Skip to content

Dex CLI v1.7.0

Choose a tag to compare

View all tags
@longquanzheng longquanzheng released this 11 Oct 21:49
cli-v1.7.0
37cf179
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Breaking Changes

None.

Changes

  • Dex Web accepts connector manifests whose OAuth endpoints and scopes come from connection settings. authorizationEndpoint, tokenEndpoint, scopes, credentialDerivations[].endpoint, tokenEndpointAuthMethod and tokenRequestEncoding may each be a literal or {"fromSetting": "<setting>"}.
    • OAuth start resolves references from the connection's settings, with field defaults applied, and rejects a missing or invalid setting with HTTP 400 CONNECTOR_OAUTH_SETTING_INVALID before the browser leaves. The message names the setting and never echoes its value.
    • tokenEndpointAuthMethod: client_secret_basic sends the client credentials with HTTP Basic.
    • Requests to an endpoint that a setting supplies resolve the host once, check every address and dial only checked addresses. Plain http is allowed only when every address is loopback or private; link-local addresses, including the cloud metadata address, are always refused. Proxies are ignored and redirects are not followed. Release literals stay HTTPS-only.
      See #620.
  • The run Overview in Dex Web can set an Attribute and publish a Channel message on a live run, with JSON, string, int64, double and boolean values. See #615.
  • dexcli dev includes the SQL Attribute Store changes of Server v1.6.0 and v1.6.1: row key templates, snake_case column naming, AttributeMap child tables, and the schema refresh when a batch writes an unknown column. See #617, #618 and #619.

Full changelog: cli-v1.6.4...cli-v1.7.0

Assets 8
Loading