129 Commits
Author SHA1 Message Date
jnfrati d493d44cbb fix: implement id token hint on rp initiated logout
Signed-off-by: jnfrati <nicofrati@gmail.com>
2026-04-13 19:25:51 +02:00
Maksim NabokikhandGitHub 3bf25fd6e0 feat: add SSO sharing policy (#4705)
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
2026-04-02 14:18:53 +02:00
546e66cb5d feat: add WebAuthn support (#4704)
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
Signed-off-by: Maksim Nabokikh <max.nabokih@gmail.com>
Co-authored-by: Alwx <alwxsin@gmail.com>
2026-04-02 11:48:46 +02:00
Maksim NabokikhandGitHub 58f148dd28 feat: implement OIDC RP-Initiated logout (#4674)
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
Signed-off-by: Maksim Nabokikh <max.nabokih@gmail.com>
2026-04-01 08:58:44 +02:00
Maksim NabokikhandGitHub 449f66477c feat: Add AuthSession GC (#4667)
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
2026-03-20 20:06:43 +01:00
Maksim NabokikhandGitHub c3bc1d7466 feat: add auth_time, prompt, and max_age fields (#4662)
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
2026-03-19 15:53:15 +01:00
Maksim NabokikhandGitHub 86abd336f8 Two-Factor authentication (TOTP) (#3712)
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
2026-03-18 18:20:20 +01:00
Maksim NabokikhandGitHub cbd7dd7f5a feat: Create AuthSessions and set cookies (#4650)
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
2026-03-18 11:58:18 +01:00
Maksim NabokikhandGitHub 6b9ce00e11 feat: implement AuthSession CRUD operations (#4646)
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
2026-03-16 17:06:53 +01:00
Maksim NabokikhandGitHub 93985dedff fix: increase lock acquisition attempts from 60 to 200 for better reliability (#4644)
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
2026-03-16 08:45:39 +01:00
5a4395fd12 feat: add UserIdentity entity and CRUD operations (#4643)
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
Signed-off-by: Maksim Nabokikh <max.nabokih@gmail.com>
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
2026-03-14 12:58:18 +01:00
Maksim NabokikhandGitHub f80a89dd5d feat(client): add allowed connectors field to client configuration (#4610)
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
2026-03-11 23:00:38 +01:00
Maksim NabokikhandGitHub 7777773067 feat(connector): connectors for grants (#4619)
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
2026-03-11 07:21:14 +01:00
Maksim NabokikhandGitHub 3d97c59032 test: add concurrency tests for storage implementations (#4631)
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
2026-03-10 15:55:10 +01:00
Maksim NabokikhandGitHub 9bee809252 feat(crd): add CRD handling behavior and configuration options (#4543)
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
2026-02-15 21:56:29 +01:00
Ivan ZviagintsevandGitHub 9e377718dc feat: add name and emailVerified fields for static passwords (#4526)
Signed-off-by: Ivan Zvyagintsev <ivan.zvyagintsev@flant.com>
2026-02-12 12:13:54 +01:00
Ivan ZviagintsevandGitHub d1b2722e39 feat: support groups and preferred_username for staticPasswords (#4456)
Signed-off-by: Ivan Zvyagintsev <ivan.zvyagintsev@flant.com>
2026-01-13 10:07:21 +01:00
Rene DekkerandGitHub 9355759813 fix(storage/kubernetes): Only wrap IPv6 addresses in brackets (#4388)
The Kubernetes client code was wrapping all IP addresses (both IPv4 and
IPv6) in square brackets when constructing the API server URL. This was
based on an incorrect assumption that IPv4 addresses in brackets are valid
in a URL.

Recent versions of Go (1.25.2 and later) have stricter URL parsing
that conforms to RFC 3986. This causes a failure when running Dex in a
Kubernetes environment where the KUBERNETES_SERVICE_HOST is an IPv4
address, leading to the error "invalid IPv6 host".

This commit changes the logic to only wrap IPv6 addresses in square
brackets. It uses `ip.To4() == nil` to reliably detect if an IP address
is IPv6 before wrapping it. This ensures that URLs are correctly
formatted for both IPv4 and IPv6 addresses, fixing the incompatibility
with newer Go versions.

Signed-off-by: Rene Dekker <rene@tigera.io>
2025-11-03 10:50:25 +01:00
Maksim NabokikhandGitHub 7e2225c0e6 Do not wrap Kubernetes Address in brackets (#4363)
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
2025-10-23 11:29:25 +02:00
Mark Sagi-Kazar e230d9426d test: use new Go features in tests
Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>
2025-08-18 14:09:26 +02:00
Oleksandr RedkoandGitHub 9891daa585 refactor: simplify tests by using slog.DiscardHandler (#4058)
Signed-off-by: Oleksandr Redko <oleksandr.red+github@gmail.com>
2025-04-03 09:56:18 +02:00
Maksim NabokikhandGitHub a4449010a4 k8s storage: Request only one object to check if API exists (#4027)
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
2025-03-06 11:55:34 +01:00
Bob MaertzandGitHub ad31b5d6f7 Passing context storage (#3941)
Signed-off-by: Bob Maertz <1771054+bobmaertz@users.noreply.github.com>
2025-02-04 10:11:44 +01:00
Sean LiaoandGitHub 0b6a78397e use slog for structured logging (#3502)
Signed-off-by: Sean Liao <sean+git@liao.dev>
2024-06-01 20:15:58 +04:00
7225198ae7 Update max length of kubernetes object to fit kubernetes policy (#3439)
Signed-off-by: Denys Romanenko <65756796+RomanenkoDenys@users.noreply.github.com>
Signed-off-by: Maksim Nabokikh <max.nabokih@gmail.com>
Co-authored-by: Maksim Nabokikh <max.nabokih@gmail.com>
2024-03-28 20:58:59 +01:00