ad31b5d6f7
Passing context storage ( #3941 )
...
Signed-off-by: Bob Maertz <1771054+bobmaertz@users.noreply.github.com >
2025-02-04 10:11:44 +01:00
4bb97c73a9
Handle root path better (than nothing) ( #3747 )
...
Signed-off-by: maksim.nabokikh <max.nabokih@gmail,com>
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com >
2024-10-16 12:23:09 +02:00
1a16aa4889
feat(metrics): add response_size, request_duration histograms ( #3748 )
...
replaces felixge/httpsnoop with prometheus/client_golang instrumentation
adds histograms for response_size_bytes & request_duration_seconds
Signed-off-by: Ivo Gosemann <ivo.gosemann@sap.com >
2024-09-18 00:01:57 +02:00
81af48862b
Remove additional features and add a feature flag instead ( #3663 )
...
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com >
2024-08-01 21:38:09 +02:00
225660785c
Enrich Dex logs with real IP and request ID ( #3661 )
...
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com >
Signed-off-by: Maksim Nabokikh <max.nabokih@gmail.com >
Co-authored-by: Márk Sági-Kazár <sagikazarmark@users.noreply.github.com >
2024-08-01 21:37:35 +02:00
b07e1bc9f1
gRPC Connectors API ( #3245 )
...
Signed-off-by: Giovanni Campeol <giovanni.campeol.95@gmail.com >
Signed-off-by: Maksim Nabokikh <maksim.nabokikh@flant.com >
Co-authored-by: Maksim Nabokikh <maksim.nabokikh@flant.com >
2024-07-16 12:05:23 +02:00
0b6a78397e
use slog for structured logging ( #3502 )
...
Signed-off-by: Sean Liao <sean+git@liao.dev >
2024-06-01 20:15:58 +04:00
8755308759
[RFC7662] Add introspect endpoint to introspect access & refresh token ( #3404 )
...
Signed-off-by: Romain Caire <super.cairos@gmail.com >
2024-03-28 20:38:32 +01:00
088339fc28
Add headers control to dex web server ( #3339 )
...
Customization of headers in the authentication server is crucial for enforcing stringent security measures by allowing the inclusion of specific headers required for authentication protocols and compliance standards. This customization ensures that authentication requests are processed securely, mitigating potential vulnerabilities and ensuring adherence to security policies.
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com >
2024-03-11 22:48:20 +01:00
4f307d70c6
Fix lint errors after merging AllowedHeaders feature ( #3247 )
...
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com >
2023-12-28 11:41:57 +01:00
dce31d82ea
feat: Add configurable CORS Headers ( #3114 )
...
Signed-off-by: Josiah Evans <josiah.evans@lunit.io >
2023-12-28 11:10:30 +01:00
295b0acd61
Merge pull request #2521 from Cedric-Magnan/master
...
feat: Update response_types_supported to allow multiple-valued response type combinations
2023-07-22 02:14:41 +02:00
dcf7b18510
OAuth 2.0 Token Exchange ( #2806 )
...
Signed-off-by: Sean Liao <sean+git@liao.dev >
Co-authored-by: Maksim Nabokikh <max.nabokih@gmail.com >
2023-07-01 09:03:08 +02:00
791657276e
Update server.go
...
Signed-off-by: Cedric-Magnan <cedric.magnan@artefact.com >
2023-05-30 09:47:45 +02:00
e15b599e6a
spelling: programmatically
...
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com >
2023-04-27 09:02:32 -04:00
fc0e2e9383
feat: Add default robots.txt ( #2834 )
...
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com >
2023-02-23 15:53:09 +01:00
6eeba947f1
Merge remote-tracking branch 'upstream/master' into issue2289
2022-05-30 11:52:05 -04:00
57e9611ff6
fix: Implicit Grant discovery
...
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com >
2022-03-08 16:16:25 +04:00
9284ffb8c0
Add generic oauth connector
...
Co-authored-by: Shash Reddy <sreddy@pivotal.io >
Signed-off-by: Joshua Winters <jwinters@pivotal.io >
2021-11-17 15:06:53 -05:00
7bc966217d
sort grant type supported
...
Signed-off-by: ariary <ariary9.2@hotmail.fr >
2021-10-06 08:29:14 -04:00
8fd69c16f5
correctly handle path escaping for connector IDs
...
Signed-off-by: Bob Callaway <bob.callaway@gmail.com >
2021-10-01 16:04:34 -04:00
c6f6dd69e9
lint comment
...
Signed-off-by: ariary <ariary9.2@hotmail.fr >
2021-09-15 03:58:27 -04:00
1497e70225
Add parametrization of grant type supported in discovery endpoint
...
Signed-off-by: ariary <ariary9.2@hotmail.fr >
2021-09-03 05:50:59 -04:00
cd0c24ec4d
fix: add an extra endpoint to avoid refresh generating AuthRequests.
...
By adding an extra endpoint and a redirect, we can avoid a situation
where it's trivially easy to generate a large number of AuthRequests
by hitting F5/refresh in the browser.
Signed-off-by: Alastair Houghton <alastair@alastairs-place.net >
2021-05-21 11:42:52 +01:00
18d1f70cee
Merge pull request #1861 from concourse/pr/bcrypt-for-client-secret-sync
...
Use constant time comparison for client secret verification
2021-05-17 17:27:42 +02:00
Bob Maertz
Maksim Nabokikh
IvoGoman
Giovanni Campeol
Sean Liao
Romain Caire
Josiah Evans
Márk Sági-Kazár
Cedric-Magnan
Josh Soref
Bob Callaway
Joshua Winters
ariary
Bob Callaway
Alastair Houghton