Signed-off-by: Stephan Renatus <srenatus@chef.io>

Signed-off-by: Stephan Renatus <srenatus@chef.io>

Finish GitHub org move

Signed-off-by: Stephan Renatus <srenatus@chef.io>

Signed-off-by: Stephan Renatus <srenatus@chef.io>

Signed-off-by: Stephan Renatus <srenatus@chef.io>

connectors/ldap: treat 'constraint violation' on bind as bad credentials

Some directory servers (I think it's Oracle) return

    Constraint Violation: Exceed password retry limit. Account locked.

when attempting to login too many times. While constraint violation can
mean many things, we're checking this as an error on BIND, so it's
more likely that something like this has happened than any other thing.

Hence, we should treat it as an "incorrect password" situation, not an
internal error.

It would of course be preferrable to surface more information about this
precise error (and similar ones), but I think this is beyond this small
change.
Signed-off-by: Stephan Renatus <srenatus@chef.io>

*: update the maintainers list

fix default baseURL for GitLab connector

Fix a broken link in the oidc readme

fix typo in README

[version_update] Update the version to the latest

Version mentioned in this example is very old and was causing issues

Fixed a broken link to An overview of OpenID Connect

Removing whitespace

Update using-dex.md

fix typo

Updates go to 1.10.2 to support SHA-512 for ldaps

Should `pulic`  be `public`?

fix wrong port from example

*: update build to Go 1.10

Update check go major version way

the previous one just keep one prefix number as the major number, it should be the whole number after the dot.

saml: add tests case covering tampered NameID field (comment)

As sketched here:

https://developer.okta.com/blog/2018/02/27/a-breakdown-of-the-new-saml-authentication-bypass-vulnerability

Thought it was interesting to see how our SAML connector behaved. And
it seems to be behaving well. :)
Signed-off-by: Stephan Renatus <srenatus@chef.io>

Add missing word

New id_provider scope that adds the connector ID and user ID to the ID token claims

Add new federated:id scope that causes Dex to add a federated_claims claim containing the connector_id and user_id to the ID token

handlers/connector_login: update AuthRequest irregardless of method

1170 - Fix comment typos

  BsaeDN should be BaseDN

automated PR: update CoC and legalese