Add introspection connector and workflow improvements

- Implement introspection connector and registration
- Add feature to hide connectors
- Update GitHub Actions workflows (CI manual, build-binary, artifacts)
- Update .gitignore for build artifacts
- Fix compilation issues

Author: oasisk

.gitignore

@@ -6,3 +6,7 @@
 /docker-compose.override.yaml
 /var/
 /vendor/
+/cmd/dex/dex.db
+/.vscode/launch.json
+/cmd/dex/__debug_bin*
+/examples/google/config-google.yaml

cmd/dex/config.go

@@ -51,6 +51,8 @@ type Config struct {
 	// querying the storage. Cannot be specified without enabling a passwords
 	// database.
 	StaticPasswords []password `json:"staticPasswords"`
+
+	HiddenConnectors []string `json:"hiddenConnectors"`
 }
 
 // Validate the configuration

cmd/dex/serve.go

@@ -306,6 +306,7 @@ func runServe(options serveOptions) error {
 		Now:                        now,
 		PrometheusRegistry:         prometheusRegistry,
 		HealthChecker:              healthChecker,
+		HiddenConnectors:           c.HiddenConnectors,
 		ContinueOnConnectorFailure: featureflags.ContinueOnConnectorFailure.Enabled(),
 	}
 	if c.Expiry.SigningKeys != "" {

connector/connector.go

@@ -103,3 +103,8 @@ type RefreshConnector interface {
 type TokenIdentityConnector interface {
 	TokenIdentity(ctx context.Context, subjectTokenType, subjectToken string) (Identity, error)
 }
+
+// to support token introspection.
+type TokenIntrospectionConnector interface {
+	IntrospectToken(ctx context.Context, tokenType, token string) (Identity, error)
+}