Forked Dex to convert GitHub usernames to lowercase
This repository has been archived on 2023-08-14. You can view files and clone it, but cannot push or open issues or pull requests.
Go to file
Eric Chiang a12d2f85a8 README: add section about reporting security vulnerabilities
It was pointed out by @davidillsley that we don't point this out
anywhere in our docs.
2017-04-19 13:42:03 -07:00
api *: revendor and regenerate protobuf files 2017-04-13 11:35:41 -07:00
cmd *: promote SAML to stable 2017-04-11 10:09:48 -07:00
connector connector/ldap: support the StartTLS flow for secure connections 2017-04-12 15:25:42 -07:00
Documentation connector/ldap: support the StartTLS flow for secure connections 2017-04-12 15:25:42 -07:00
examples examples/grpc-client: clean up the example and add tlsClientCA to ConfigMap. 2017-03-23 16:57:23 -07:00
scripts *: fix spelling using github.com/client9/misspell 2017-03-20 09:16:56 -07:00
server *: revendor and regenerate protobuf files 2017-04-13 11:35:41 -07:00
storage storage/static.go: correct the error message that gets displayed. 2017-03-29 11:32:02 -07:00
vendor *: revendor and regenerate protobuf files 2017-04-13 11:35:41 -07:00
version *: determine version from git 2016-08-09 14:38:09 -07:00
web web/static/main.css: fix typo. 2017-02-20 08:48:36 -08:00
.dockerignore *: only use docker when releasing, update to Go 1.8, remove aci scripts 2017-03-09 10:46:09 -08:00
.gitignore *: prepare build scripts for a release 2016-10-05 23:43:44 -07:00
.travis.yml *: run LDAP tests in travis 2017-04-10 15:33:07 -07:00
DCO *: add DCO and LICENSE 2016-10-13 11:33:32 -07:00
Dockerfile *: add theme based frontend configuration 2016-11-30 17:20:21 -08:00
glide_test.go *: add 'make revendor' and tests to catch incorrect glide usage 2016-12-22 11:52:24 -08:00
glide.lock *: revendor and regenerate protobuf files 2017-04-13 11:35:41 -07:00
glide.yaml *: update grpc and correct protobuf generation 2017-04-13 11:32:19 -07:00
LICENSE *: add DCO and LICENSE 2016-10-13 11:33:32 -07:00
Makefile *: update grpc and correct protobuf generation 2017-04-13 11:32:19 -07:00
README.md README: add section about reporting security vulnerabilities 2017-04-19 13:42:03 -07:00

dex - A federated OpenID Connect provider

Travis GoDoc Go Report Card

logo

Dex is an OpenID Connect server that connects to other identity providers. Clients use a standards-based OAuth2 flow to login users, while the actual authentication is performed by established user management systems such as Google, GitHub, FreeIPA, etc.

OpenID Connect is a flavor of OAuth that builds on top of OAuth2 using the JOSE standards. This allows dex to provide:

  • Short-lived, signed tokens with standard fields (such as email) issued on behalf of users.
  • "well-known" discovery of OAuth2 endpoints.
  • OAuth2 mechanisms such as refresh tokens and revocation for long term access.
  • Automatic signing key rotation.

Standards-based token responses allows applications to interact with any OpenID Connect server instead of writing backend specific "access_token" dances. Systems that can already consume ID Tokens issued by dex include:

Kubernetes + dex

Dex's main production use is as an auth-N addon in CoreOS's enterprise Kubernetes solution, Tectonic. Dex runs natively on top of any Kubernetes cluster using Third Party Resources and can drive API server authentication through the OpenID Connect plugin. Clients, such as the Tectonic Console and kubectl, can act on behalf users who can login to the cluster through any identity provider dex supports.

More docs for running dex as a Kubernetes authenticator can be found here.

Documentation

Reporting a security vulnerability

Due to their public nature, GitHub and mailing lists are NOT appropriate places for reporting vulnerabilities. Please refer to CoreOS's security disclosure process when reporting issues that may be security related.

Getting help

  • For feature requests and bugs, file an issue.
  • For general discussion about both using and developing dex, join the dex-dev mailing list.
  • For more details on dex development plans, check out the GitHub milestones.