Eric Stroczynski
9c6b6d565e
Documentation: oidc conformance test case and issue tables
2017-08-25 13:43:21 -07:00
Eric Stroczynski
a065533256
Documentation: OIDC conformance test setup
2017-08-25 01:05:53 -07:00
Eric Stroczynski
9b46267659
Merge pull request #1040 from estroz/change-bcrypt-default
...
server: set sane bcrypt cost upper bound
2017-08-21 14:37:04 -07:00
Eric Stroczynski
763e174a7f
Merge pull request #1039 from estroz/move-group-scope-check
...
connector/github: fix groups scope check when 'orgs' is populated
2017-08-21 14:36:44 -07:00
Eric Stroczynski
ce9ac761a6
connector/github: abstract scope check and group getter
2017-08-21 14:30:00 -07:00
Eric Stroczynski
2b354c8fdb
server: set sane bcrypt cost upper bound
2017-08-21 11:53:46 -07:00
Eric Stroczynski
e92f38f38f
connector/github: error if no groups scope without orgs
...
We should always check if a user is in any orgs or teams specified
in config, and whether the groups scope is also included in client
requests. If not, return an error, because dex wouldn't have required
permissions to do the request anyway (need read:org).
2017-08-17 17:15:45 -07:00
Eric Stroczynski
20fd3163d9
Merge pull request #1036 from estroz/debug-to-info-github
...
connector/github: debug->info logging, informative userInOrg msg
2017-08-17 12:11:10 -07:00
Eric Stroczynski
5894d017d5
connector/github: debug->info logging, more informative userInOrg msg
2017-08-17 11:56:35 -07:00
Eric Stroczynski
b84721cbda
Merge pull request #1035 from estroz/user-login-github-patch
...
connector/github: fix username used when making API requests
2017-08-17 11:39:39 -07:00
Eric Stroczynski
484327fd5f
connector/github: only user users' login name in API reqs
2017-08-17 10:32:18 -07:00
Eric Stroczynski
7e580ec2b2
Merge pull request #1029 from estroz/doc-link-fix
...
Documentation: fixed GitHub link syntax
2017-08-16 14:14:22 -07:00
Eric Stroczynski
bb36c96674
Documentation: fixed GitHub link syntax
2017-08-16 14:10:23 -07:00
Eric Stroczynski
48bb61cfe0
Merge pull request #1028 from estroz/gitlab-scopes
...
connector/gitlab: correct scope strings, better default
2017-08-15 14:57:05 -07:00
Eric Stroczynski
ca75470ae3
connector/gitlab: correct scope strings, better default
2017-08-15 14:49:00 -07:00
Eric Stroczynski
71de7e8414
Documentation: github org redirect caveat
2017-08-11 16:42:33 -07:00
Eric Stroczynski
c45185f601
Merge pull request #1018 from estroz/github-private-emails
...
connector/github: enable private, primary emails
2017-08-09 09:36:18 -07:00
Eric Stroczynski
26527011ab
connector/github: enable private, primary emails; refactor API calls
...
Documentation: removed private emails caveats section
2017-08-08 18:04:34 -07:00
Eric Stroczynski
45bf061236
Merge pull request #1013 from estroz/multi-org-team-filters
...
connector/github: multiple orgs, query by teams
2017-08-08 11:37:21 -07:00
Eric Stroczynski
9d154802a2
connector/github: multiple orgs, query by teams
...
Documentation: examples of GitHub `orgs` field with multiple orgs
and org with teams; note legacy behavior
2017-08-08 10:57:42 -07:00
Eric Stroczynski
f493896030
Merge pull request #1016 from realfake/patch-2
...
Fix documentation link
2017-08-07 13:50:47 -07:00
Eric Stroczynski
4bcb0aaae9
server: log bcrypt cost if > 12, error on runtime > 10s
...
The bcrypt hashing algorithm runtime grows exponentially with cost,
and might cause a timeout if the cost is too high. Notifying the user
of high cost and of long running calculations will help with tuning
and debugging.
2017-07-25 17:09:43 -07:00
Eric Stroczynski
a0010d0f22
Merge pull request #1005 from estroz/update-deps
...
Update deps
2017-07-25 15:48:08 -07:00
Eric Stroczynski
d9778fda4a
vendor: revendor
2017-07-25 13:49:34 -07:00
Eric Stroczynski
4a88d0641a
: update {S->s}irupsen/logrus
2017-07-25 13:46:44 -07:00
Eric Stroczynski