Release v2.18.0

The official docker release for this release can be pulled from

    quay.io/dexidp/dex:v2.18.0

Features:

* Storage: New MySQL storage backend (dexidp#1485, @bonifaido)
* gRPC: Add reflection to gRPC API (dexidp#1512, @venezia)
* Add option to always display connector selection even if there's only one (dexidp#1505, @MarcDufresne)
* Added "connector_id" to skip straight to a connector (dexidp#1481, @LanceH)
* Allow arbitrary data to be passed to templates (dexidp#1504, @MarcDufresne)
* Gitlab: implement useLoginAsID as in GitHub connector (dexidp#1497, @bonifaido)
* Microsoft: option for group UUIDs instead of name and group whitelist (dexidp#1446, @maksd)
* gRPC: Add VerifyPassword to API (dexidp#1486, @AlbanSeurat)

Bug fixes, misc changes:

* MAINTAINERS: add @bonifaido (dexidp#1492, @srenatus)
* Update ADOPTERS.md (dexidp#1495, @pbochynski; dexidp#1494, @tanmaykm; dexidp#1493, @srenatus)
* example-app: add connector_id (dexidp#1496, @srenatus)
* Docs: fix MySQL sample query (dexidp#1498, @mkontani)
* Code quality: fix some lint issues (dexidp#1500, @srenatus)
* gRPC: fix logging in VerifyPassword (dexidp#1502, @srenatus)
* Return config validation errors in one go (dexidp#1439, @sks)
* Update all deps (dexidp#1501, @srenatus)
* Return HTTP 400 for invalid state parameter (dexidp#1490, @momokatte)
* Adjusting Makefile so that `golint` will compile (dexidp#1509, @venezia)
* Add tests for some callback handler error conditions (dexidp#1510, @momokatte)
* Add examples for recent additions to oauth2 configuration options (dexidp#1516, @tpdownes)
* Bump deps for http2 issues (dexidp#1519, @srenatus)
* Connectors: refactor filter code into a helper package (dexidp#1480, @srenatus)

Release v2.17.0

The official docker release for this release can be pulled from

    quay.io/dexidp/dex:v2.17.0

Notes:

* Dex finally offers a user info endpoint. While this doesn't expose any
  more information than is included in the ID tokens, it allows for using
  Dex in integrations that demand such an endpoint.
* With this release, the Linkedin connector is usable again!

Features:

* Add UserInfo endpoint (dexidp#1473, @alindeman, @jackielii, and @fjbsantiago)
* Linkedin: Update to use v2 APIs (dexidp#1460, @tanmaykm)
* server: add metrics for CORS handlers (dexidp#1429, @tsuna)
* OIDC: Add option to hit the optional userinfo endpoint (dexidp#1433, @jacksontj)
* OIDC: Make userID configurable (dexidp#1448, @cappyzawa)
* OIDC: Make userName configurable (dexidp#1459, @flarno11)
* GitLab: support for group whitelist (dexidp#1436, @bonifaido)

Bug fixes, misc changes:

* Print appropriate error when listing connectors fails (dexidp#1443, @deric)
* Bitbucket docs: update permission requirements (dexidp#1435, @bonifaido)
* Round out logging interface with functions for all levels (dexidp#1432, @alindeman)
* Fix typo in SAMLConnector interface (dexidp#1430, @mkontani)
* travis: replace golang 1.10 and 1.11 with 1.12 (dexidp#1457, @srenatus)
* OIDC: truely ignore "email_verified" claim if configured that way (dexidp#1456, @srenatus)
* MAINTAINERS: remove ericchiang@ (dexidp#1478, @ericchiang)

Merge pull request dexidp#1427 from yann-soubeyrand/static-client-log…

…-name

cmd/dex/serve.go: log static client name instead of ID

The official docker release for this release can be pulled from

```
quay.io/dexidp/dex:v2.15.0
```
Notes:
* **Minimum TLS version bumped to v1.2**: if you are using Dex to serve on TLS directly, please make sure clients support TLS v1.2 before upgrading.

Features:
* Added Active Directory and Kubelogin integration sample (dexidp#1390, @okamototk)
* Added option to use GitHub login as id (dexidp#1396, @jtnord)

Bug fixes, misc changes:
* Dockerfile Go version bumped to v1.11.5 (dexidp#1389, @ericchiang)
* Minimum TLS version bumped to TLSv1.2 (dexidp#1392, @stevendanna)
* Added @JoelSpeed as maintainer (dexidp#1394, @srenatus)
* Added tests for LDAP filtering (dexidp#1249, @srenatus)
* Print Access token in example app (dexidp#1395, @hainesc)
* Add periodic storage health checking (dexidp#1397, @ericchiang)

The official docker release for this release can be pulled from

    quay.io/dexidp/dex:v2.14.0

Notes:

* **Users of the Gitlab connector need to pay attention**: The connector now uses a less powerful
  scope. This is a good enhancement in terms of securiting your bases, but it may need special care
  when upgrading!

Features:

* There's a brand new Keystone connector! (dexidp#1374, @knangia, @joannanosek, and @kbalka)
* Github connector now returns a full group list when no org is specified, and you have
  opted-in to that behaviour (dexidp#1340, dexidp#1349, @alexmt)
* Github connector allows for a 'both' option to use team name AND slug in TeamNameField (dexidp#1345, @vito)
* Gitlab connector no longer requires to API scope (dexidp#1351, @gypsydiver)
* Postgres storage backeng now works with UNIX sockets (dexidp#1346, dexidp#1352, @vito)
* Postgres storage backend now exposes some tunables (dexidp#1357, @sr)
* gRPC API: Add UpdateClient (dexidp#1275, @ccojocar)
* Make expiry of auth requests configurable (dexidp#1372, @mxey)
* LDAP connector - add emailSuffix config option (dexidp#1380, @dkess)

Bug fixes, misc changes:

* Render error message provided by connector if user authentication failed (dexidp#1339, @alexmt)
* Fix bogus conformance failure due to time zones (dexidp#1344, @vito)
* Improved LDAP errors from upgrading go-ldap (dexidp#1338, @sr)
* Removed incomplete, unmaintained storage adapters for CockroachDB and MySQL (dexidp#1343, @vito)
* Removed unused startup scripts, adapted docs (dexidp#1350, @sr)
* LDAP connector: Document that 'DN' must be in capitals (dexidp#1359, @OwenTuz)
* Kubernetes docs: clarify steps around use/creation of TLS assets (dexidp#1358, @OwenTuz)
* Bumped github.com/lib/pq (dexidp#1367, @vito)
* Migrate to go modules (dexidp#1365, dexidp#1369, @josdotso)
* Makefile: cleanups for newer versions of Go (dexidp#1368, @ericchiang)
* Dockerfile: update to Go 1.11.3 (dexidp#1373, @ericchiang)
* Replace "GET", "POST" to http.MethodGet and http.MethodPost (dexidp#1377, @hainesc)

Merge pull request dexidp#1334 from tmatias/patch-1

point users to storage/RBAC docs

release v2.12.0

The official docker release for this release is at

    quay.io/dexidp/dex:v2.12.0

Features:

- New connector: Bitbucket Cloud (dexidp#1307, @edtan)
- Allow using the GitHub team slug instead of name (dexidp#1297, @tburko)
- Allow using a client TLS cert in the LDAP connector (dexidp#1278, @veily)

Bug fixes:

- Any non-cert (or accidentally invalid) data following a valid cert
  in the SAML connector configuration will now error out (dexidp#1305, @srenatus)

....and fixes to docs, as well as an upgrade of a dependency library
(go-jose v2.1.8, @fajran).

Thank you very much, all old and new contributors!

release v2.11.0

This is the first new release after moving dex from github.com/coreos to
github.com/dexidp. In the process, a new Quay repository was created, so
you can find the official docker image for this release at:

    quay.io/dexidp/dex:v2.11.0

Note that every merge to master now results in a docker image built in
that repository, making it easier to consume recent code changes, and
allowing for a more automated release process.

Features:

- Updates go to 1.10.2 to support SHA-512 for ldaps (@kpschuck, dexidp#1233)
- Fix timeout bug for etcd3 client connect (byxorna, dexidp#1266)
- Fix default baseURL for GitLab connector (@AnianZ, dexidp#1279)
- Connectors/ldap: treat 'constraint violation' on bind as bad
  credentials (@srenatus, dexidp#1285)

...and many fixes to the documentation and examples. Thank you, everyone
involved in helping out here.