Features
- LDAP connector added (#178)
- Dynamic client registration (#267)
- dexctl can read connectors from stdin (#277)
- Generated API docs added to repo (#285)
- dex now uses sqlite for --no-db mode and tests (does not add general sqlite support) (#304)
- New API endpoint for resending an invite email (#331)
- example app's default flags now work with --no-db mode (#333)
Bugs Fixed
- API status codes now differentiate between unauthenticated and unauthorized requests (#280)
- dex now uses 302 for redirects rather than 307 (#288)
- Emails now use case insensitive comparison (#339)
- When consuming OAuth2 credentials through basic auth, dex now correctly expects URL escaped values (#357)
Migration Note:
Duplicate Emails
The former use of case insensitive comparison for emails may have resulted in duplicate emails in the dex database for some instances.
For this release, dex will refuse to migrate the database if it detects duplicated emails in the authd_user table. In this case admins must resolve this by editing the table manually, dropping the rows they feel appropriate.
Admins who wish to delete duplicate emails in their database but don’t care which row is preserved can run the following SQL command:
DELETE FROM authd_user
WHERE id IN (SELECT id
FROM (SELECT id,
ROW_NUMBER() OVER (partition BY LOWER(email) ORDER BY id) AS rnum
FROM authd_user) t
WHERE t.rnum > 1);