Commit Graph
56 Commits
Author SHA1 Message Date
Maksim NabokikhandGitHub 449f66477c feat: Add AuthSession GC (#4667)
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
2026-03-20 20:06:43 +01:00
Maksim NabokikhandGitHub cbd7dd7f5a feat: Create AuthSessions and set cookies (#4650)
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
2026-03-18 11:58:18 +01:00
Maksim NabokikhandGitHub 6b9ce00e11 feat: implement AuthSession CRUD operations (#4646)
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
2026-03-16 17:06:53 +01:00
5a4395fd12 feat: add UserIdentity entity and CRUD operations (#4643)
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
Signed-off-by: Maksim Nabokikh <max.nabokih@gmail.com>
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
2026-03-14 12:58:18 +01:00
Maksim NabokikhandGitHub 9bee809252 feat(crd): add CRD handling behavior and configuration options (#4543)
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
2026-02-15 21:56:29 +01:00
Ivan ZviagintsevandGitHub d1b2722e39 feat: support groups and preferred_username for staticPasswords (#4456)
Signed-off-by: Ivan Zvyagintsev <ivan.zvyagintsev@flant.com>
2026-01-13 10:07:21 +01:00
Maksim NabokikhandGitHub a4449010a4 k8s storage: Request only one object to check if API exists (#4027)
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
2025-03-06 11:55:34 +01:00
Bob MaertzandGitHub ad31b5d6f7 Passing context storage (#3941)
Signed-off-by: Bob Maertz <1771054+bobmaertz@users.noreply.github.com>
2025-02-04 10:11:44 +01:00
Sean LiaoandGitHub 0b6a78397e use slog for structured logging (#3502)
Signed-off-by: Sean Liao <sean+git@liao.dev>
2024-06-01 20:15:58 +04:00
Ferenc FabianandGitHub 2377b0a0cd Add context to storage's Create endpoints (#2935)
* Initial commit

Signed-off-by: PumpkinSeed <qwer.kocka@gmail.com>

* Finish the syntex fixes

Signed-off-by: PumpkinSeed <qwer.kocka@gmail.com>

* Add fixes after running the tests

Signed-off-by: PumpkinSeed <qwer.kocka@gmail.com>

* Change background context to request context

Signed-off-by: PumpkinSeed <qwer.kocka@gmail.com>

---------

Signed-off-by: PumpkinSeed <qwer.kocka@gmail.com>
2024-01-25 12:51:25 +01:00
m.nabokikh 4b5f1d5289 fix: refresh token only once for all concurrent requests
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
2022-10-02 23:37:27 +02:00
Michael Kelly a51d12056f Tweaks based on review comments
Signed-off-by: Michael Kelly <mkelly@arista.com>
2022-06-09 08:21:03 -07:00
Michael Kelly 502a2d0d4a Limit the amount of objects we attempt to GC on each cycle
If something causes the number k8s resources to increase beyond a
certain threshold, garbage collection can fail because the query to
retrieve those resources will time out, resulting in a perpetual cycle
of being unable to garbage collect resources.

In lieu of trying to get *every* object each cycle, we can limit the
number of resources retrieved per GC cycle to some reasonable number.

Signed-off-by: Michael Kelly <mkelly@arista.com>
2022-05-20 09:18:05 -07:00
m.nabokikh 9fad0602ec fix: do not update offlinesession lastUsed field if refresh token was not change
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
2021-10-19 01:16:34 +04:00
m.nabokikh d413870f6e feat: Update token periodically if Dex is running in Kubernetes cluster
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
2021-07-12 13:00:46 +04:00
m.nabokikh 7a2472555a feat: Create CRDs as apiextensions.k8s.io/v1
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
2021-06-10 20:00:49 +04:00
Josh Soref 0288864da7 spelling: collision
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
2020-12-19 22:12:13 -05:00
m.nabokikh be378dd9a7 feat: Retry Kubernetes update requests
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
2020-10-28 12:46:58 +04:00
m.nabokikh 4801b2c975 fix: Handle kubernetes API conflicts properly for signing keys
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
2020-10-12 09:15:00 +03:00
Justin Slowikandjustin-slowik 9bbdc721d5 Device flow token code exchange (#2)
* Added /device/token handler with associated business logic and storage tests.

Perform user code exchange, flag the device code as complete.

Moved device handler code into its own file for cleanliness.  Cleanup

* Removed PKCE code

* Rate limiting for /device/token endpoint based on ietf standards

* Configurable Device expiry

Signed-off-by: justin-slowik <justin.slowik@thermofisher.com>
2020-07-08 16:25:05 -04:00
Justin Slowikandjustin-slowik 0d1a0e4129 Device token api endpoint (#1)
* Added /device/token handler with associated business logic and storage tests.

* Use crypto rand for user code

Signed-off-by: justin-slowik <justin.slowik@thermofisher.com>
2020-07-08 16:25:05 -04:00
Justin Slowik 6d343e059b Generates/Stores the device request and returns the device and user codes.
Signed-off-by: justin-slowik <justin.slowik@thermofisher.com>
2020-07-08 16:25:05 -04:00
Michael Venezia 395febf808 storage/kubernetes: Removing Kubernetes TPR support
Third Party Resources (TPR) have been removed from Kubernetes for
roughly 2 years.  This commit removes the support dex had for them.

Documentation has been updated to reflect this and to instruct users
on how to migrate from TPR-powered dex environment to a Custom Resource
Defintion (CRD) based one that dex > v2.17 will support
2019-08-14 09:28:18 -04:00
Mark Sagi-Kazar be581fa7ff Add logger interface and stop relying on Logrus directly 2019-02-22 13:38:57 +01:00
Song.Jin 5f0a03a06b modify log msg as per suggested 2018-11-06 11:18:55 +11:00