Doug Goldstein comments

Results 177 comments of


                                            Doug Goldstein

Microsoft connector - support for using signed assertions from managed identity instead of client secrets

Related to #3692 as well.

Declare connectors as "hidden" or "backend-only"

This is implemented in #3818 which I've pulled into my proposed v2.44.90 at ghcr.io/cardoe/dex:v2.44.90

Add support for the OAuth 2.0 Authorization Server Metadata Endpoint (RFC 8414)

@johnvan7 looks reasonable. Can you squash the commits into 1? At a minimum things won't compile until all the commits are together. The last one could be split off if...

feat(gitlab): full group retrieval

To further this along, I've pulled this PR into build that I made at https://github.com/cardoe/dex/releases/tag/v2.44.90 You can grab the container to test with at ghcr.io/cardoe/dex:v2.44.90 and report back on this...

fix: device callback URL needs to handle a /

This is part of my v2.44.90 testing build.

Request for new release

I've built ghcr.io/cardoe/dex:v2.44.90 at https://github.com/cardoe/dex which is a fork with some existing PRs pulled in on top of master. Please feel free to test and report back.

microsoft: get rid of User.Read scope which leads to additional consents

I'd be a -1 on this as the Microsoft connector is oauth2 and not oidc. It's designed to work with Microsoft's not quite standard v1 endpoints while their v2 endpoints...

chore: remove api/v2 replace directive

chore: extend example configs for idEnv and public

@sagikazarmark This is a pretty boring one but hopefully helps end users.

DEX server failed to start up in Amazon EKS with Azure OIDC issuer

Probably got a 404 on https://login.microsoftonline.com/{tenant_id}/v2.0 your error came from https://github.com/coreos/go-oidc/blob/35b8e031bcac7fed73b96b09d42e6e233a6e6562/oidc/oidc.go#L256