9 commits

Author	SHA1	Message	Date
mkontani	6ae76662de	fix ssoURL	2019-04-20 21:12:01 +09:00
Stephan Renatus	b09a13458f	password connectors: allow overriding the username attribute (password prompt) ... This allows users of the LDAP connector to give users of Dex' login prompt an idea of what they should enter for a username. Before, irregardless of how the LDAP connector was set up, the prompt was Username [_________________] Password [_________________] Now, this is configurable, and can be used to say "MyCorp SSO Login" if that's what it is. If it's not configured, it will default to "Username". For the passwordDB connector (local users), it is set to "Email Address", since this is what it uses. Signed-off-by: Stephan Renatus <srenatus@chef.io>	2017-11-09 09:30:03 +01:00
Eric Chiang	50b223a9db	*: validate InResponseTo SAML response field and make issuer optional	2017-03-22 13:02:44 -07:00
Eric Chiang	777eeafabc	*: update go-oidc and use standard library's context package	2017-03-08 10:33:19 -08:00
Eric Chiang	31dfb54b6f	connector: add a SAML connector	2017-01-09 18:30:58 -08:00
Eric Chiang	952e0f81f5	connector: add RefreshConnector interface	2016-11-22 12:53:46 -08:00
Eric Chiang	a3235d022a	*: verify "state" field before passing request to callback connectors ... Let the server handle the state token instead of the connector. As a result it can throw out bad requests earlier. It can also use that token to determine which connector was used to generate the request allowing all connectors to share the same callback URL. Callbacks now all look like: https://dex.example.com/callback Instead of: https://dex.example.com/callback/(connector id) Even when multiple connectors are being used.	2016-10-27 10:23:09 -07:00
Eric Chiang	f4c5722e42	*: connectors use a different identity object than storage	2016-08-02 21:20:18 -07:00
Eric Chiang	cab271f304	initial commit	2016-07-26 15:51:24 -07:00