{"repo":"dexidp/dex","free":true,"listed":false,"github":"https://github.com/dexidp/dex","clone":"git clone https://github.com/dexidp/dex.git","description":"OpenID Connect (OIDC) identity and OAuth 2.0 provider with pluggable connectors","language":"Go","stars":11043,"topics":["oidc","kubernetes","idp","identity-provider","hacktoberfest"],"license":"Apache-2.0","category":"auth-billing-email","readme_excerpt":"dex - A federated OpenID Connect provider Dex is an identity service that uses [OpenID Connect][openid-connect] to drive authentication for other apps. Dex acts as a portal to other identity providers through \"connectors.\" This lets dex defer authentication to LDAP servers, SAML providers, or established identity providers like GitHub, Google, and Active Directory. Clients write their authentication logic once to talk to dex, then dex handles the protocols for a given backend. ID Tokens ID Tokens are an OAuth2 extension introduced by OpenID Connect and dex's primary feature. ID Tokens are [JSON Web Tokens][jwt-io] (JWTs) signed by dex and returned as part of the OAuth2 response that attests to the end user's identity. An example JWT might look like: ID Tokens contains standard claims assert which client app logged the user in, when the token expires, and the identity of the user. Because these tokens are signed by dex and [contain standard-based claims][standard-claims] other services can consume them as service-to-service credentials. Systems that can already consume OpenID Connect ID Tokens issued by dex include: [Kubernetes][kubernetes] [AWS STS][aws-sts] For details on how to request or validate an ID Token, see \"Writing apps that use dex\" . Kubernetes and Dex Dex runs natively on top of any Kubernetes cluster using Custom Resource Definitions and can drive API server authentication through the OpenID Connect plugin. Clients, such as kubelogin and kubectl , can act on beh","default_branch":null,"files":null,"tree":[],"storefront":"/r/dexidp","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/dexidp/dex/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}