Comments (2)
Hello there. There are a couple of obstacles that make implementing this feature a little bit harder in Dex:
-
Dex should know the real IP addresses of clients, so we have to add options like
real_ip_header
andtrusted_networks
etc. I remember some opened issues with the intention of adding clients addresses to dex logs, but still no progress. As for now, Dex is not aware of clients ips. -
The fields from the top post are called claims and represent user attributes (attributes of the token holder) and some meta-information. Per oidc spec, there is a limited set of standard claims, which does not include the IP address. We have a pinned issue about the middleware layer, which should provide the ability to add custom claims to the token.
After solving these two puzzles, we will be able to move forward with your idea.
from dex-k8s-authenticator.
I'm not sure whether it's the correct place to ask this but should we handle this in the dex/server/oauth2.go instead? Any thoughts @nabokihms? Should we move this issue to there?
from dex-k8s-authenticator.
Related Issues (20)
- Failed to query provider "https://dex.example.org/": 400 Bad Request: Client sent an HTTP request to an HTTPS server.
- invalid_scope: Unknown/invalid scope(s): [offline_access, groups] HOT 1
- Add trivy container scanning to gh-action.
- k8s_ca_pem_base64_encoded not used? HOT 1
- Support raw copy kubeconfig file
- Hardcoded Secret in Dex Authenticator ConfigMap HOT 16
- Ability to work outside of Dex HOT 2
- TLS v1.3 Unsupported HOT 2
- Crashloop with no logs between querying provider and verifying client HOT 1
- Finalize upstream helm repo HOT 3
- helm chart not found HOT 1
- UI: cluster names are empty
- Add a arm64 image HOT 1
- Project maintenance (finding a new home for this repo) HOT 1
- Template for ingress not working in newer Kubernetes HOT 1
- You must be logged in to the server HOT 1
- Current Docker image has CVE-2023-0286 HOT 1
- can we use dex-k8s-authenticator without dex
- dex-k8s-authenticator web-app like CLI app
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from dex-k8s-authenticator.