{"payload":{"feedbackUrl":"https://github.com/orgs/community/discussions/53140","repo":{"id":377862966,"defaultBranch":"master","name":"dex","ownerLogin":"FlockFreight","currentUserCanPush":false,"isFork":true,"isEmpty":false,"createdAt":"2021-06-17T14:40:33.000Z","ownerAvatar":"https://avatars.githubusercontent.com/u/40642444?v=4","public":true,"private":false,"isOrgOwned":true},"refInfo":{"name":"","listCacheKey":"v0:1697571829.0","currentOid":""},"activityList":{"items":[{"before":"4bf947915d796d903219780a6067a7dfeec53af6","after":null,"ref":"refs/heads/AX-29019","pushedAt":"2023-10-17T19:43:49.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"michaelliau","name":"Michael Liau","path":"/michaelliau","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/107157128?s=80&v=4"}},{"before":"f7f3108d6b49bc85b99f924d84d4e31784e190db","after":"7a9cecb50cb9cf651809dca9a47a5b167a73b920","ref":"refs/heads/master","pushedAt":"2023-10-17T19:42:15.000Z","pushType":"pr_merge","commitsCount":235,"pusher":{"login":"michaelliau","name":"Michael Liau","path":"/michaelliau","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/107157128?s=80&v=4"},"commit":{"message":"Merge pull request #2 from FlockFreight/AX-29019\n\nAX-29019: Implement client wildcard redirectURI support","shortMessageHtmlLink":"Merge pull request #2 from FlockFreight/AX-29019"}},{"before":"a114f1ac2d63fad057c5e860afafcff4a9ec8192","after":"4bf947915d796d903219780a6067a7dfeec53af6","ref":"refs/heads/AX-29019","pushedAt":"2023-10-09T23:35:04.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"michaelliau","name":"Michael Liau","path":"/michaelliau","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/107157128?s=80&v=4"},"commit":{"message":"AX-29019: Implement wildcard redirect URI support\n\nThis change introduces restricted support for wildcard matching of client redirectURIs. Using wildcards for redirectURIs introduces a security risk in production environments and should be used with caution in non-production environments only. In development environments, the use of wildcards allows for simpler management of Dex and client application deployments.\n\nWildcard support has been limited to the following rules, which are taken from Okta's implementation of the same feature:\n\n- Any configured redirect URIs may contain a single * character in the lowest-level domain (for example, https://redirect-*-domain.example.com/oidc/redirect) to act as a wildcard.\n- The wildcard subdomain must have at least one subdomain between it and the top level domain.\n- The wildcard can match any valid hostname characters, but can’t span more than one domain. For example, if https://redirect-*-domain.example.com/oidc/redirect is configured as a redirect URI, then https://redirect-1-domain.example.com/oidc/redirect and https://redirect-sub-domain.example.com/oidc/redirect match, but https://redirect-1.sub-domain.example.com/oidc/redirect doesn’t match.\n- Only the https URI scheme can use wildcard redirect URIs.","shortMessageHtmlLink":"AX-29019: Implement wildcard redirect URI support"}},{"before":"7aa5a9e624d95ea3eb505f8249e8f40efbf30a6a","after":"a114f1ac2d63fad057c5e860afafcff4a9ec8192","ref":"refs/heads/AX-29019","pushedAt":"2023-10-09T23:32:55.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"michaelliau","name":"Michael Liau","path":"/michaelliau","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/107157128?s=80&v=4"},"commit":{"message":"AX-29019: Implement wildcard redirect URI support\n\nThis change introduces restricted support for wildcard matching of client redirectURIs. Using wildcards for redirectURIs introduces a security risk in production environments and should be used with caution in non-production environments only. In development environments, the use of wildcards allows for simpler management of Dex and client application deployments.\n\nWildcard support has been limited to the following rules, which are taken from Okta's implementation of the same feature:\n\n- Any configured redirect URIs may contain a single * character in the lowest-level domain (for example, https://redirect-*-domain.example.com/oidc/redirect) to act as a wildcard.\n- The wildcard subdomain must have at least one subdomain between it and the top level domain.\n- The wildcard can match any valid hostname characters, but can’t span more than one domain. For example, if https://redirect-*-domain.example.com/oidc/redirect is configured as a redirect URI, then https://redirect-1-domain.example.com/oidc/redirect and https://redirect-sub-domain.example.com/oidc/redirect match, but https://redirect-1.sub-domain.example.com/oidc/redirect doesn’t match.\n- Only the https URI scheme can use wildcard redirect URIs.","shortMessageHtmlLink":"AX-29019: Implement wildcard redirect URI support"}},{"before":"d41ffef6916ac43e97234626f06c0d856085282b","after":"7aa5a9e624d95ea3eb505f8249e8f40efbf30a6a","ref":"refs/heads/AX-29019","pushedAt":"2023-10-05T19:32:42.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"michaelliau","name":"Michael Liau","path":"/michaelliau","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/107157128?s=80&v=4"},"commit":{"message":"AX-29019: Implement wildcard redirect URI support\n\nThis change introduces restricted support for wildcard matching of client redirectURIs. Using wildcards for redirectURIs introduces a security risk in production environments and should be used with caution in non-production environments only. In development environments, the use of wildcards allows for simpler management of Dex and client application deployments.\n\nWildcard support has been limited to the following rules, which are taken from Okta's implementation of the same feature:\n\n- Any configured redirect URIs may contain a single * character in the lowest-level domain (for example, https://redirect-*-domain.example.com/oidc/redirect) to act as a wildcard.\n- The wildcard subdomain must have at least one subdomain between it and the top level domain.\n- The wildcard can match any valid hostname characters, but can’t span more than one domain. For example, if https://redirect-*-domain.example.com/oidc/redirect is configured as a redirect URI, then https://redirect-1-domain.example.com/oidc/redirect and https://redirect-sub-domain.example.com/oidc/redirect match, but https://redirect-1.sub-domain.example.com/oidc/redirect doesn’t match.\n- Only the https URI scheme can use wildcard redirect URIs.","shortMessageHtmlLink":"AX-29019: Implement wildcard redirect URI support"}},{"before":"08c542db599e90a45e56754d9ff0fd1ddcd8fd19","after":"d41ffef6916ac43e97234626f06c0d856085282b","ref":"refs/heads/AX-29019","pushedAt":"2023-10-04T21:57:06.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"michaelliau","name":"Michael Liau","path":"/michaelliau","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/107157128?s=80&v=4"},"commit":{"message":"Move debug log on OIDC calls to connector","shortMessageHtmlLink":"Move debug log on OIDC calls to connector"}},{"before":null,"after":"08c542db599e90a45e56754d9ff0fd1ddcd8fd19","ref":"refs/heads/AX-29019","pushedAt":"2023-10-04T21:23:20.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"michaelliau","name":"Michael Liau","path":"/michaelliau","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/107157128?s=80&v=4"},"commit":{"message":"Add automatic retry on ETCD update on conflict","shortMessageHtmlLink":"Add automatic retry on ETCD update on conflict"}}],"hasNextPage":false,"hasPreviousPage":false,"activityType":"all","actor":null,"timePeriod":"all","sort":"DESC","perPage":30,"cursor":"Y3Vyc29yOnYyOpK7MjAyMy0xMC0xN1QxOTo0Mzo0OS4wMDAwMDBazwAAAAOZU-uT","startCursor":"Y3Vyc29yOnYyOpK7MjAyMy0xMC0xN1QxOTo0Mzo0OS4wMDAwMDBazwAAAAOZU-uT","endCursor":"Y3Vyc29yOnYyOpK7MjAyMy0xMC0wNFQyMToyMzoyMC4wMDAwMDBazwAAAAOPoPDn"}},"title":"Activity · FlockFreight/dex"}