失眠是真滴难受
1b07470611
test: add anonymous unit test ( #5072 )
2022-07-21 10:36:52 +08:00
hnajib
45a062593f
[KS-OIDC] Remove special characters form sub OIDC standard claim ( #5018 )
...
* [KS-OIDC] Remove special characters form sub OIDC standard claim
* [KS-OIDC] Change to base64 RawURLEncoding
* [KS-OIDC] Import encoding/base64
* [KS-OIDC] Change import
* [KS-OIDC] Damn Go
* [KS-OIDC] Damn Spaces
* [KS-OIDC] Backport to test
* [KS-OIDC] Backport to test: the other way
* [KS-OIDC] Backport to test: convert to string
* [KS-OIDC] Backport to test: Hint from @wansir
* [KS-OIDC] Backport to test: Damn Space
2022-07-07 11:09:35 +08:00
andrew_li
f289795312
Add golangci-lint workflow ( #4999 )
...
* fix lint workflow
* add golang lint
* close http response body
2022-06-29 11:58:36 +08:00
hongming
f304ecdd01
Fix: deny the blocked user request
2022-05-12 12:17:41 +08:00
Xinzhao Xu
28f260e244
Add omitempty option to LoginHistoryMaximumEntries field to avoid it being set to 0
2022-03-28 17:09:13 +08:00
Xinzhao Xu
c53001c5dc
Unify the omitempty configuration of YAML annotation
2022-02-23 16:41:51 +08:00
hongming
97326a89b9
add userinfo endpoint
...
Signed-off-by: hongming <hongming@kubesphere.io >
2021-09-17 18:03:32 +08:00
hongming
8c5c6a7dee
support OIDC protocol
...
Signed-off-by: hongming <hongming@kubesphere.io >
2021-09-17 16:39:21 +08:00
hongming
4b5b1c64bc
Refactor authenticator
...
Signed-off-by: hongming <hongming@kubesphere.io >
2021-09-17 16:39:20 +08:00
hongming
cb947ce505
Support skip information reconfirm when using external IDP
...
Signed-off-by: hongming <hongming@kubesphere.io >
2021-09-16 11:46:02 +08:00
Roland.Ma
3bfae73318
fix ks-apiserver missing interfaces
...
Signed-off-by: Roland.Ma <rolandma@yunify.com >
2021-08-16 06:58:12 +00:00
nanjofan
ad6acc5fb6
Update pkg/apiserver/authentication/identityprovider/identity_provider.go
...
Co-authored-by: hongming <coder.scala@gmail.com >
2021-08-04 13:48:06 +08:00
Yoshino
8fbfc734d2
Modify function error comments:"RegisterGenericProvider" and "GetOAuthProvider"
2021-08-03 14:48:06 +08:00
Roland.Ma
e6736a4e0e
moving jwt-go from github.com/dgrijalva/jwt-go v3.2.0 to github.com/form3tech-oss/jwt-go v3.2.2
...
Signed-off-by: Roland.Ma <rolandma@yunify.com >
2021-06-08 10:11:56 +00:00
Roland.Ma
c37a11c5f9
move api to staging
...
Signed-off-by: Roland.Ma <rolandma@yunify.com >
2021-04-29 08:20:05 +00:00
KubeSphere CI Bot
e9c963c58d
Merge pull request #3776 from wansir/feat-logout
...
Support RP-Initiated Logout
2021-04-20 20:17:12 +08:00
hongming
8fdd8beb08
Support RP-Initiated Logout
...
Signed-off-by: hongming <talonwan@yunify.com >
2021-04-20 15:17:40 +08:00
hongming
595f7a03e4
Fix issue with case-sensitive username
...
Signed-off-by: hongming <talonwan@yunify.com >
2021-04-20 14:18:31 +08:00
zryfish
ac275b6e98
add goimports format action ( #3630 )
...
Signed-off-by: Jeff <jeffzhang@yunify.com >
2021-03-30 13:44:24 +08:00
hongming
b83b3232cb
remove useless log output
...
Signed-off-by: hongming <talonwan@yunify.com >
2021-03-26 11:15:45 +08:00
hongming
70a0ee40d6
limit login record entries
...
Signed-off-by: hongming <talonwan@yunify.com >
2021-03-06 14:45:11 +08:00
hongming
5f0727cf34
support CAS identity provider
...
Signed-off-by: hongming <talonwan@yunify.com >
2021-02-20 10:45:55 +08:00
hongming
ac2bdf2509
support oidc identity provider
...
Signed-off-by: hongming <talonwan@yunify.com >
2021-01-18 15:12:35 +08:00
KubeSphere CI Bot
d7607b3eaf
Merge pull request #3167 from wansir/sensitive-config
...
config data desensitization
2020-12-11 10:06:45 +08:00
hongming
dfaefa5ffb
improve identity provider plugin
...
Signed-off-by: hongming <talonwan@yunify.com >
2020-12-10 14:35:56 +08:00
hongming
13ede7dacc
config data desensitization
...
Signed-off-by: hongming <talonwan@yunify.com >
2020-12-01 15:08:00 +08:00
hongming
00920d3d51
improve LDAP identity provider
...
Signed-off-by: hongming <talonwan@yunify.com >
2020-11-23 17:29:46 +08:00
yuswift
69a27e40aa
Feat: support runnig ks-controller-manager without ldap option
...
Signed-off-by: yuswift <yuswiftli@yunify.com >
2020-11-16 12:19:07 +08:00
Roland.Ma
80f3db3d42
feat: authentication users with group's RoleBindings in API Server
...
Signed-off-by: Roland.Ma <rolandma@yunify.com >
2020-11-11 05:31:25 +00:00
luxingmin
1a39d62f63
support aliyun idaas oauth login
...
Signed-off-by: luxingmin <luxingmin@hongyaa.com.cn >
2020-09-29 11:14:23 +08:00
zryfish
93b123c1f0
add last login time for user ( #2679 )
...
Signed-off-by: Jeff <zw0948@gmail.com >
2020-07-28 17:26:13 +08:00
zryfish
f1146f5d6c
fix cannot create success login ( #2576 )
...
Signed-off-by: Jeff <zw0948@gmail.com >
2020-07-24 13:09:38 +08:00
zryfish
3d74bb0589
login record CRD ( #2565 )
...
* Signed-off-by: hongming <talonwan@yunify.com >
support ldap identity provider
Signed-off-by: hongming <talonwan@yunify.com >
* add login record
Signed-off-by: Jeff <zw0948@gmail.com >
Co-authored-by: hongming <talonwan@yunify.com >
2020-07-23 22:10:39 +08:00
hongming
d1f98b3289
Configuring kubectl image from command line
...
Signed-off-by: hongming <talonwan@yunify.com >
2020-07-23 02:29:56 +08:00
hongming
77a3722b4e
fix: password modify
...
Signed-off-by: hongming <talonwan@yunify.com >
2020-07-06 15:12:11 +08:00
hongming
85b61dce7c
copyright license update
...
Signed-off-by: hongming <talonwan@yunify.com >
2020-05-25 14:51:24 +08:00
hongming
8f93266ec0
improve IAM module
...
Signed-off-by: hongming <talonwan@yunify.com >
2020-05-23 20:48:19 +08:00
hongming
3ce4a0d77c
token cache config
...
Signed-off-by: hongming <talonwan@yunify.com >
2020-04-13 19:14:41 +08:00
hongming
0e814bb5e4
add iam crd
...
Signed-off-by: hongming <talonwan@yunify.com >
2020-04-10 04:05:23 +08:00
hongming
34dfc2048a
add default oauth client
...
Signed-off-by: hongming <talonwan@yunify.com >
2020-03-30 19:40:57 +08:00
hongming
96a1d3825e
update
...
Signed-off-by: hongming <talonwan@yunify.com >
2020-03-28 14:09:39 +08:00
hongming
9b9d4021ec
implement identity provider and built-in oauth server
...
Signed-off-by: hongming <talonwan@yunify.com >
2020-03-26 15:19:20 +08:00
hongming
aa05c2baf4
update
...
Signed-off-by: hongming <talonwan@yunify.com >
2020-03-22 23:17:43 +08:00
hongming
b9bdcd824c
update
...
Signed-off-by: hongming <talonwan@yunify.com >
2020-03-22 04:29:06 +08:00
hongming
aadb5e91e8
update
...
Signed-off-by: hongming <talonwan@yunify.com >
2020-03-21 20:31:01 +08:00
zryfish
eb8a3c0dc6
refactor authentication ( #1950 )
2020-03-15 17:55:55 +08:00
zryfish
abf0d66b22
Add more tests ( #1949 )
...
* add more test code
* add more test code
2020-03-15 10:22:39 +08:00
zryfish
f8e7d06b07
move apigateway into apiserver ( #1948 )
2020-03-13 21:57:48 +08:00