k-space/dex
Archived
11
0
Fork 0
Code Issues Pull Requests Packages Projects Activity
907 Commits 1 Branch 0 Tags
56f02b95c6490981602dbf8726a5c4a0e3d858dc
Commit Graph

907 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Stephen Augustus
56f02b95c6 Update Docker build/image 
- Update build container to golang:1.12.4-alpine
- Update dex image to alpine:3.9
- Run dex as non-root user

Signed-off-by: Stephen Augustus <saugustus@vmware.com>
 2019-04-16 17:00:05 -04:00
Eric Chiang
f6741d1837 Merge pull request #1417 from gezb/feature/odic_add_email_verfied_override 
Add option to OIDC connecter to override email_verified to true
 2019-03-05 14:49:02 -08:00
Gerald Barker
fc723af0fe Add option to OIDC connecter to override email_verified to true 2019-03-05 21:24:02 +00:00
Eric Chiang
83a0326b88 Merge pull request #1412 from okamototk/typo 
Fix typo.
 2019-02-23 08:51:07 -08:00
Takashi Okamoto
ac290f77aa Fix typo. 2019-02-23 16:34:10 +00:00
Eric Chiang
c113df2730 Merge pull request #1408 from sagikazarmark/logger-interface 
Add logger interface and stop relying on Logrus directly
 2019-02-22 12:51:31 -08:00
Mark Sagi-Kazar
d877fca092 Fix coding style 2019-02-22 21:43:55 +01:00
Mark Sagi-Kazar
06521ffa49 Remove the logrus logger wrapper 2019-02-22 21:31:46 +01:00
Mark Sagi-Kazar
aec2edb441 Match the interface to logrus implementation 2019-02-22 21:27:54 +01:00
Mark Sagi-Kazar
d1c8f8d095 Remove structured logging from the logger interface 2019-02-22 21:26:30 +01:00
Eric Chiang
e913a252cd Merge pull request #1410 from sagikazarmark/fix-typo 
Fix typo
 2019-02-22 12:02:27 -08:00
Mark Sagi-Kazar
c48cb36e8f Fix typo 2019-02-22 20:54:19 +01:00
Eric Chiang
8b4a9bf5ee Merge pull request #1409 from bonifaido/production-users-banzaicloud 
production users: add Banzai Cloud
 2019-02-22 11:05:02 -08:00
Nandor Kracser
6c71b330a8 production users: add Banzai Cloud 2019-02-22 16:40:34 +01:00
Mark Sagi-Kazar
be581fa7ff Add logger interface and stop relying on Logrus directly 2019-02-22 13:38:57 +01:00
Stephan Renatus
ca66289077 Merge pull request #1402 from lstoll/lstoll-mod-fix 
Update modules for go 1.11.4+
 2019-02-11 09:40:22 +01:00
Lincoln Stoll
b96b02e506 Update modules for go 1.11.4+ 
Go 1.11.3 changed how checksums are created in some cases, which caused
failures building via modules. (ref golang/go#29278)

Update the checksums for the failing modules.

To catch this is the future, a modules build was added to the build matrix. I
also noted that we were pinning the `.0` patchlevel of each go version which
wouldn't have picked this up, updated it to build with the latest patch
release.
 2019-02-09 14:59:30 +02:00
Stephan Renatus
7bd4071b4c Merge pull request #1396 from jtnord/useLoginId-dexidp 
Use github login as the id
 2019-02-05 13:54:49 +01:00
Stephan Renatus
815311fa19 Merge pull request #1397 from ericchiang/health-check-endpoint 
server: update health check endpoint to query storage periodically
 2019-02-04 21:38:58 +01:00
Eric Chiang
8935a1479c server: update health check endpoint to query storage periodically 
Instead of querying the storage every time a health check is performed
query it periodically and save the result.
 2019-02-04 19:02:41 +00:00
James Nord
fe247b106b remove blank line that tripped up make verify-proto 2019-02-04 14:06:06 +00:00
James Nord
9840fccdbb rename useLoginAsId -> useLoginAsID 2019-02-04 14:05:57 +00:00
Stephan Renatus
be171a2a53 Merge pull request #1395 from hainesc/master 
Display access token in example app
 2019-02-04 14:24:01 +01:00
Joel Speed
8f113548a5 Merge pull request #1249 from srenatus/sr/add-ldap-filter-test 
ldap_test: add filter tests
 2019-02-03 15:58:54 +00:00
Stephan Renatus
b6f4740a15 Merge pull request #1390 from okamototk/activedirectory 
Add Active Directory and kubelogin integration sample.
 2019-02-03 11:09:33 +01:00
Stephan Renatus
df18cb0c22 ldap_test: add filter tests 
The filters for user and group searches hadn't been included in our LDAP
tests. Now they are.

The concrete test cases are somewhat contrived, but that shouldn't
matter too much. Also note that the example queries I've used are not
supported in AD: https://stackoverflow.com/a/10043452

Signed-off-by: Stephan Renatus <srenatus@chef.io>
 2019-02-03 11:06:11 +01:00
James Nord
5822a5ce9e fix formatting of connector/github/github_test.go 2019-02-01 11:47:45 +00:00
James Nord
1911b52c6b Add documentation for the new GitHub useLoginAsId option 2019-02-01 11:37:40 +00:00
James Nord
03ffd0798c Allow an option to use the github user handle rather than an id. 
For downstream apps using a github handle is much simpler than working
with numbers.

WHilst the number is stable and the handle is not - GitHUb does give you
a big scary wanring if you try and change it that bad things may happen
to you, and generally few users ever change it.

This can be enabled with a configuration option `useLoginAsId`
 2019-02-01 11:37:40 +00:00
Haines Chan
18b6b34b67 Display access token in example app 2019-02-01 15:39:35 +08:00
Stephan Renatus
b5826e66f0 Merge pull request #1394 from srenatus/sr/docs/maintainers 
update MAINTAINERS, mirror guidelines into dev doc
 2019-01-31 17:25:27 +01:00
Stephan Renatus
81f155882a Merge pull request #1392 from stevendanna/tls-configuration 
Bump minimum TLS protocol to TLSv1.2
 2019-01-29 12:48:57 +01:00
Steven Danna
59f8b02d47 Set minimum TLS protocol version to TLSv1.2, set PreferServerCipherSuites 
Some environments are subject to strict rules about the permitted TLS
protocol verion and available ciphers. Setting TLSv1.2 as the minimum
version ensures we do not use weaker protocols. We've opted against
making this configurable given the age of TLSv1.2 and the increasing
push to deprecate TLSv1.1 and older.

The PreferServerCipherSuites setting is also commonly flagged by SSL
quality scanning tools. Since Go provides a relatively modern set of
default ciphers by default, defaulting this to true is unlikely to
make much practical difference.

Signed-off-by: Steven Danna <steve@chef.io>
 2019-01-29 11:18:55 +00:00
Stephan Renatus
4abf3b2102 docs: mirror resolution of #1281 in dev doc 
Signed-off-by: Stephan Renatus <srenatus@chef.io>
 2019-01-29 10:29:12 +01:00
Stephan Renatus
2cfadcd95a MAINTAINERS: add @JoelSpeed 
Signed-off-by: Stephan Renatus <srenatus@chef.io>
 2019-01-29 10:25:55 +01:00
Takashi Okamoto
337bbe5f09 fix typos. 2019-01-26 10:44:50 +00:00
Takashi Okamoto
1b7b3515d7 Add Active Directory instruction. 2019-01-26 04:26:01 +00:00
Takashi Okamoto
fbdb55aba9 Add doc for kubelogin and Active Directory ingtegration sample. 2019-01-26 04:16:55 +00:00
Takashi Okamoto
2d7de4ec70 Add Active Directory and kubeloing integration sample. 2019-01-26 04:15:50 +00:00
Stephan Renatus
5ae094206b Merge pull request #1389 from ericchiang/bump-go 
Dockerfile: update Go to 1.11.5
 2019-01-24 08:52:33 +01:00
Eric Chiang
86eeee2ae2 Dockerfile: update Go to 1.11.5 2019-01-23 14:16:50 -08:00
Stephan Renatus
f1581ff873 Merge pull request #1374 from kbalka/keystone-connector 
PR contains connector for openstack keystone.

Features:

    access tokens
    refresh tokens
    groups

Requirements:

    access to openstack keystone instance
    keystone administrative account credentials

Enabling keystone connector specific tests:

    make sure docker is running
    export DEX_TEST_KEYSTONE=1
    make tests
 2019-01-11 15:46:28 +01:00
Krzysztof Balka
e8ba848907 keystone: fetching groups only if requested, refactoring. 2019-01-11 15:14:59 +01:00
joannano
88d1e2b041 keystone: test cases, refactoring and cleanup 2019-01-11 15:14:56 +01:00
Krzysztof Balka
a965365a2b keystone: refresh token and groups 2019-01-11 15:14:11 +01:00
knangia
0774a89066 keystone: squashed changes from knangia/dex 2019-01-11 15:12:59 +01:00
Stephan Renatus
2d1ac74ec0 Merge pull request #1380 from dkess/emailsuffix 
LDAP connector - add emailSuffix config option
 2019-01-09 08:16:41 +01:00
Daniel Kessler
ee54a50956 LDAP connector - add emailSuffix config option 2019-01-08 19:01:42 -08:00
Eric Chiang
27f66e795e Merge pull request #1377 from hainesc/master 
Replace "GET", "POST" to http.MethodGet and http.MethodPost
 2018-12-27 10:41:47 -08:00
Haines Chan
b78b8aeee0 Replace "GET", "POST" to http.MethodGet and http.MethodPost 2018-12-27 16:27:36 +08:00