Maksim Nabokikh and GitHub
449f66477c
feat: Add AuthSession GC ( #4667 )
...
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com >
2026-03-20 20:06:43 +01:00
Maksim Nabokikh and GitHub
cbd7dd7f5a
feat: Create AuthSessions and set cookies ( #4650 )
...
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com >
2026-03-18 11:58:18 +01:00
Maksim Nabokikh and GitHub
6b9ce00e11
feat: implement AuthSession CRUD operations ( #4646 )
...
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com >
2026-03-16 17:06:53 +01:00
5a4395fd12
feat: add UserIdentity entity and CRUD operations ( #4643 )
...
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com >
Signed-off-by: Maksim Nabokikh <max.nabokih@gmail.com >
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com >
2026-03-14 12:58:18 +01:00
Maksim Nabokikh and GitHub
9bee809252
feat(crd): add CRD handling behavior and configuration options ( #4543 )
...
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com >
2026-02-15 21:56:29 +01:00
Ivan Zviagintsev and GitHub
d1b2722e39
feat: support groups and preferred_username for staticPasswords ( #4456 )
...
Signed-off-by: Ivan Zvyagintsev <ivan.zvyagintsev@flant.com >
2026-01-13 10:07:21 +01:00
Maksim Nabokikh and GitHub
a4449010a4
k8s storage: Request only one object to check if API exists ( #4027 )
...
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com >
2025-03-06 11:55:34 +01:00
Bob Maertz and GitHub
ad31b5d6f7
Passing context storage ( #3941 )
...
Signed-off-by: Bob Maertz <1771054+bobmaertz@users.noreply.github.com >
2025-02-04 10:11:44 +01:00
Sean Liao and GitHub
0b6a78397e
use slog for structured logging ( #3502 )
...
Signed-off-by: Sean Liao <sean+git@liao.dev >
2024-06-01 20:15:58 +04:00
Ferenc Fabian and GitHub
2377b0a0cd
Add context to storage's Create endpoints ( #2935 )
...
* Initial commit
Signed-off-by: PumpkinSeed <qwer.kocka@gmail.com >
* Finish the syntex fixes
Signed-off-by: PumpkinSeed <qwer.kocka@gmail.com >
* Add fixes after running the tests
Signed-off-by: PumpkinSeed <qwer.kocka@gmail.com >
* Change background context to request context
Signed-off-by: PumpkinSeed <qwer.kocka@gmail.com >
---------
Signed-off-by: PumpkinSeed <qwer.kocka@gmail.com >
2024-01-25 12:51:25 +01:00
m.nabokikh
4b5f1d5289
fix: refresh token only once for all concurrent requests
...
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com >
2022-10-02 23:37:27 +02:00
Michael Kelly
a51d12056f
Tweaks based on review comments
...
Signed-off-by: Michael Kelly <mkelly@arista.com >
2022-06-09 08:21:03 -07:00
Michael Kelly
502a2d0d4a
Limit the amount of objects we attempt to GC on each cycle
...
If something causes the number k8s resources to increase beyond a
certain threshold, garbage collection can fail because the query to
retrieve those resources will time out, resulting in a perpetual cycle
of being unable to garbage collect resources.
In lieu of trying to get *every* object each cycle, we can limit the
number of resources retrieved per GC cycle to some reasonable number.
Signed-off-by: Michael Kelly <mkelly@arista.com >
2022-05-20 09:18:05 -07:00
m.nabokikh
9fad0602ec
fix: do not update offlinesession lastUsed field if refresh token was not change
...
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com >
2021-10-19 01:16:34 +04:00
m.nabokikh
d413870f6e
feat: Update token periodically if Dex is running in Kubernetes cluster
...
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com >
2021-07-12 13:00:46 +04:00
m.nabokikh
7a2472555a
feat: Create CRDs as apiextensions.k8s.io/v1
...
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com >
2021-06-10 20:00:49 +04:00
Josh Soref
0288864da7
spelling: collision
...
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com >
2020-12-19 22:12:13 -05:00
m.nabokikh
be378dd9a7
feat: Retry Kubernetes update requests
...
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com >
2020-10-28 12:46:58 +04:00
m.nabokikh
4801b2c975
fix: Handle kubernetes API conflicts properly for signing keys
...
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com >
2020-10-12 09:15:00 +03:00
Justin Slowik and justin-slowik
9bbdc721d5
Device flow token code exchange ( #2 )
...
* Added /device/token handler with associated business logic and storage tests.
Perform user code exchange, flag the device code as complete.
Moved device handler code into its own file for cleanliness. Cleanup
* Removed PKCE code
* Rate limiting for /device/token endpoint based on ietf standards
* Configurable Device expiry
Signed-off-by: justin-slowik <justin.slowik@thermofisher.com >
2020-07-08 16:25:05 -04:00
Justin Slowik and justin-slowik
0d1a0e4129
Device token api endpoint ( #1 )
...
* Added /device/token handler with associated business logic and storage tests.
* Use crypto rand for user code
Signed-off-by: justin-slowik <justin.slowik@thermofisher.com >
2020-07-08 16:25:05 -04:00
Justin Slowik
6d343e059b
Generates/Stores the device request and returns the device and user codes.
...
Signed-off-by: justin-slowik <justin.slowik@thermofisher.com >
2020-07-08 16:25:05 -04:00
Michael Venezia
395febf808
storage/kubernetes: Removing Kubernetes TPR support
...
Third Party Resources (TPR) have been removed from Kubernetes for
roughly 2 years. This commit removes the support dex had for them.
Documentation has been updated to reflect this and to instruct users
on how to migrate from TPR-powered dex environment to a Custom Resource
Defintion (CRD) based one that dex > v2.17 will support
2019-08-14 09:28:18 -04:00
Mark Sagi-Kazar
be581fa7ff
Add logger interface and stop relying on Logrus directly
2019-02-22 13:38:57 +01:00
Song.Jin
5f0a03a06b
modify log msg as per suggested
2018-11-06 11:18:55 +11:00