k-space/dex
Archived
10
0
Fork 0
Code Issues Pull Requests Packages Projects Activity
Forked Dex to convert GitHub usernames to lowercase
This repository has been archived on 2023-08-14. You can view files and clone it, but cannot push or open issues or pull requests.
36 Commits 1 Branch 0 Tags 18 MiB
Go 97.9%
CSS 0.6%
HTML 0.5%
Makefile 0.5%
Dockerfile 0.2%
Other 0.2%
d313e5d493
Go to file
Eric Chiang d313e5d493 *: add example for running on kubernetes
2016-08-10 17:50:55 -07:00
cmd *: add example for running on kubernetes 2016-08-10 17:50:55 -07:00
connector *: implement the OpenID Connect connector 2016-08-08 11:49:47 -07:00
Documentation/proposals proposals: user objects for revoking refresh tokens and merging accounts 2016-08-08 10:31:59 -07:00
example *: add example for running on kubernetes 2016-08-10 17:50:55 -07:00
scripts *: determine version from git 2016-08-09 14:38:09 -07:00
server server: update discovery to include offline_access scope 2016-08-08 19:10:32 -07:00
storage *: load static clients from config file 2016-08-05 09:54:03 -07:00
vendor *: revendor 2016-08-08 11:49:47 -07:00
version *: determine version from git 2016-08-09 14:38:09 -07:00
.gitignore initial commit 2016-07-26 15:51:24 -07:00
Dockerfile *: add dockerfile 2016-08-09 15:27:10 -07:00
glide_test.go initial commit 2016-07-26 15:51:24 -07:00
glide.lock *: revendor 2016-08-08 11:49:47 -07:00
glide.yaml *: bump oidc client package to latest 2016-08-08 11:49:47 -07:00
Makefile *: add dockerfile 2016-08-09 15:27:10 -07:00
README.md *: add README 2016-08-09 12:40:01 -07:00

README.md

dex - A federated OpenID Connect provider

dex is an OAuth2 server that presents clients with a low overhead framework for identifying users while leveraging existing identity services such as Google Accounts, FreeIPA, GitHub, etc, for actual authentication. dex sits between your applications and an identity service, providing a backend agnostic flavor of OAuth2 called OpenID Connect, a spec will allows dex to support:

  • Short-lived, signed tokens with predefined fields (such as email) issued on behalf of users.
  • Well known discovery of OAuth2 endpoints.
  • OAuth2 mechanisms such as refresh tokens and revocation for long term access.
  • Automatic signing key rotation.

Any system which can query dex can cryptographically verify a users identity based on these tokens, allowing authentication events to be passed between backend services.

One such application that consumes OpenID Connect tokens is the Kubernetes API server, allowing dex to provide identity for any Kubernetes clusters.