jnfrati
d493d44cbb
fix: implement id token hint on rp initiated logout
...
Signed-off-by: jnfrati <nicofrati@gmail.com >
2026-04-13 19:25:51 +02:00
Maksim Nabokikh and GitHub
3bf25fd6e0
feat: add SSO sharing policy ( #4705 )
...
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com >
2026-04-02 14:18:53 +02:00
546e66cb5d
feat: add WebAuthn support ( #4704 )
...
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com >
Signed-off-by: Maksim Nabokikh <max.nabokih@gmail.com >
Co-authored-by: Alwx <alwxsin@gmail.com >
2026-04-02 11:48:46 +02:00
Maksim Nabokikh and GitHub
58f148dd28
feat: implement OIDC RP-Initiated logout ( #4674 )
...
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com >
Signed-off-by: Maksim Nabokikh <max.nabokih@gmail.com >
2026-04-01 08:58:44 +02:00
Maksim Nabokikh and GitHub
449f66477c
feat: Add AuthSession GC ( #4667 )
...
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com >
2026-03-20 20:06:43 +01:00
Maksim Nabokikh and GitHub
c3bc1d7466
feat: add auth_time, prompt, and max_age fields ( #4662 )
...
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com >
2026-03-19 15:53:15 +01:00
Maksim Nabokikh and GitHub
86abd336f8
Two-Factor authentication (TOTP) ( #3712 )
...
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com >
2026-03-18 18:20:20 +01:00
Maksim Nabokikh and GitHub
cbd7dd7f5a
feat: Create AuthSessions and set cookies ( #4650 )
...
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com >
2026-03-18 11:58:18 +01:00
Maksim Nabokikh and GitHub
6b9ce00e11
feat: implement AuthSession CRUD operations ( #4646 )
...
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com >
2026-03-16 17:06:53 +01:00
Maksim Nabokikh and GitHub
93985dedff
fix: increase lock acquisition attempts from 60 to 200 for better reliability ( #4644 )
...
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com >
2026-03-16 08:45:39 +01:00
5a4395fd12
feat: add UserIdentity entity and CRUD operations ( #4643 )
...
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com >
Signed-off-by: Maksim Nabokikh <max.nabokih@gmail.com >
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com >
2026-03-14 12:58:18 +01:00
Maksim Nabokikh and GitHub
f80a89dd5d
feat(client): add allowed connectors field to client configuration ( #4610 )
...
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com >
2026-03-11 23:00:38 +01:00
Maksim Nabokikh and GitHub
7777773067
feat(connector): connectors for grants ( #4619 )
...
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com >
2026-03-11 07:21:14 +01:00
Maksim Nabokikh and GitHub
3d97c59032
test: add concurrency tests for storage implementations ( #4631 )
...
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com >
2026-03-10 15:55:10 +01:00
Maksim Nabokikh and GitHub
9bee809252
feat(crd): add CRD handling behavior and configuration options ( #4543 )
...
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com >
2026-02-15 21:56:29 +01:00
Ivan Zviagintsev and GitHub
9e377718dc
feat: add name and emailVerified fields for static passwords ( #4526 )
...
Signed-off-by: Ivan Zvyagintsev <ivan.zvyagintsev@flant.com >
2026-02-12 12:13:54 +01:00
Ivan Zviagintsev and GitHub
d1b2722e39
feat: support groups and preferred_username for staticPasswords ( #4456 )
...
Signed-off-by: Ivan Zvyagintsev <ivan.zvyagintsev@flant.com >
2026-01-13 10:07:21 +01:00
Rene Dekker and GitHub
9355759813
fix(storage/kubernetes): Only wrap IPv6 addresses in brackets ( #4388 )
...
The Kubernetes client code was wrapping all IP addresses (both IPv4 and
IPv6) in square brackets when constructing the API server URL. This was
based on an incorrect assumption that IPv4 addresses in brackets are valid
in a URL.
Recent versions of Go (1.25.2 and later) have stricter URL parsing
that conforms to RFC 3986. This causes a failure when running Dex in a
Kubernetes environment where the KUBERNETES_SERVICE_HOST is an IPv4
address, leading to the error "invalid IPv6 host".
This commit changes the logic to only wrap IPv6 addresses in square
brackets. It uses `ip.To4() == nil` to reliably detect if an IP address
is IPv6 before wrapping it. This ensures that URLs are correctly
formatted for both IPv4 and IPv6 addresses, fixing the incompatibility
with newer Go versions.
Signed-off-by: Rene Dekker <rene@tigera.io >
2025-11-03 10:50:25 +01:00
Maksim Nabokikh and GitHub
7e2225c0e6
Do not wrap Kubernetes Address in brackets ( #4363 )
...
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com >
2025-10-23 11:29:25 +02:00
Mark Sagi-Kazar
e230d9426d
test: use new Go features in tests
...
Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com >
2025-08-18 14:09:26 +02:00
Oleksandr Redko and GitHub
9891daa585
refactor: simplify tests by using slog.DiscardHandler ( #4058 )
...
Signed-off-by: Oleksandr Redko <oleksandr.red+github@gmail.com >
2025-04-03 09:56:18 +02:00
Maksim Nabokikh and GitHub
a4449010a4
k8s storage: Request only one object to check if API exists ( #4027 )
...
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com >
2025-03-06 11:55:34 +01:00
Bob Maertz and GitHub
ad31b5d6f7
Passing context storage ( #3941 )
...
Signed-off-by: Bob Maertz <1771054+bobmaertz@users.noreply.github.com >
2025-02-04 10:11:44 +01:00
Sean Liao and GitHub
0b6a78397e
use slog for structured logging ( #3502 )
...
Signed-off-by: Sean Liao <sean+git@liao.dev >
2024-06-01 20:15:58 +04:00
7225198ae7
Update max length of kubernetes object to fit kubernetes policy ( #3439 )
...
Signed-off-by: Denys Romanenko <65756796+RomanenkoDenys@users.noreply.github.com >
Signed-off-by: Maksim Nabokikh <max.nabokih@gmail.com >
Co-authored-by: Maksim Nabokikh <max.nabokih@gmail.com >
2024-03-28 20:58:59 +01:00