Trong Huu Nguyen
0ce938c101
build, docs: simplify local run instructions
2023-09-25 14:16:25 +02:00
Trong Huu Nguyen
28256089f1
build: bump to go 1.21
2023-08-10 13:41:44 +02:00
Trong Huu Nguyen
5729f46542
docs: move to separate directory, major cleanups
2023-07-20 10:52:48 +02:00
Trong Huu Nguyen
cb1392ec97
build: bump to go version 1.20.5
2023-06-09 13:52:36 +02:00
Trong Huu Nguyen
2925ebe9e4
fix(handler/session): return metadata response even if session is inactive
2023-06-09 13:52:36 +02:00
Trong Huu Nguyen
350d7ff780
feat(cookie): allow configuration of name prefix
...
This is to alleviate issues with deployments on different
subdomains using overlapping cookie names where browsers
behave unpredictably.
2023-05-08 10:23:27 +02:00
Trong Huu Nguyen
c308efb3ef
docs: fix notes on refresh tokens and inactivity [ci skip]
2023-04-19 13:34:53 +02:00
Trong Huu Nguyen
e761810630
feat(redis): allow configuration of idle connection timeout
2023-03-29 09:55:17 +02:00
J-K. Solbakken
19714e75b8
document image signing
2023-03-17 15:02:11 +01:00
Trong Huu Nguyen
07cf8e12b3
feat(cookie): support overriding session cookie name
2023-03-01 11:27:26 +01:00
Trong Huu Nguyen
7c21af2d58
build: clean up dockerfile and compose setup, use distroless image
2023-02-27 14:13:57 +01:00
Trong Huu Nguyen
b248dd8875
docs: add flags for sso configs
2023-02-22 10:24:06 +01:00
Trong Huu Nguyen
9074547163
docs: clarifications for refresh behaviour
2023-02-21 15:32:43 +01:00
Trong Huu Nguyen
473e4a95a7
refactor: remove loginstatus
...
Loginstatus is no longer needed with the SSO setup.
Fixes #50 .
2023-02-10 14:58:17 +01:00
Trong Huu Nguyen
9881bf5b44
build: bump to go version 1.20
2023-02-10 14:58:15 +01:00
Trong Huu Nguyen
c8f148d892
refactor(handler/error): remove custom redirect
...
Reduce the risk of exposing oauth query parameters in "dirty dancing" attacks.
2023-02-10 14:58:14 +01:00
Trong Huu Nguyen
b3c50acb76
docs: use mermaid for diagrams
2022-12-19 13:04:12 +01:00
Trong Huu Nguyen
1d754baabe
feat(handler/reverseproxy): preserve incoming authorization for unauthenticated sessions
2022-12-16 14:53:27 +01:00
Trong Huu Nguyen
185485a6fe
feat(handler/autologin): use doublestar library for nested path matching
...
Fixes #54 .
2022-11-24 11:36:54 +01:00
Trong Huu Nguyen
e7244df4d5
feat: add local logout endpoint
2022-11-24 11:36:49 +01:00
Trong Huu Nguyen
bdec8c662c
refactor(router): correct HTTP verb for session refresh endpoint
...
Since this changes the state for a user's session, a POST is more
appropriate than just a GET - even though the POST body is empty.
We keep the GET route temporarily to allow any consumers to migrate.
2022-10-11 09:22:03 +02:00
Trong Huu Nguyen
aaaaaaa38d
feat(session): add session inactivity timeout feature
...
Fixes #52 .
2022-09-22 10:03:17 +02:00
Trong Huu Nguyen
843bf5dfcd
refactor(handler/error): rename config variable to match intention
2022-09-21 09:39:57 +02:00
Trong Huu Nguyen
b4eecfc663
fix(handler/autologin): only trigger for GET requests
2022-09-12 12:33:42 +02:00
Trong Huu Nguyen
f830ff575c
docs: clarify session refresh cooldown mechanism
2022-09-08 16:42:11 +02:00
Trong Huu Nguyen
619ae52d45
refactor: separate refresh-specific fields from session info; enable endpoint without refresh feature
2022-09-01 19:35:48 +02:00
Trong Huu Nguyen
06b71cf56d
docs: clarify endpoint usage, add notes on session management and refresh tokens
2022-09-01 19:33:22 +02:00
Trong Huu Nguyen
d5bbca9897
feat: rudimentary support for refresh tokens
2022-08-26 14:32:39 +02:00
Trong Huu Nguyen
5a50ba7c3a
feat: support multiple ingresses
...
Replace hardcoded callback URLs with dynamic generation
of URLs based on incoming requests. These are validated against
a pre-registered list of ingresses for which Wonderwall is considered
authorative for.
We also preserve the cookie behaviour; the most specific ingress path
and domain is used for the cookies.
The `url` package has been moved to the `handler` package, and its
implementation refactored slightly for readability and DRY.
2022-08-17 20:43:56 +02:00
Trong Huu Nguyen
ea5b7701a9
deps: bump to go 1.19
2022-08-10 13:12:56 +02:00
Trong Huu Nguyen
4646c36b74
refactor(autologin): skip -> ignore
2022-07-21 12:50:55 +02:00
Trong Huu Nguyen
d79f31c18d
refactor(autologin): use glob-style matching instead of regex
...
Regexes are powerful, but completely overkill and error-prone for this
use-case. So instead, we'll use path.Match with its simpler glob-style
patterns.
2022-07-21 12:01:30 +02:00
Trong Huu Nguyen
124aff9f08
docs: note some gotchas for the docker compose setup [ci skip]
2022-07-21 08:37:55 +02:00
Trong Huu Nguyen
655ff8dd2c
docs: update docker-compose setup
2022-07-19 13:11:57 +02:00
Trong Huu Nguyen
4ab07e9dc2
refactor: clean up logging
2022-07-19 08:39:02 +02:00
Trong Huu Nguyen
ef649e7aaa
feat: add allowlisting of paths for autologin
2022-07-17 20:11:55 +02:00
Trong Huu Nguyen
32dd80b5da
feat: add handler for logout callbacks
2022-05-10 08:52:07 +02:00
Trong Huu Nguyen
40a4c8a02c
docs: minor cleanups, add overview with diagrams
2022-05-04 15:54:45 +02:00
Trong Huu Nguyen
6a4a268e15
docs: update available flags
2022-02-03 11:41:41 +01:00
Trong Huu Nguyen
1b4ce5cab7
Revert "Revert "refactor: infer redirect URI from configured ingress""
...
This reverts commit 8cf9d22324
2021-10-18 14:12:41 +02:00
Trong Huu Nguyen
8cf9d22324
Revert "refactor: infer redirect URI from configured ingress"
...
This reverts commit 5f0b0df7cf
2021-10-18 14:06:10 +02:00
Trong Huu Nguyen
5f0b0df7cf
refactor: infer redirect URI from configured ingress
2021-10-18 11:26:55 +02:00
Trong Huu Nguyen
be585f9902
refactor: simplify config for acr_values and ui_locales; validate on startup
2021-10-17 20:24:34 +02:00
Trong Huu Nguyen
1d92df8284
docs: clean up, describe new configs and azure support
2021-10-16 12:46:26 +02:00
Trong Huu Nguyen
11f860d5dd
docs: write an actual readme
...
Co-Authored-By: Morten Lied Johansen <morten.lied.johansen@nav.no >
Co-Authored-By: Sindre Rødseth Hansen <sindre.rodseth.hansen@nav.no >
2021-09-29 09:38:52 +02:00
Kent Daleng
f09cfabfdf
add some info about what this app does
2021-08-17 15:53:48 +02:00
Kent Daleng
18b9d43545
use ci
2021-08-17 13:57:06 +02:00
Kent Daleng
1aec4cd36a
initial commit
2021-08-17 13:39:10 +02:00
