Commit Graph

514 Commits

Author SHA1 Message Date
Trong Huu Nguyen
9cb648917b fix(handler/sso/proxy): only set default query parameters for login handler 2023-04-13 09:20:34 +02:00
Trong Huu Nguyen
a2d8d6f7c3 fix(router): register OPTIONS routes for CORS middleware 2023-04-13 09:03:04 +02:00
Trong Huu Nguyen
163d9e42ad fix(handler/reverseproxy): preserve inbound forwarded/x-forwarded headers 2023-04-12 15:05:55 +02:00
Trong Huu Nguyen
b3eac4b118 build: go mod tidy 2023-04-11 14:45:13 +02:00
Trong Huu Nguyen
b36942c38b ci: add workflow for auto-merging dependabot PRs 2023-04-11 14:39:44 +02:00
Trong Huu Nguyen
ba6f689056 build(deps): bump 2023-04-11 14:35:04 +02:00
Trong Huu Nguyen
37557ddf2f ci: only run codeql on schedule 2023-04-11 09:59:02 +02:00
Trong Huu Nguyen
765d4e34b1 refactor(url): extract cleaner and validators to separate implementations 2023-04-11 09:58:35 +02:00
Trong Huu Nguyen
ec4ac2b8e9 fix(redis): set ConnMaxIdleTime, not ConnMaxLifetime 2023-03-29 21:43:11 +02:00
Trong Huu Nguyen
10fd7f2b6c ci: remove race detector 2023-03-29 10:03:37 +02:00
Trong Huu Nguyen
e761810630 feat(redis): allow configuration of idle connection timeout 2023-03-29 09:55:17 +02:00
Trong Huu Nguyen
ef8c7d2cca feat(sso/server): redirect to login for wildcard handler 2023-03-29 09:55:16 +02:00
Trong Huu Nguyen
323362073f ci: enable race detector and shuffle for tests 2023-03-29 09:55:16 +02:00
dependabot[bot]
bd09b827f8 build(deps): bump sigstore/cosign-installer (#82)
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-28 08:26:16 +02:00
Trong Huu Nguyen
bf964e42f2 build(deps): bump 2023-03-21 09:22:12 +01:00
Trong Huu Nguyen
c72093dda9 fix(handler/sso/proxy): use correct query for login url 2023-03-21 09:11:31 +01:00
Trong Huu Nguyen
fd73a0a83e refactor(openid/config): more descriptive error message for unsupported values 2023-03-21 09:11:30 +01:00
J-K. Solbakken
19714e75b8 document image signing 2023-03-17 15:02:11 +01:00
J-K. Solbakken
2654f6d317 corrected copypasta error 2023-03-17 14:24:34 +01:00
J-K. Solbakken
57f3fa0b7d sign and attest 2023-03-17 13:52:48 +01:00
Jan-Kåre Solbakken
31961cf96f Merge pull request #77 from nais/dependabot/go_modules/github.com/alicebob/miniredis/v2-2.30.1
build(deps): bump github.com/alicebob/miniredis/v2 from 2.30.0 to 2.30.1
2023-03-13 21:02:34 +01:00
dependabot[bot]
a3585895c1 build(deps): bump github.com/alicebob/miniredis/v2 from 2.30.0 to 2.30.1
Bumps [github.com/alicebob/miniredis/v2](https://github.com/alicebob/miniredis) from 2.30.0 to 2.30.1.
- [Release notes](https://github.com/alicebob/miniredis/releases)
- [Changelog](https://github.com/alicebob/miniredis/blob/master/CHANGELOG.md)
- [Commits](https://github.com/alicebob/miniredis/compare/v2.30.0...v2.30.1)

---
updated-dependencies:
- dependency-name: github.com/alicebob/miniredis/v2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-03-13 19:58:41 +00:00
Trong Huu Nguyen
c8a887dd01 build: bump to go version 1.20.2 2023-03-08 14:22:16 +01:00
Trong Huu Nguyen
2116f8d23b build(deps): bump golang.org/x/oauth2 from 0.5.0 to 0.6.0
Bumps [golang.org/x/oauth2](https://github.com/golang/oauth2) from 0.5.0 to 0.6.0.
- [Release notes](https://github.com/golang/oauth2/releases)
- [Commits](https://github.com/golang/oauth2/compare/v0.5.0...v0.6.0)

---
updated-dependencies:
- dependency-name: golang.org/x/oauth2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-03-08 13:43:43 +01:00
dependabot[bot]
4ab4b54bfe build(deps): bump golang.org/x/crypto from 0.6.0 to 0.7.0
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.6.0 to 0.7.0.
- [Release notes](https://github.com/golang/crypto/releases)
- [Commits](https://github.com/golang/crypto/compare/v0.6.0...v0.7.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-03-08 13:43:26 +01:00
dependabot[bot]
db499229de build(deps): bump github.com/bsm/redislock from 0.9.0 to 0.9.1
Bumps [github.com/bsm/redislock](https://github.com/bsm/redislock) from 0.9.0 to 0.9.1.
- [Release notes](https://github.com/bsm/redislock/releases)
- [Changelog](https://github.com/bsm/redislock/blob/main/CHANGELOG.md)
- [Commits](https://github.com/bsm/redislock/compare/v0.9.0...v0.9.1)

---
updated-dependencies:
- dependency-name: github.com/bsm/redislock
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-03-08 13:43:23 +01:00
Trong Huu Nguyen
20e733d9f2 ci/dependabot: remove PR limit, add docker 2023-03-08 13:01:52 +01:00
Trong Huu Nguyen
da05c7808d build: add trimpath and ldflags to trim resulting binary 2023-03-08 12:55:17 +01:00
Trong Huu Nguyen
3dc3c1dee5 feat(sso/server): return not found instead of redirect for wildcard handler 2023-03-08 12:53:25 +01:00
Trong Huu Nguyen
07cf8e12b3 feat(cookie): support overriding session cookie name 2023-03-01 11:27:26 +01:00
Trong Huu Nguyen
133d3fd855 refactor(middleware/logentry): ignore ping route 2023-03-01 10:11:37 +01:00
Trong Huu Nguyen
a375ac774d feat(router): add ping route for health probes 2023-03-01 09:27:06 +01:00
dependabot[bot]
27bc5aee60 build(deps): bump honnef.co/go/tools from 0.4.0 to 0.4.2 (#72)
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-28 08:12:28 +01:00
dependabot[bot]
f720842e03 build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.2 (#73)
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-28 08:04:38 +01:00
Trong Huu Nguyen
7c21af2d58 build: clean up dockerfile and compose setup, use distroless image 2023-02-27 14:13:57 +01:00
Trong Huu Nguyen
442e056b26 refactor(handler): inline error handler, remove unnecessary getters 2023-02-24 19:24:02 +01:00
Trong Huu Nguyen
f346e9e91d refactor(router): use a more apt name for wildcard handler 2023-02-24 18:33:41 +01:00
Trong Huu Nguyen
5342913676 refactor: move cookie options to handler constructors 2023-02-24 18:21:36 +01:00
Trong Huu Nguyen
d5b603c98f feat(router): add cors middleware for sso server 2023-02-23 14:30:55 +01:00
Trong Huu Nguyen
08c6e96670 refactor(session): wrap error for decrypt 2023-02-23 14:29:49 +01:00
Trong Huu Nguyen
b248dd8875 docs: add flags for sso configs 2023-02-22 10:24:06 +01:00
Trong Huu Nguyen
3e93423464 refactor(sso/server): redirect requests for wildcard routes to default URL 2023-02-22 10:19:26 +01:00
Trong Huu Nguyen
9ecfdb73ef fix(handler): time-to-refresh in session metadata is disabled for sso 2023-02-22 10:11:39 +01:00
Trong Huu Nguyen
afc8fd6962 style: formatting 2023-02-21 15:37:48 +01:00
Trong Huu Nguyen
e7d411b5c9 build: add gofumt and Makefile target for formatting 2023-02-21 15:36:14 +01:00
Trong Huu Nguyen
2796e1c9bc refactor(session): remove duplicate method, token expiry must be shorter than inactivity timeout 2023-02-21 15:34:50 +01:00
Trong Huu Nguyen
9074547163 docs: clarifications for refresh behaviour 2023-02-21 15:32:43 +01:00
Trong Huu Nguyen
ec572db957 refactor(session): remove internal method from Reader interface 2023-02-21 15:12:45 +01:00
Trong Huu Nguyen
925a1c70e7 fix(config): require redis when sso is enabled 2023-02-21 14:54:29 +01:00
Trong Huu Nguyen
492e0b5625 feat(sso/proxy): implement upstream reverseproxy with prerequisites 2023-02-21 14:50:51 +01:00