netbird/dex
0
0
Fork 0
mirror of https://github.com/netbirdio/dex.git synced 2026-05-22 18:43:53 -07:00
Code Issues Packages Projects Releases Wiki Activity
3,860 Commits 3 Branches 2 Tags
master
Commit Graph
391 Commits
Author SHA1 Message Date
jnfrati d493d44cbb fix: implement id token hint on rp initiated logout 
Signed-off-by: jnfrati <nicofrati@gmail.com>
 2026-04-13 19:25:51 +02:00
Mathias GebbeandGitHub eec8f76742 feat(microsoft): map userPrincipalName to preferred_username claim (#4725) 
Signed-off-by: Mathias Gebbe <mathias.gebbe@gmail.com>
 2026-04-10 16:23:32 +02:00
Maksim NabokikhandGitHub 58f148dd28 feat: implement OIDC RP-Initiated logout (#4674) 
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
Signed-off-by: Maksim Nabokikh <max.nabokih@gmail.com>
 2026-04-01 08:58:44 +02:00
Nick NikolakakisandGitHub 830fca93e0 fix: migrate Bitbucket Cloud connector to current workspace API (#4687) 
Signed-off-by: Nick Nikolakakis <nonicked@protonmail.com>
 2026-03-31 09:31:59 +02:00
Yarden ShohamandGitHub 90fd51b81e feat(ldap): allow specifying multiple attributes on username input (#4061) 
In some use-cases, one would like to login using either their username or email. Administrators now don't have to choose a single field but may specify multiple fields to count as "username".

Signed-off-by: Yarden Shoham <git@yardenshoham.com>
 2026-03-17 11:19:31 +01:00
Uğur TafralıandGitHub 0f9b7eba77 Pin GitHub API version in requests (#4647) 
Signed-off-by: utafrali <tafraliugur@gmail.com>
 2026-03-16 13:48:11 +01:00
Maksim NabokikhandGitHub a11b3cd2ef feat(gitlab): implement TokenIdentity method (#4606) 
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
 2026-03-05 13:29:49 +01:00
Maksim NabokikhandGitHub 47e84dba69 feat(connector): add compile-time checks for connector interfaces (#4591) 
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
 2026-02-26 16:43:17 +01:00
Mathias GebbeandGitHub 44e27490be fix(connector): update authproxy and oauth to match CallbackConnector interface (#4589) 
The PKCE support added in v2.45.0 changed the CallbackConnector interface
signatures but missed updating the authproxy and oauth connectors. This
caused a type assertion failure in handleConnectorLogin(), resulting in
"Requested resource does not exist" errors when using these connectors.

Update LoginURL to return (string, []byte, error) and HandleCallback to
accept a []byte connData parameter for both connectors and their tests.

Signed-off-by: Mathias Gebbe <mathias.gebbe@gmail.com>
 2026-02-26 16:09:07 +01:00
Ivan ZviagintsevandGitHub 4311931881 feat: saml support refresh tokens (#4565) 
Signed-off-by: Ivan Zvyagintsev <ivan.zvyagintsev@flant.com>
 2026-02-26 15:27:47 +01:00
Maksim NabokikhandGitHub cf17fc68c8 test: update HandleCallback after merging OIDC PKCE (#4572) 
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
 2026-02-22 22:55:17 +01:00
Aljoscha BollmannandGitHub 83697b06a6 fix(server): respond with forbidden if failed to authenticate (#4200) 
Signed-off-by: Aljoscha Bollmann <aljoscha.bollmann@proton.me>
 2026-02-22 22:41:35 +01:00
Giovanni VellaandGitHub 25591eeaf4 Add support to PKCE in OIDC connector (#3777) 
Signed-off-by: johnvan7 <giovanni.vella98@gmail.com>
Signed-off-by: Giovanni Vella <giovanni.vella98@gmail.com>
 2026-02-22 22:37:10 +01:00
Maksim NabokikhandGitHub 489e37d07a fix: suppress deprecation warning for userAttr when not set (#4539) 
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
 2026-02-13 13:19:20 +01:00
Ivan ZviagintsevandGitHub f7691ce1fe gitlab: support custom rootCAData (#4496) 
Signed-off-by: Ivan Zvyagintsev <ivan.zvyagintsev@flant.com>
 2026-01-30 08:26:47 +01:00
Mark Sagi-Kazar 26accba6b1 ci: update linter 
Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>
 2025-08-18 14:21:00 +02:00
Alex BGitHubMaksim NabokikhMaksim Nabokikh
 		c121d47506 authproxy connector: add support for specifying group header separator (#3745) 
Signed-off-by: a-buck <5923598+a-buck@users.noreply.github.com>
Signed-off-by: Maksim Nabokikh <maksim.nabokikh@flant.com>
Signed-off-by: Maksim Nabokikh <max.nabokih@gmail.com>
Co-authored-by: Maksim Nabokikh <maksim.nabokikh@flant.com>
Co-authored-by: Maksim Nabokikh <max.nabokih@gmail.com>
 2025-08-05 23:02:06 +02:00
Mathias PetermannandGitHub f7d34b2b0f feat: Add ModifyGroupNames claimMutation to oidc connector (#4144) 
Signed-off-by: Mathias Petermann <mathias.petermann@swisscom.com>
 2025-07-18 13:46:32 +02:00
Vasily MaryutenkovandGitHub 67b4228595 [oidc] pass httpClient to the TokenIdentity context (#4223) 
Signed-off-by: Vasily Maryutenkov <vasily.maryutenkov@flant.com>
 2025-07-18 10:29:53 +02:00
EthanDieterichandGitHub 7208747072 Add LDAP parent groups search, Active Directory Hierarchy (#4113) 
This commit enables universal nested group search support across a
variety of LDAP server implementations.  It updates the code to allow
recursive group membership discovery during user authentication and
provides CI tests to validate the functionality.

Based on @paroque’s original https://github.com/dexidp/dex/pull/1058
PR.

- Removed `Recursive` boolean flag from config and logic
- Made recursion behavior dependant on presence of `RecursionGroupAttr`
- Updated log messages to reflect changes and follow `slog` structured format

Signed-off-by: Ethan Dieterich <ethandieterich@gmail.com>
 2025-06-21 12:08:11 +02:00
Oleksandr RedkoandGitHub 9891daa585 refactor: simplify tests by using slog.DiscardHandler (#4058) 
Signed-off-by: Oleksandr Redko <oleksandr.red+github@gmail.com>
 2025-04-03 09:56:18 +02:00
Kot CandGitHub 95388bb27a Add authproxy preferred_username header (#3950) 
Signed-off-by: Kot <kot@yukata.dev>
 2025-02-01 18:15:07 +01:00
Mark Sagi-Kazar c7fd9620aa chore: fix linter config and violations 
Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>
 2025-01-09 15:29:22 +01:00
Melroy DsouzaandGitHub 8b93966357 Support for IssuerAlias and groups as maps (#3676) 
Signed-off-by: Melroy Dsouza <meldsza@gmail.com>
 2024-10-31 11:05:22 +01:00
VladimirGitHubMaksim NabokikhMaksim Nabokikh
 		3e00d33449 GitLab connector: add GitLab additional group with role (#2941) 
Signed-off-by: zvlb <vl.zemtsov@gmail.com>
Signed-off-by: Maksim Nabokikh <maksim.nabokikh@flant.com>
Signed-off-by: Maksim Nabokikh <max.nabokih@gmail.com>
Co-authored-by: Maksim Nabokikh <maksim.nabokikh@flant.com>
Co-authored-by: Maksim Nabokikh <max.nabokih@gmail.com>
 2024-10-24 22:18:24 +02:00