Arsharth/dex
1
0
Fork 0
forked from mystiq/dex
Code Issues Pull requests Projects Releases Packages Wiki Activity
551 commits 27 branches 73 tags 23 MiB
Commit graph

10 commits

Author SHA1 Message Date
Eric Chiang
b02a3a3163 *: add "groups" scope 2016-07-19 11:23:04 -07:00
Bobby Rullo
75473b4cba refresh tokens: grant claims based on scopes 
Before,  this logic was only in the OIDCServer.CodeToken() method; now it has been
pulled out so that other paths, like OIDCServer.RefreshToken() can use
it.

The net affect, is that now refresh tokens can be used to get
cross-client authenticated ID Tokens.
 2016-06-14 14:14:36 -07:00
Bobby Rullo
32a1994a5e refresh tokens: store and validate scopes. 
A refresh request must fail if it asks for scopes that were not
originally granted when the refresh token was obtained.

This Commit:

* changes repo to store scopes with tokens
* changes repo interface signatures so that scopes can be stored and
  verified
* updates dependent code to pass along scopes
 2016-06-14 14:14:36 -07:00
Bobby Rullo
95757e8779 *: Client Repo now deals with custom Client object 
This is instead of oidc.ClientIdentity. This makes it easier to add new
fields custom to dex to the client.
 2016-04-20 14:31:27 -07:00
Eric Chiang
7416929455 *: add revocation methods to refresh repo 2016-04-06 11:25:50 -07:00
Eric Chiang
95560404a3 *: remove in memory refresh repo 2016-02-12 13:19:05 -08:00
Yifan Gu
7282dd5187 refreshtoken: return base64 encoded token for in-memory backend. 
Previously if we use the in-memory backend, it will return a raw
binary token for refresh token. This fixes the case.
 2015-10-12 14:51:52 -07:00
Giulio Iotti
472e4a02a4 *: Remove unnecessary else statements 
Whenever it makes the code easier to follow, use early return to
avoid else statements.
 2015-09-04 22:45:32 +03:00
Yifan Gu
44c6cb44f5 refresh: bcrypt raw bytes rather than base64 encoded string. 
This enables us to control the length of the bytes that will be bcrypted,
by default it's 64.

Also changed the token's stored form from string('text') to []byte('bytea')
and added some test cases for different types of invalid tokens.
 2015-09-02 14:23:20 -07:00
Bobby Rullo
66fe201c24 *: move original project to dex 2015-08-18 11:26:57 -07:00