Arsharth/dex
1
0
Fork 0
forked from mystiq/dex
Code Issues Pull requests Packages Projects Releases Wiki Activity
535 commits 27 branches 73 tags 23 MiB
Commit graph

19 commits

Author SHA1 Message Date
Eric Chiang 35cab93c0a *: add --enable-automatic-registration flag to worker 
For remote connectors, allow users to skip registration.
 2016-06-17 16:29:56 -07:00
Bobby Rullo 75473b4cba refresh tokens: grant claims based on scopes 
Before,  this logic was only in the OIDCServer.CodeToken() method; now it has been
pulled out so that other paths, like OIDCServer.RefreshToken() can use
it.

The net affect, is that now refresh tokens can be used to get
cross-client authenticated ID Tokens.
 2016-06-14 14:14:36 -07:00
Bobby Rullo 32a1994a5e refresh tokens: store and validate scopes. 
A refresh request must fail if it asks for scopes that were not
originally granted when the refresh token was obtained.

This Commit:

* changes repo to store scopes with tokens
* changes repo interface signatures so that scopes can be stored and
  verified
* updates dependent code to pass along scopes
 2016-06-14 14:14:36 -07:00
Bobby Rullo e71c5086ba server: CodeToken now does Cross-Client auth 2016-06-07 17:22:41 -07:00
Bobby Rullo ad1d5ab253 server: remove boilerplate setup code 
Use the test fixture setup stuff in testutil instead.
 2016-06-07 16:47:29 -07:00
Evan Cordell a418e1c4e7 client: add client manager 
adds a client manager to handle business logic, leaving the repo
for basic crud operations. Also adds client to the test script
 2016-05-19 16:20:12 -07:00
Bobby Rullo e5948ab3ce *: ClientIdentityXXX -> ClientXXX 
Get rid of all outdated "ClientIdentity" terminology.
 2016-04-20 14:31:27 -07:00
Bobby Rullo 95757e8779 *: Client Repo now deals with custom Client object 
This is instead of oidc.ClientIdentity. This makes it easier to add new
fields custom to dex to the client.
 2016-04-20 14:31:27 -07:00
Eric Chiang b572b8dd6c *: remove in memory client repo 
The DB implementation expects secrets to be base64 encoded blobs.
Because of this a bunch of tests broke moving to sqlite.

A lot of this commit is fixing those tests.
 2016-02-12 13:19:05 -08:00
Eric Chiang 2726f4dcdf *: remove in memory user repo 2016-02-12 13:19:05 -08:00
Eric Chiang 95560404a3 *: remove in memory refresh repo 2016-02-12 13:19:05 -08:00
Eric Chiang 7bac93aa20 *: remove in memory session repos 
Move manager to it's own package so it can import db. Move all
references to the in memory session repos to use sqlite3.
 2016-02-12 13:19:05 -08:00
Eric Chiang 5e44b6bc27 *: update all to accommodate changes to go-oidc 
Update dex to comply with the changes to fieldnames and types of
the client and provider metadata structs in coreos/go-oidc.
 2016-01-12 17:16:28 -08:00
Yifan Gu 7282dd5187 refreshtoken: return base64 encoded token for in-memory backend. 
Previously if we use the in-memory backend, it will return a raw
binary token for refresh token. This fixes the case.
 2015-10-12 14:51:52 -07:00
Joe Bowers 60a36e2c2e server,db: flag for disabling user login 2015-09-25 14:25:06 -07:00
Yifan Gu 44c6cb44f5 refresh: bcrypt raw bytes rather than base64 encoded string. 
This enables us to control the length of the bytes that will be bcrypted,
by default it's 64.

Also changed the token's stored form from string('text') to []byte('bytea')
and added some test cases for different types of invalid tokens.
 2015-09-02 14:23:20 -07:00
Yifan Gu 93a0830ae0 server: check scope in requests. 
Require 'openid' in scope for all requests.
Require 'offline_access' for returning refresh token.
 2015-08-31 13:51:59 -07:00
Yifan Gu 066fd859ec session: add 'scope' field in session. 2015-08-31 13:51:59 -07:00
Bobby Rullo 66fe201c24 *: move original project to dex 2015-08-18 11:26:57 -07:00