328e69629c
fix: limit OAuth redirects to local paths ( #14585 )
...
- This prevents a malicious user from crafting a redirect
URL to a nefarious site under their control.
2024-09-10 15:58:50 +01:00
4f01372179
feat: implement disabling oidc issuer checks ( #13991 )
...
* use DANGEROUS prefix and drop a warning log
2024-07-24 16:45:47 -05:00
44cb400c8e
chore: include host and port in oidc test logs ( #13818 )
...
* chore: include host and port in oidc test logs
Log fake IDP's log for debugging port conflicts between tests
2024-07-08 10:24:41 -05:00
d9bdef915d
chore: fix typo in oidctest package ( #13815 )
2024-07-08 14:35:06 +00:00
27f26910b6
chore: external auth validate response "Forbidden" should return invalid, not an error ( #13446 )
...
* chore: add unit test to delete workspace from suspended user
* chore: account for forbidden as well as unauthorized response codes
2024-06-03 13:16:51 -05:00
566f8f231d
chore: add unit test for pass through external auth query params ( #12928 )
...
* chore: verify pass through external auth query params
Unit test added to verify behavior of query params set in the
auth url for external apps. This behavior is intended to specifically
support Auth0 audience query param.
2024-04-10 13:58:29 -05:00
cbcf4ef2c4
chore: add faking 429 responses from fake idp ( #12365 )
...
Required to trigger error condition in fe.
See pull (#12367 )
2024-02-29 09:45:53 -06:00
4d39da294e
feat: add oauth2 token exchange ( #12196 )
...
Co-authored-by: Steven Masley <stevenmasley@gmail.com >
2024-02-20 14:58:43 -09:00
04a23261e6
chore: ensure github uids are unique ( #11826 )
2024-01-29 09:13:46 -06:00
8e0a153725
chore: implement device auth flow for fake idp ( #11707 )
...
* chore: implement device auth flow for fake idp
2024-01-22 20:46:05 +00:00
5087f7b5f6
chore: improve fake IDP script ( #11602 )
...
* chore: testIDP using static defaults for easier reuse
2024-01-15 10:01:41 -06:00
e3ad9580e9
chore: allow running fake idp with coderd dev ( #11555 )
...
* chore: allow running fake idp with coderd dev
2024-01-11 18:10:57 +00:00
3f9da674c6
chore: instrument github oauth2 limits ( #11532 )
...
* chore: instrument github oauth2 limits
Rate limit information for github oauth2 providers instrumented in prometheus
2024-01-10 15:29:33 +00:00
50b78e3325
chore: instrument external oauth2 requests ( #11519 )
...
* chore: instrument external oauth2 requests
External requests made by oauth2 configs are now instrumented into prometheus metrics.
2024-01-10 09:13:30 -06:00
197cd935cf
chore(Makefile): use linter version from dogfood Dockerfile ( #11147 )
...
* chore(Makefile): use golangci-lint version from dogfood Dockerfile
* chore(dogfood/Dockerfile): update golangci-lint to latest version
* chore(coderd): address linter complaints
2023-12-12 10:02:32 +00:00
78517cab52
feat: add group allowlist for oidc ( #11070 )
...
* feat: group allow list in OIDC settings
2023-12-08 10:14:19 -06:00
0a16bda786
chore: add external auth providers to oidctest ( #10958 )
...
* implement external auth in oidctest
* Refactor more external tests to new oidctest
2023-11-30 14:05:15 -06:00
abb2c7656a
chore: add claims to oauth link in db for debug ( #10827 )
...
* chore: add claims to oauth link in db for debug
2023-11-27 10:47:23 -06:00
863c2e7b64
feat: allow storing extra oauth token properties in the database ( #10152 )
2023-10-09 18:49:30 -05:00
e55c25e037
chore: enable exhaustruct linter for database param structs ( #9995 )
2023-10-03 09:23:45 +01:00
58f7071569
fix: make 'NoRefresh' honor unlimited tokens in gitauth ( #9472 )
...
* chore: fix NoRefresh to honor unlimited tokens
* improve testing coverage of gitauth
* refactor rest of gitauth tests
2023-09-05 09:08:04 -05:00
594a6aae19
chore: format oidctest ( #9362 )
2023-08-27 19:51:13 +00:00
d9d4d74f99
test: add full OIDC fake IDP ( #9317 )
...
* test: implement fake OIDC provider with full functionality
* Refactor existing tests
2023-08-25 14:34:07 -05:00
