0 
build(deps): bump helm/kind-action from 1.2.0 to 1.3.0
 2022-06-15 20:00:30 +04:00
Maksim Nabokikh b07c8b1d8d Merge pull request #2524 from aristanetworks/mkelly-limit-gc-size 
Limit the amount of objects we attempt to GC on each cycle
 2022-06-10 09:22:00 +04:00
Maksim Nabokikh b6cc099305 Merge pull request #2290 from bobcallaway/issue2289 
correctly handle path escaping for connector IDs
 2022-05-31 16:03:12 +04:00
Maksim Nabokikh a858ffbcf2 Merge pull request #2538 from loopholelabs/2537-fix-json-response 
Device Code Flow does not return application/json in Content-Type header
 2022-05-30 17:55:24 +04:00
Maksim Nabokikh 6da5187b47 Merge pull request #2482 from flant/profiling-endpoint 
feat: enable profiling endpoints
 2022-05-25 20:55:05 +04:00
Maksim Nabokikh 957def7928 Merge pull request #2533 from flant/notify-groups-access 
fix: add notification about groups access to the Grant Access page
 2022-05-25 18:20:30 +04:00
m.nabokikh bdfb10137a Add the comment about groups request notification 
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
 2022-05-25 17:50:12 +04:00
m.nabokikh a7ca81f03a chore: Go mod update 1.17 
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
 2022-05-24 10:10:10 +04:00
Maksim Nabokikh 9da59ce5dd Merge pull request #2523 from flant/increase-lint-timeout 
Bump lint timeout to reduce the number of failed executions
 2022-05-21 00:04:42 +04:00
m.nabokikh 3d5a3befb4 fix: prevent cross-site scripting for the device flow 
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
 2022-05-20 18:26:49 +04:00
m.nabokikh 97254db62a Bump lint timeout to reduce the number of failed executions 
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
 2022-05-20 18:21:40 +04:00
Maksim Nabokikh 3a83b6ce39 Merge pull request #2486 from flant/enhancement-template 
feat: add enhancement template
 2022-05-20 17:11:13 +04:00
Maksim Nabokikh c74ad3bb66 Merge pull request #2522 from Blorpy/oidc_refresh_token 
OIDC connector: Support cases where there is no id_token when using a refresh_token grant
 2022-05-20 16:46:41 +04:00
m.nabokikh a98ab893c2 fix: Move enhancements to the docs folder 
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
 2022-05-20 16:20:09 +04:00
m.nabokikh 38fe0f5319 feat: add enhancement template 
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
 2022-05-20 16:20:09 +04:00
m.nabokikh 35f58dca73 chore: do not use caching for docker build 
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
 2022-05-14 17:50:29 +04:00
Maksim Nabokikh 9cd29bdee0 Merge pull request #2511 from Blorpy/remove_hd_oidc 
Remove google specific hd / hosted domain claim config from oidc connector
 2022-05-13 07:48:14 +04:00
Maksim Nabokikh 997ec94a4a Merge pull request #2483 from tsl0922/master 
Add numeric user ID support for oauth connector
 2022-05-11 14:58:58 +04:00
Maksim Nabokikh 453504c450 Merge pull request #2430 from dhaus67/openshift-connector-system-root-cas 
Create setting to allow to trust the system root CAs
 2022-05-05 11:37:25 +04:00
Maksim Nabokikh 7c60f79f10 Merge pull request #1789 from techknowlogick/gitea-groups 
Feature: groups in Gitea
 2022-04-20 10:30:04 +04:00
Maksim Nabokikh b26e639515 Merge pull request #2470 from flant/refresh-token-log-only-errors 
fix: log only errors on refreshing
 2022-04-15 17:20:02 +04:00
m.nabokikh ad89e01676 fix: log only errors on refreshing 
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
 2022-04-15 10:54:43 +04:00
m.nabokikh 6822ad950f feat: enable profiling endpoints 
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
 2022-04-12 12:12:37 +04:00
m.nabokikh 57e9611ff6 fix: Implicit Grant discovery 
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
 2022-03-08 16:16:25 +04:00
Maksim Nabokikh cb9f0b5d5e Merge pull request #2418 from dirien/acr_values 
feat: Add acr_values support for OIDC
 2022-03-08 10:22:07 +04:00
Maksim Nabokikh 5f9abc5be8 Merge pull request #2371 from seuf/authproxy-groups-configuration 
Allow configuration of returned groups via authproxy connector
 2022-03-04 00:44:56 +04:00
Maksim Nabokikh 5b0cb0704a Merge pull request #2342 from dhaus67/refresh-token-openshift-connector 
Add support for RefreshConnector for openshift connector.
 2022-03-02 11:46:21 +04:00
Maksim Nabokikh bf0025fbd3 Merge pull request #2390 from rahulchheda/fix/bitbucket-teams-issue-master 
[fix] Replace /teams API w/ /workspaces endpoints
 2022-02-02 12:09:11 +04:00
Maksim Nabokikh 13f93cb785 Merge pull request #2394 from flant/update-goglangci-lint-link 
chore: update golangci-lint download script
 2022-02-01 08:18:30 +04:00
m.nabokikh 254165d665 chore: update golangci-lint download script 
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
 2022-01-31 22:33:38 +04:00
Maksim Nabokikh 9d3471e39b Merge pull request #2026 from flant/ldap-groups-user-matcher-warning 
chore: warning about deprecated LDAP groupSearch fields
 2021-12-11 13:26:30 +04:00
Maksim Nabokikh ac02fb04cf Merge pull request #2344 from flant/invalid_grant_claim_another_client 
fix: return invalid_grant error on claiming token of another client
 2021-12-08 17:30:52 +04:00
m.nabokikh 578cb05f7b fix: return invalid_grant error on claiming token of another client 
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
 2021-12-05 23:45:52 +04:00
Maksim Nabokikh 84b241721e Merge pull request #2300 from flant/do-not-update-offline-session-last-time 
fix: do not update offlinesession lastUsed field if refresh token was not updated
 2021-10-21 20:23:45 +04:00
m.nabokikh 9fad0602ec fix: do not update offlinesession lastUsed field if refresh token was not change 
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
 2021-10-19 01:16:34 +04:00
m.nabokikh d4e82e3315 chore: fix ioutil lint error after merging MySQL ent storage 
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
 2021-09-21 08:35:25 +04:00
Maksim Nabokikh f92a6f4457 Merge pull request #2272 from flant/mysql-ent 
feat: Add MySQL ent-based storage driver
 2021-09-21 08:24:36 +04:00
Maksim Nabokikh 5169c4317d Merge pull request #2278 from Juneezee/deprecate-ioutil 
refactor: move from io/ioutil to io and os package
 2021-09-17 16:36:35 +04:00
m.nabokikh 575742b137 Remove sqlite transaction tests for ent 
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
 2021-09-14 18:55:03 +04:00
m.nabokikh 096e229562 Get rid of nolint 
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
 2021-09-13 18:58:32 +04:00
m.nabokikh 4d4edaf540 Fix sqlite an mysql tests 
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
 2021-09-13 18:48:46 +04:00
m.nabokikh fb38e1235d Add dialects 
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
 2021-09-13 17:48:02 +04:00
m.nabokikh eae3219e4d feat: Add MySQL ent-based storage driver 
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
 2021-09-13 14:25:17 +04:00
Maksim Nabokikh 3fac2ab6bc Merge pull request #1862 from tkleczek/fix-rfc-errors 
Improve auth flow error handling
 2021-08-03 00:34:54 +04:00
Maksim Nabokikh 766fc7ad99 Merge pull request #2218 from jglick/htpasswd 
Demonstrate use of `htpasswd` for bCrypt in `staticPasswords`
 2021-08-02 10:17:39 +04:00
Maksim Nabokikh e650aef331 Merge pull request #2212 from salmanisd/feature/use-only-one-sqlite3-conn 
storage/sql: use only one sqlite3 connection
 2021-07-22 20:10:31 +04:00
Maksim Nabokikh 5b7ec77538 Merge pull request #2112 from flant/update-kubernetes-sa-tokens 
feat: Update token periodically if Dex is running in Kubernetes cluster
 2021-07-13 20:06:36 +04:00
m.nabokikh d413870f6e feat: Update token periodically if Dex is running in Kubernetes cluster 
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
 2021-07-12 13:00:46 +04:00
Maksim Nabokikh 823484f024 Merge pull request #2092 from flant/kubernetes-fallback-to-namespace-file 
fix: read namespace from file for Kubernetes storage client
 2021-07-10 09:23:57 +04:00
Maksim Nabokikh 033a8d89f2 Merge pull request #2025 from flant/kubernetes-apiextensions-version 
feat: create CRDs as apiextensions.k8s.io/v1
 2021-07-08 10:52:55 +04:00
Maksim Nabokikh 2211c515a6 Merge pull request #2121 from flant/ent-postgres 
feat: Add ent-based postgres storage
 2021-07-08 10:49:13 +04:00
m.nabokikh 0754c30ac2 fix: get namespace from file for Kubernetes storage client 
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
 2021-06-10 20:01:14 +04:00
m.nabokikh 7a2472555a feat: Create CRDs as apiextensions.k8s.io/v1 
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
 2021-06-10 20:00:49 +04:00
m.nabokikh 21a01ee811 Add sprig v3 functions to web templates 
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
 2021-06-02 11:11:45 +04:00
Maksim Nabokikh 93ded5c406 Merge pull request #2091 from flant/kubernetes-tests-kind 
chore: test Kubernetes storage with KinD
 2021-06-02 11:10:34 +04:00
m.nabokikh 97591861b2 Cleanup Makefile 
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
 2021-06-02 10:33:54 +04:00
m.nabokikh 00950eedd6 Bump kind version and change kubeconfig tmp dir 
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
 2021-06-01 21:57:19 +04:00
m.nabokikh bc5371e730 Add make file commands for kind 
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
 2021-06-01 19:44:49 +04:00
m.nabokikh 5a48d8a82d chore: test Kubernetes storage with KinD 
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
 2021-06-01 19:44:31 +04:00
Maksim Nabokikh 5d996661ea Merge pull request #2144 from flant/bump-linter-version 
Bump golag-ci lint version to 1.40.1
 2021-05-27 21:50:23 +04:00
m.nabokikh 4b54433ec2 Bump golag-ci lint version to 1.40.1 
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
 2021-05-27 19:27:06 +04:00
m.nabokikh dea1d3383c Deprecation warning log message 
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
 2021-05-24 19:40:28 +04:00
m.nabokikh 13a83d9bba chore: warning about deprecated LDAP groupSearch fields 
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
 2021-05-24 19:08:13 +04:00
Maksim Nabokikh 20875c972e Discard package "version" (#2107) 
* Discard package "version"

Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>

* Inject api version

Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>

* Pass version arg to the dex API

Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
 2021-05-18 00:55:24 +02:00
m.nabokikh 49adc4e5bb Fix ent-based postgres storage tests 
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
 2021-05-15 09:06:44 +04:00
m.nabokikh 19884d92ac feat: Add ent-based postgres storage 
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
 2021-05-14 23:19:59 +04:00
m.nabokikh 8553309db3 Add obsolete tokens, resolve conflicts, bump ent 
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
 2021-05-02 12:43:21 +04:00
m.nabokikh 24fa4def5b chore: update ent 
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
 2021-04-30 17:48:16 +04:00
m.nabokikh 2e61860d5a Add ent autogenerated code 
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
 2021-04-30 17:47:54 +04:00
m.nabokikh 11859166d0 feat: Add ent-based sqlite3 storage 
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
 2021-04-30 17:47:54 +04:00
m.nabokikh 4561214ab2 Add @nabokihms to maintainers list 
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
 2021-04-27 13:11:15 +04:00
m.nabokikh 026d979073 chore: remove go dev badge from README 
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
 2021-04-17 10:24:02 +04:00
m.nabokikh beb8911cf7 chore: add note about units to expire config 
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
 2021-04-02 16:12:43 +04:00
m.nabokikh 6be747142a chore: add keystone connector icon and bump tests dependencies 
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
 2021-03-11 23:03:37 +04:00
m.nabokikh 3bd0e91a68 Make /device/token deprecation warning more concise 
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
 2021-02-25 11:53:25 +04:00
m.nabokikh 9ed5cc00cf Add deprecation warning for /device/token endpoint 
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
 2021-02-24 17:14:28 +04:00
m.nabokikh 1211a86d58 fix: use /token endpoint to get tokens with device flow 
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
 2021-02-24 16:03:25 +04:00
m.nabokikh 84a07a7805 Do not run LDAP tests if DEX_LDAP_HOST is not set 
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
 2021-02-20 17:05:41 +04:00
m.nabokikh 796d4c1e6b Remove tectonic links from the README 
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
 2021-02-20 16:59:37 +04:00
m.nabokikh 1f2771b57e fix: do not run LDAP tests locally by default 
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
 2021-02-20 12:55:52 +04:00
m.nabokikh df86a1faca chore: update Kubernetes section in README 
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
 2021-02-18 08:14:43 +04:00
m.nabokikh 87ebbaf834 fix: close storage on shutdown 
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
 2021-02-12 22:31:13 +04:00
m.nabokikh 9340fee011 Fixes after rebasing to the actual main branch 
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
 2021-02-10 23:46:17 +04:00
m.nabokikh 89295a5b4a More refresh token handler refactoring, more tests 
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
 2021-02-10 23:43:19 +04:00
m.nabokikh 4e73f39f57 Do not refresh id token claims if refresh token is allowed to reuse 
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
 2021-02-10 23:43:19 +04:00