3bf25fd6e0
feat: add SSO sharing policy ( #4705 )
...
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com >
2026-04-02 14:18:53 +02:00
546e66cb5d
feat: add WebAuthn support ( #4704 )
...
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com >
Signed-off-by: Maksim Nabokikh <max.nabokih@gmail.com >
Co-authored-by: Alwx <alwxsin@gmail.com >
2026-04-02 11:48:46 +02:00
58f148dd28
feat: implement OIDC RP-Initiated logout ( #4674 )
...
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com >
Signed-off-by: Maksim Nabokikh <max.nabokih@gmail.com >
2026-04-01 08:58:44 +02:00
8031f5b1ca
feat: add home page with user session info ( #4677 )
...
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com >
2026-03-30 15:33:30 +02:00
9f92c71d62
feat: cookies encryption support ( #4676 )
...
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com >
2026-03-27 09:33:20 +01:00
449f66477c
feat: Add AuthSession GC ( #4667 )
...
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com >
2026-03-20 20:06:43 +01:00
86abd336f8
Two-Factor authentication (TOTP) ( #3712 )
...
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com >
2026-03-18 18:20:20 +01:00
cbd7dd7f5a
feat: Create AuthSessions and set cookies ( #4650 )
...
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com >
2026-03-18 11:58:18 +01:00
12339f2cef
feat: implement user identity creation and persisting consent ( #4645 )
...
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com >
2026-03-16 13:53:27 +01:00
5bbfbbe168
feat: add PKCE (Proof Key for Code Exchange) configuration to OAuth2 settings ( #4638 )
...
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com >
2026-03-13 13:09:44 +01:00
7777773067
feat(connector): connectors for grants ( #4619 )
...
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com >
2026-03-11 07:21:14 +01:00
fec4f53203
feat(oauth2): add client credentials flow with opt-in config flag ( #4583 )
...
Implement the OAuth2 client_credentials grant type for
machine-to-machine authentication. The grant is gated behind a new
clientCredentialsEnabled config flag (defaults to false), following
the same pattern as passwordConnector for the password grant.
---------
Signed-off-by: Mathias Gebbe <mathias.gebbe@gmail.com >
Signed-off-by: Maksim Nabokikh <maksim.nabokikh@flant.com >
Signed-off-by: Maksim Nabokikh <max.nabokih@gmail.com >
Co-authored-by: Maksim Nabokikh <maksim.nabokikh@flant.com >
Co-authored-by: Maksim Nabokikh <max.nabokih@gmail.com >
2026-03-03 12:29:04 +01:00
49dcb4d863
fix: clean up in-memory connector before create ( #4529 )
...
Signed-off-by: Andy Lo-A-Foe <andy.loafoe@gmail.com >
Co-authored-by: Maksim Nabokikh <max.nabokih@gmail.com >
2026-02-26 13:19:11 +01:00
785033767c
feat: refactor signer configuration with local and vault options ( #4532 )
...
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com >
2026-02-15 16:08:21 +01:00
9e377718dc
feat: add name and emailVerified fields for static passwords ( #4526 )
...
Signed-off-by: Ivan Zvyagintsev <ivan.zvyagintsev@flant.com >
2026-02-12 12:13:54 +01:00
56958b1ad2
feat: Add Vault signer for JWT ( #4512 )
...
Signed-off-by: Maksim Nabokikh <max.nabokih@gmail.com >
2026-02-10 07:56:43 +01:00
d1b2722e39
feat: support groups and preferred_username for staticPasswords ( #4456 )
...
Signed-off-by: Ivan Zvyagintsev <ivan.zvyagintsev@flant.com >
2026-01-13 10:07:21 +01:00
be868b9f7c
fix: join issuer URL with discovery path without extra slash after issuer URL
...
Signed-off-by: Wenxuan Zhao <viz@linux.com >
2025-08-12 01:14:28 +08:00
87ec9e077e
Allow server startup with partial connector failures ( #4159 )
...
Signed-off-by: Manoj Vivek <p.manoj.vivek@gmail.com >
2025-06-16 15:53:20 +02:00
ad31b5d6f7
Passing context storage ( #3941 )
...
Signed-off-by: Bob Maertz <1771054+bobmaertz@users.noreply.github.com >
2025-02-04 10:11:44 +01:00
4bb97c73a9
Handle root path better (than nothing) ( #3747 )
...
Signed-off-by: maksim.nabokikh <max.nabokih@gmail,com>
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com >
2024-10-16 12:23:09 +02:00
1a16aa4889
feat(metrics): add response_size, request_duration histograms ( #3748 )
...
replaces felixge/httpsnoop with prometheus/client_golang instrumentation
adds histograms for response_size_bytes & request_duration_seconds
Signed-off-by: Ivo Gosemann <ivo.gosemann@sap.com >
2024-09-18 00:01:57 +02:00
81af48862b
Remove additional features and add a feature flag instead ( #3663 )
...
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com >
2024-08-01 21:38:09 +02:00
225660785c
Enrich Dex logs with real IP and request ID ( #3661 )
...
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com >
Signed-off-by: Maksim Nabokikh <max.nabokih@gmail.com >
Co-authored-by: Márk Sági-Kazár <sagikazarmark@users.noreply.github.com >
2024-08-01 21:37:35 +02:00
b07e1bc9f1
gRPC Connectors API ( #3245 )
...
Signed-off-by: Giovanni Campeol <giovanni.campeol.95@gmail.com >
Signed-off-by: Maksim Nabokikh <maksim.nabokikh@flant.com >
Co-authored-by: Maksim Nabokikh <maksim.nabokikh@flant.com >
2024-07-16 12:05:23 +02:00
Maksim Nabokikh
Mathias Gebbe
Andy Lo-A-Foe
Ivan Zviagintsev
Wenxuan Zhao
Manoj Vivek
Bob Maertz
IvoGoman
Giovanni Campeol