Trong Huu Nguyen
ff4df10853
build(deps): bump go dependencies
2026-07-27 14:46:43 +02:00
Trong Huu Nguyen
cedece937e
ci: bump github actions
2026-07-27 14:38:38 +02:00
Trong Huu Nguyen
cc0f342955
build: go 1.26.5
2026-07-27 14:31:04 +02:00
Trong Huu Nguyen
704f455291
refactor(session): replace -1 sentinels with named constant
...
Introduce SecondsNotApplicable for *_in_seconds fields whose feature is
disabled (no inactivity timeout, auto-refresh off), replacing scattered
magic -1 values and the post-construction mutation in Verbose(). JSON
output is unchanged.
2026-06-10 16:58:52 +02:00
Trong Huu Nguyen
08cf4260e7
refactor(session): clarify token refresh scheduling
...
Consolidate the refresh schedule into a single NextRefresh function (leeway +
inactivity half-life, floored at the cooldown). ShouldRefresh now defers to it,
so the explicit cooldown gate is redundant and removed. Add doc comments naming
the mechanisms. No behavior change.
2026-06-10 16:58:41 +02:00
Trong Huu Nguyen
8fbd4656db
fix(session): refresh tokens 30s before expiry instead of 5m
...
Refreshes are activity-based and synchronous-on-expiry, so the proactive
leeway only hides refresh latency and provides retry headroom; it is not
what prevents serving expired tokens. Shrink it from 5m to 30s to align
with identity provider guidance against refreshing long before expiry,
while keeping decent end-user UX.
2026-06-10 16:57:54 +02:00
Trong Huu Nguyen
9f3d10fcaf
feat(openid/client): set nbf claim for client assertions
2026-06-09 10:00:22 +02:00
Trong Huu Nguyen
e7788d29ab
build(deps): bump direct dependencies
2026-06-09 09:58:08 +02:00
Trong Huu Nguyen
57c6d53d64
feat(charts): use otel endpoint from fasit
2026-06-05 13:53:09 +02:00
Trong Huu Nguyen
300809f0ff
build: go 1.26.4
2026-06-03 09:18:28 +02:00
Trong Huu Nguyen
f8b672549a
fix(otel): use NewSchemaless to avoid semconv schema URL conflicts
2026-05-29 08:34:27 +02:00
Trong Huu Nguyen
6fa8f52718
build(deps): upgrade direct dependencies
...
- chi/v5 v5.2.5 -> v5.3.0
- redislock v0.9.4 -> v0.10.0
- x/crypto v0.51.0 -> v0.52.0
- miniredis/v2 v2.37.0 -> v2.38.0
- liberator cdeda47 -> 791cc0e
2026-05-26 14:12:20 +02:00
Trong Huu Nguyen
c166595412
ci: update actions
2026-05-26 13:39:54 +02:00
Trong Huu Nguyen
a8c5ad891f
style: go fmt
2026-05-26 13:27:55 +02:00
Trong Huu Nguyen
8b88874ffb
build: go get tool
2026-05-26 13:27:49 +02:00
Trong Huu Nguyen
c7a625a0c5
ci: fasit-deploy@v4
2026-05-12 12:43:44 +02:00
Trong Huu Nguyen
66d2a14e47
fix(handler/error): respect log level parameter in respondError
...
The previous if/else only checked for WarnLevel, causing any other
level (e.g. InfoLevel in 24fb9b1
2026-05-11 15:28:39 +02:00
Trong Huu Nguyen
8774f4dfab
build(deps): update direct dependencies
...
- lestrrat-go/jwx/v3 v3.1.0 -> v3.1.1 (security hardening)
- redis/go-redis/v9 v9.18.0 -> v9.19.0 (bug fixes)
- riandyrn/otelchi v0.12.2 -> v0.12.3 (metrics fixes)
- golang.org/x/crypto v0.50.0 -> v0.51.0
- nais/liberator pseudo-version bump
2026-05-11 08:52:38 +02:00
Trong Huu Nguyen
c3691be136
ci: add sandboxed daily checks for staticcheck, govulncheck, and tests
2026-05-11 08:35:59 +02:00
Trong Huu Nguyen
48a65a800d
build: go 1.26.3
2026-05-08 09:00:59 +02:00
Trong Huu Nguyen
24fb9b1a1d
refactor(handler/error): reduce log severity for spammy warnings
2026-05-08 07:52:14 +02:00
Trong Huu Nguyen
66d734358d
refactor: use errgroup for coordinated server lifecycle
...
Move metrics and probe listeners from main.go into server.go and
manage all servers with errgroup. This replaces log.Fatalf goroutines
with proper error propagation and ties all server lifetimes together
so a failure in any listener triggers graceful shutdown of the others.
2026-05-08 07:49:17 +02:00
Trong Huu Nguyen
b1e3732ec3
feat: add optional pprof debug endpoints on probe server
...
Enabled via --pprof-enabled flag. Exposes /debug/pprof/ routes on the
probe bind address for runtime profiling.
2026-05-07 16:01:13 +02:00
Trong Huu Nguyen
1939d18ba8
fix: add server timeouts to prevent goroutine/memory leak from idle keep-alive connections
...
Without IdleTimeout, clients holding keep-alive connections open indefinitely
caused server-side goroutines (and their ~16KB of buffers) to accumulate
linearly until OOM.
2026-05-07 16:01:11 +02:00
@x10an14-nav
a8f930e276
fix(haproxy-ingress): use valid PathType
...
Co-Authrode-By: @muni10 <sten.ivar.rokke@nav.no >
2026-05-06 13:50:56 +02:00
Kyrre Havik and GitHub
64e3329d61
Merge pull request #467 from nais/haproxy-migration-networkpolicy-dual-ingress
...
feature(haproxy): add haproxy-ingress concurrently with nginx during migration
2026-05-04 09:55:58 +02:00
Trong Huu Nguyen
93b14b00ad
ci: parallelize check and test via matrix
2026-04-27 09:35:12 +02:00
Trong Huu Nguyen
1c39244d6e
build(deps): bump various dependencies
2026-04-27 09:27:38 +02:00
Trong Huu Nguyen
8214442a20
ci: bump nais/platform-build-push-sign
2026-04-27 09:00:38 +02:00
@x10an14-nav
2af0f825ea
feature(haproxy): add haproxy-ingress concurrently with nginx during migration
2026-04-15 11:14:59 +02:00
Trong Huu Nguyen
b7b5f2e74e
build: go 1.26.2
2026-04-08 08:36:58 +02:00
Trong Huu Nguyen
0572c16770
build(deps): go mod tidy
2026-04-07 10:09:57 +02:00
Trong Huu Nguyen
d10d860ba4
build(deps): bump various dependencies
...
- go.opentelemetry.io/otel (and sub-packages): v1.42.0 -> v1.43.0
- github.com/lestrrat-go/httprc/v3: v3.0.4 -> v3.0.5
- github.com/nais/liberator: 20260305 -> 20260319
2026-04-07 08:39:37 +02:00
Trong Huu Nguyen
e0ee607cfe
ci: bump actions
2026-04-07 08:28:47 +02:00
Trong Huu Nguyen
317a897dd6
fix(charts): update prometheusrules with new dashboards
2026-03-31 13:44:58 +02:00
90984d4664
build(deps): bump google.golang.org/grpc from 1.79.2 to 1.79.3 ( #463 )
...
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go ) from 1.79.2 to 1.79.3.
- [Release notes](https://github.com/grpc/grpc-go/releases )
- [Commits](https://github.com/grpc/grpc-go/compare/v1.79.2...v1.79.3 )
---
updated-dependencies:
- dependency-name: google.golang.org/grpc
dependency-version: 1.79.3
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-19 09:47:01 +01:00
Trong Huu Nguyen
0ca1c2425c
fix(otel): disable internal logs from otel libraries
...
These logs are often seen only due to timeouts, connection errors or other downstream errors, which aren't actionable as consumers.
2026-03-18 08:43:07 +01:00
Trong Huu Nguyen
77b3e42198
build(deps): golang.org/x/crypto@v0.49.0
2026-03-18 08:39:13 +01:00
Trong Huu Nguyen
4d782b1181
ci: bump actions
2026-03-18 08:37:13 +01:00
Trong Huu Nguyen
8fba8ec5eb
build(deps): bump various dependencies
2026-03-10 08:33:50 +01:00
Trong Huu Nguyen
86a0a79969
build: go 1.26.1
2026-03-10 08:24:32 +01:00
Trong Huu Nguyen
0f792b44a2
chore: remove unused and outdated dashboard
2026-03-10 08:24:05 +01:00
Trong Huu Nguyen
319938ad87
feat(charts): add domain_hint configuration for forward-auth
2026-03-05 14:03:40 +01:00
fc86087153
build(deps): bump github.com/docker/cli ( #457 )
...
Bumps [github.com/docker/cli](https://github.com/docker/cli ) from 28.3.0+incompatible to 29.2.0+incompatible.
- [Commits](https://github.com/docker/cli/compare/v28.3.0...v29.2.0 )
---
updated-dependencies:
- dependency-name: github.com/docker/cli
dependency-version: 29.2.0+incompatible
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-05 08:22:36 +01:00
Trong Huu Nguyen
80eb291348
ci: bump nais/platform-build-push-sign
2026-03-03 10:18:38 +01:00
Trong Huu Nguyen
8a3256c487
ci: bump actions, don't pin cosign-release version
2026-03-03 10:08:19 +01:00
Trong Huu Nguyen
c02a932d72
feat(openid): support domain_hint for authorization grant
2026-03-03 09:38:24 +01:00
Trong Huu Nguyen
99b3154e28
build(deps): bump liberator, go-redis@v9.18.0, opentelemetry@v1.41.0
2026-03-03 08:50:55 +01:00
Trong Huu Nguyen
02842773d3
style: go fix
2026-03-03 08:35:11 +01:00
Trong Huu Nguyen
148cd9d8e1
build: go 1.26
2026-03-03 08:22:12 +01:00
Trong Huu Nguyen
@x10an14-nav
Kyrre HavikandGitHub
