Arsharth
/
dex
forked from mystiq/dex
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
2,174 Commits 27 Branches 73 Tags 23 MiB
Commit Graph

11 Commits

Author SHA1 Message Date
Bob Callaway 83e2df821e
add PKCE support to device code flow (#2575) 
Signed-off-by: Bob Callaway <bobcallaway@users.noreply.github.com>
 2022-07-27 19:02:18 +03:00
Márk Sági-Kazár 1cc26fab2f
Merge pull request #2468 from flant/cwe-79-device-code 
fix: prevent cross-site scripting for the device flow
 2022-06-30 22:52:33 +03:00
Shivansh Vij 65592d0b5a
Updating test cases 
Fixes https://github.com/dexidp/dex/issues/2537

Signed-off-by: Shivansh Vij <shivanshvij@outlook.com>
 2022-05-26 15:54:54 -04:00
m.nabokikh 3d5a3befb4 fix: prevent cross-site scripting for the device flow 
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
 2022-05-20 18:26:49 +04:00
Eng Zer Jun f0186ff265
refactor: move from io/ioutil to io and os package 
The io/ioutil package has been deprecated as of Go 1.16, see
https://golang.org/doc/go1.16#ioutil. This commit replaces the existing
io/ioutil functions with their new definitions in io and os packages.

Signed-off-by: Eng Zer Jun <engzerjun@gmail.com>
 2021-09-17 14:12:39 +08:00
m.nabokikh 1d83e4749d Add gocritic 
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
 2020-10-18 01:54:27 +04:00
m.nabokikh 4d63e9cd68 fix: Bump golangci-lint version and fix some linter's problems 
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
 2020-10-18 01:02:29 +04:00
justin-slowik 9a7926c19b Cleaned up Device Flow test log levels 
Signed-off-by: justin-slowik <justin.slowik@thermofisher.com>

Remove extraneous "=" from conformance.go

Co-authored-by: Joel Speed <Joel.speed@hotmail.co.uk>

Additional test for TestHandleDeviceCode

Signed-off-by: justin-slowik <justin.slowik@thermofisher.com>
 2020-07-21 16:01:08 -04:00
justin-slowik 334ecf0482 Fixes based on PR comments. 
Signed-off-by: justin-slowik <justin.slowik@thermofisher.com>
 2020-07-14 10:13:37 -04:00
justin-slowik 9882ea453f better support for /device/callback redirect uris with public clients. 
Signed-off-by: justin-slowik <justin.slowik@thermofisher.com>
 2020-07-08 16:25:06 -04:00
Justin Slowik 9c699b1028 Server integration test for Device Flow (#3) 
Extracted test cases from OAuth2Code flow tests to reuse in device flow

deviceHandler unit tests to test specific device endpoints

Include client secret as an optional parameter for standards compliance

Signed-off-by: justin-slowik <justin.slowik@thermofisher.com>
 2020-07-08 16:25:05 -04:00