Release v2.24.0

The official docker release for this release can be pulled from

    quay.io/dexidp/dex:v2.24.0

Features:

* Keystone connector: Added Email to Identity (dexidp#1681, @kenperkins, @chrigl)
* Atlassian Crowd connector: allow preferred_username claim to be set (dexidp#1684, @bonifaido)
* Github connector: pass redirect_uri (dexidp#1700, @sockmister)
* server: allow having no secret for static public clients (dexidp#1701, @tkleczek)
* SAML connector: add flag for filtering groups (dexidp#1704, @srenatus)

Bug fixes, misc changes:

* CI: add mysql service (dexidp#1674, @bonifaido)
* CI: increase go lint timeout (dexidp#1676, @bonifaido)
* storage/kubernetes: wrap Kubernetes host address in square brackets for IPv6 (dexidp#1645, @JerrySunWRS)
* storage/kubernetes: remove shadowed ResourceVersion from connector (dexidp#1673, @ktravis)
* server/handlers: do not fail login if refresh token gone (dexidp#1670, @klarose)
* server/handlers: automatic consistency fixing in case of missing refresh token in db (dexidp#1678, @Teeed)
* Adding slack channel to README (dexidp#1686, @kenperkins)
* OIDC connector: add Icon (dexidp#1692, @nabokihms)
* OpenShift connector: rootCA option (dexidp#1694, @nabokihms)

Merge pull request dexidp#1664 from lhotrifork/static-client-env-vars

storage/static.go: expand environment variables in client ID and secret

Release v2.22.0

Merge pull request dexidp#1434 from jacksontj/groups

Add option to enable groups for oidc connectors

Release v2.19.0

The official docker release for this release can be pulled from

    quay.io/dexidp/dex:v2.19.0

Notes:

* Following Mozilla's recommendations for secure TLS settings in the
  "Intermediate" compatibility mode, some insecure cipher suitess have been
  removed, overriding Golang's standard set of ciphers. In the unlikely event
  that this makes one of your clients NOT work with Dex anymore (and there's
  a decent reason for not being able to update that client), please file an
  issue. See dexidp#1540 for details.
* As mentioned in documentation, Kubernetes TPR suppport is removed in this
  release.

Features:

* connector/LDAP: display login error (dexidp#1530, @bonifaido)
* HTTPS/gRPC: Use a more conservative set of CipherSuites (dexidp#1540, @stevendanna)

Bug fixes, misc changes:

* Update ADOPTERS.md (dexidp#1534, @jthabet)
* storage/kubernetes: Removing Kubernetes TPR support (dexidp#1517, @venezia)
* Dockerfile: build with Golang 1.22.9 (dexidp#1529, @dkuerner)
* Kubernetes docs: Clarify the origin of `openid-ca` (dexidp#1521, @erwinvaneyk)
* Code update: Replace `x/net/context` with stdlib `context` (#, @erwinvaneyk)

Release v2.18.0

The official docker release for this release can be pulled from

    quay.io/dexidp/dex:v2.18.0

Features:

* Storage: New MySQL storage backend (dexidp#1485, @bonifaido)
* gRPC: Add reflection to gRPC API (dexidp#1512, @venezia)
* Add option to always display connector selection even if there's only one (dexidp#1505, @MarcDufresne)
* Added "connector_id" to skip straight to a connector (dexidp#1481, @LanceH)
* Allow arbitrary data to be passed to templates (dexidp#1504, @MarcDufresne)
* Gitlab: implement useLoginAsID as in GitHub connector (dexidp#1497, @bonifaido)
* Microsoft: option for group UUIDs instead of name and group whitelist (dexidp#1446, @maksd)
* gRPC: Add VerifyPassword to API (dexidp#1486, @AlbanSeurat)

Bug fixes, misc changes:

* MAINTAINERS: add @bonifaido (dexidp#1492, @srenatus)
* Update ADOPTERS.md (dexidp#1495, @pbochynski; dexidp#1494, @tanmaykm; dexidp#1493, @srenatus)
* example-app: add connector_id (dexidp#1496, @srenatus)
* Docs: fix MySQL sample query (dexidp#1498, @mkontani)
* Code quality: fix some lint issues (dexidp#1500, @srenatus)
* gRPC: fix logging in VerifyPassword (dexidp#1502, @srenatus)
* Return config validation errors in one go (dexidp#1439, @sks)
* Update all deps (dexidp#1501, @srenatus)
* Return HTTP 400 for invalid state parameter (dexidp#1490, @momokatte)
* Adjusting Makefile so that `golint` will compile (dexidp#1509, @venezia)
* Add tests for some callback handler error conditions (dexidp#1510, @momokatte)
* Add examples for recent additions to oauth2 configuration options (dexidp#1516, @tpdownes)
* Bump deps for http2 issues (dexidp#1519, @srenatus)
* Connectors: refactor filter code into a helper package (dexidp#1480, @srenatus)

Release v2.17.0

The official docker release for this release can be pulled from

    quay.io/dexidp/dex:v2.17.0

Notes:

* Dex finally offers a user info endpoint. While this doesn't expose any
  more information than is included in the ID tokens, it allows for using
  Dex in integrations that demand such an endpoint.
* With this release, the Linkedin connector is usable again!

Features:

* Add UserInfo endpoint (dexidp#1473, @alindeman, @jackielii, and @fjbsantiago)
* Linkedin: Update to use v2 APIs (dexidp#1460, @tanmaykm)
* server: add metrics for CORS handlers (dexidp#1429, @tsuna)
* OIDC: Add option to hit the optional userinfo endpoint (dexidp#1433, @jacksontj)
* OIDC: Make userID configurable (dexidp#1448, @cappyzawa)
* OIDC: Make userName configurable (dexidp#1459, @flarno11)
* GitLab: support for group whitelist (dexidp#1436, @bonifaido)

Bug fixes, misc changes:

* Print appropriate error when listing connectors fails (dexidp#1443, @deric)
* Bitbucket docs: update permission requirements (dexidp#1435, @bonifaido)
* Round out logging interface with functions for all levels (dexidp#1432, @alindeman)
* Fix typo in SAMLConnector interface (dexidp#1430, @mkontani)
* travis: replace golang 1.10 and 1.11 with 1.12 (dexidp#1457, @srenatus)
* OIDC: truely ignore "email_verified" claim if configured that way (dexidp#1456, @srenatus)
* MAINTAINERS: remove ericchiang@ (dexidp#1478, @ericchiang)

Merge pull request dexidp#1427 from yann-soubeyrand/static-client-log…

…-name

cmd/dex/serve.go: log static client name instead of ID

The official docker release for this release can be pulled from

```
quay.io/dexidp/dex:v2.15.0
```
Notes:
* **Minimum TLS version bumped to v1.2**: if you are using Dex to serve on TLS directly, please make sure clients support TLS v1.2 before upgrading.

Features:
* Added Active Directory and Kubelogin integration sample (dexidp#1390, @okamototk)
* Added option to use GitHub login as id (dexidp#1396, @jtnord)

Bug fixes, misc changes:
* Dockerfile Go version bumped to v1.11.5 (dexidp#1389, @ericchiang)
* Minimum TLS version bumped to TLSv1.2 (dexidp#1392, @stevendanna)
* Added @JoelSpeed as maintainer (dexidp#1394, @srenatus)
* Added tests for LDAP filtering (dexidp#1249, @srenatus)
* Print Access token in example app (dexidp#1395, @hainesc)
* Add periodic storage health checking (dexidp#1397, @ericchiang)